Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: g1oUZaJGEZuy/IUmS20W9BsoZRcbo4adK9kygu6l5VQ=
Subject key identifier: 31:C5:0D:C4:AA:10:D0:2D:52:14:02:98:4A:1D:C0:2A:9C:96:CC:B4
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019F17C38865E920F463712F6D4E6205F345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 173B
Signing time: Tue 30 Jun 2026 09:01:58 +0000
Manifest this update: Tue 30 Jun 2026 09:01:58 +0000
Manifest next update: Wed 01 Jul 2026 09:01:58 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: aDqP/JoYtr3m/xYzQtLqNsfHnY3m73zhdSYjGoC5yHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:88:65:e9:20:f4:63:71:2f:6d:4e:62:05:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Jun 30 09:01:58 2026 GMT
Not After : Jul 1 09:01:58 2026 GMT
Subject: CN=31c50dc4aa10d02d521402984a1dc02a9c96ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:cd:ae:40:9f:91:f9:f7:8c:e5:7b:75:af:
4a:78:c8:95:82:2a:8f:9a:2f:1b:58:2a:43:e2:b2:
ea:ba:9d:f4:09:16:f2:e1:88:23:5a:c0:ba:44:05:
04:54:65:74:5d:69:74:7d:48:b9:57:64:db:a7:31:
e5:6e:b3:f5:b4:bb:53:4c:28:4f:6d:37:1b:31:ed:
9f:ed:01:61:bb:4b:d1:29:fa:d3:7c:ff:0b:25:99:
1d:e9:a2:5f:44:4b:37:0d:2a:1a:18:fe:63:b2:9c:
09:67:66:79:b8:d4:af:eb:7c:82:1d:7d:2a:c7:97:
a4:66:3d:c7:c1:0a:98:a5:1c:9d:d2:c6:de:7d:9e:
3a:4f:f8:70:3b:bb:6d:e5:23:d4:d2:0b:14:78:6c:
54:fc:c4:35:62:07:23:8a:5c:11:b4:fd:2a:a2:d3:
76:f1:26:94:40:ac:eb:ba:51:a9:b4:9c:e4:16:a3:
be:4e:7b:c6:b5:e3:e1:64:83:54:bf:c3:92:d3:92:
5a:93:ab:40:b4:1a:67:e5:74:ba:81:0f:0e:58:91:
fd:9b:ce:03:62:7f:98:ec:ab:dc:42:d2:26:3f:fa:
2a:e7:c9:29:fe:fd:e6:8e:dc:83:f0:0b:2c:06:4f:
8c:22:17:69:ee:54:08:5a:91:39:25:7c:c8:8a:6a:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:0D:C4:AA:10:D0:2D:52:14:02:98:4A:1D:C0:2A:9C:96:CC:B4
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:f1:09:58:16:04:0d:71:86:b0:cf:de:89:5b:c8:47:db:
84:42:a7:ba:06:62:c3:3b:5c:36:49:8a:41:80:bb:ff:2e:80:
a5:1a:22:e9:77:16:8a:0f:8b:df:83:e3:c6:9f:59:d7:b8:c3:
ed:4c:ba:cb:b6:a6:9d:34:8d:33:8b:e9:f7:4a:a5:89:bf:61:
18:94:51:42:ff:ed:a0:f2:8d:01:81:c2:2f:98:dd:08:32:d7:
c1:16:40:25:29:3d:03:b3:14:db:27:de:7c:75:73:42:b6:d4:
15:6f:f8:c5:18:b7:19:03:27:ad:5d:02:4f:b7:1f:58:10:d4:
77:00:19:fd:6f:54:0a:af:aa:0a:06:78:65:8e:c7:75:8e:1e:
d6:b4:18:f3:4c:40:eb:de:fe:db:bf:5b:be:f3:0e:c6:85:14:
48:f8:a5:d2:c5:ad:e1:ee:71:14:a6:95:c6:a3:0a:4d:04:00:
f2:69:b0:1b:1c:6b:0f:a4:34:4a:d6:67:a3:3c:f8:f3:ed:08:
9f:34:e8:60:ed:16:bc:01:02:6c:25:df:bb:7e:c8:67:be:53:
a3:ca:39:4d:23:2f:f9:f6:4c:20:51:f1:df:9e:31:65:6d:63:
5d:90:24:28:18:6c:43:a9:1d:81:32:3a:7d:5a:7c:33:c4:8b:
26:20:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:08 2026 by rpki-client