Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: cS54AWo9VepNTa7GQTZmATMviUaii/P7BRhbmbNtsnI=
Subject key identifier: 63:BF:BE:1D:BF:96:A8:A0:71:00:89:A6:71:65:80:64:BB:FF:C5:43
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019EC66F8E7C4885B09123C1777DED1B39C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 16A3
Signing time: Sun 14 Jun 2026 14:01:00 +0000
Manifest this update: Sun 14 Jun 2026 14:01:00 +0000
Manifest next update: Mon 15 Jun 2026 14:01:00 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: pcjhcaJ+BjeZTgwskfWVCIE35fjR4eb2voOQBu8a3Nw=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:6f:8e:7c:48:85:b0:91:23:c1:77:7d:ed:1b:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jun 14 14:01:00 2026 GMT
Not After : Jun 15 14:01:00 2026 GMT
Subject: CN=63bfbe1dbf96a8a0710089a671658064bbffc543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:0b:9b:3b:1d:86:5f:54:1e:80:73:b2:0d:
84:5c:54:90:35:d3:73:1b:ee:f1:3d:67:f9:ad:7d:
eb:59:57:99:66:02:03:5b:79:10:e2:cc:01:4c:69:
09:77:09:2e:58:dd:c3:0b:19:55:1a:65:0e:86:19:
b8:90:78:11:0e:cb:80:03:c3:60:a9:31:36:90:97:
c4:fd:29:49:64:98:6b:c0:7f:7d:7f:02:06:77:02:
95:05:a7:78:5e:1e:99:09:c7:ca:f1:20:b2:a3:28:
ab:56:31:b5:b2:ad:88:5f:7f:a2:23:b6:30:98:b6:
fa:f0:0f:7d:4c:33:8a:c8:3d:cd:0a:67:df:28:ea:
ef:12:8a:5f:ff:80:b2:62:9b:2a:5a:19:54:0d:f2:
3c:8b:ab:59:28:d7:8a:eb:c9:ac:89:88:bf:a0:34:
b7:9b:c3:0b:8d:90:2a:1c:45:79:e9:9b:6a:5b:e1:
fe:00:0c:01:17:63:be:23:db:68:9c:58:67:83:23:
c0:08:88:39:da:ed:fe:b9:8a:59:53:49:a4:df:60:
d1:e3:91:96:c7:4b:9f:76:ec:b2:c7:0c:76:c2:d3:
b5:4c:c7:b6:f2:91:d5:64:79:21:e9:09:b7:32:39:
39:0a:b7:82:64:a4:af:bc:32:72:ea:81:b5:7e:e5:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:BE:1D:BF:96:A8:A0:71:00:89:A6:71:65:80:64:BB:FF:C5:43
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:d3:1f:6e:81:d6:1a:92:7d:3f:bb:7b:09:b7:04:7b:23:
aa:de:f4:19:e6:e7:c1:5c:95:6b:03:09:81:03:c4:46:75:e9:
29:4c:7f:7c:97:6a:a2:e0:64:a2:02:a6:4f:c3:0f:4e:a4:b8:
c2:ec:aa:9b:ab:bc:ed:40:0f:59:1d:50:16:6b:0a:23:fe:8c:
f4:db:77:98:37:d8:30:78:0d:8f:7b:62:35:37:27:99:fa:31:
66:0b:17:63:08:57:eb:6f:87:79:e9:df:de:8b:7c:f7:d8:60:
0b:09:1b:09:c3:c5:22:bb:0b:04:a0:e9:3e:2d:3a:8d:c1:aa:
c7:d1:0f:ae:92:12:12:41:26:27:48:8b:ec:5e:d8:45:62:86:
e0:87:a9:56:8a:d8:83:95:4c:cb:c6:15:b6:17:27:ac:44:46:
4c:24:6b:32:09:a6:29:48:7a:ee:bc:6e:5a:0e:3f:33:8f:10:
90:df:95:c4:bd:f8:e9:b6:c3:51:d4:7f:56:44:3e:4e:76:ae:
9e:92:cf:8a:d3:fb:5b:6f:30:9f:15:2d:e5:b1:15:50:e2:d9:
e3:d2:a7:26:07:ba:e8:b0:47:2b:c2:24:ab:92:39:6c:d6:88:
e9:70:00:7b:e4:e9:8d:c6:60:0c:5d:1a:54:66:d6:e6:e0:ea:
b7:59:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 00:24:24 2026 by rpki-client