Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: wkwYpCibG7Glqv1Qdwt77s73SijT/JhwjNFHHcsk/0A=
Subject key identifier: E0:E9:D8:34:DA:28:5E:8B:60:2B:12:B7:8E:38:0E:C5:95:3C:C8:59
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019E9C97ADB5910C87DFB57E9405251158C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0D5F
Signing time: Sat 06 Jun 2026 11:00:46 +0000
Manifest this update: Sat 06 Jun 2026 11:00:46 +0000
Manifest next update: Sun 07 Jun 2026 11:00:46 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: fy/de9taxkrA6xwYRLdq4+bxnMmTyCADpV51zrORpZo=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:ad:b5:91:0c:87:df:b5:7e:94:05:25:11:58:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jun 6 11:00:46 2026 GMT
Not After : Jun 7 11:00:46 2026 GMT
Subject: CN=e0e9d834da285e8b602b12b78e380ec5953cc859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:31:3e:33:b9:44:1c:c6:1f:6c:27:18:40:
89:3c:2a:a8:1d:2a:d8:81:b9:f1:fb:54:bb:a0:ef:
cf:a3:40:8c:11:21:12:db:8e:ff:2d:de:2d:7c:e6:
2a:2c:df:91:1d:94:a5:7d:ac:37:fe:90:80:29:1a:
8c:7f:87:5f:34:0e:84:ca:14:be:67:b6:09:fc:27:
19:05:9d:80:7a:31:a5:25:92:b2:34:38:c4:84:53:
5b:82:99:9e:17:79:99:e6:7f:3e:a7:2e:96:13:9f:
0c:bf:af:2c:c6:5b:66:60:40:bc:0b:a0:81:95:75:
a3:63:1b:3e:41:e0:52:3a:f8:3f:a5:89:70:92:ee:
c3:d5:0e:96:a9:e5:39:aa:0b:3d:d9:11:df:1c:2b:
47:b4:e6:73:52:76:44:48:e3:95:3e:48:29:92:92:
39:11:db:8a:51:92:f2:3e:2b:2f:a6:93:d1:1a:5c:
93:5e:07:02:8d:da:13:7a:86:73:e3:2e:4b:5e:6d:
5f:22:f2:41:be:b7:1c:c3:38:3f:ba:7f:04:14:5e:
7f:06:9b:2b:7a:00:4f:76:8b:52:9d:3c:d1:76:cf:
88:6b:1e:9e:c3:40:2d:12:59:d9:ac:10:71:35:c3:
d1:be:0b:82:57:2d:ed:d6:4f:67:fb:00:ef:b3:ec:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:D8:34:DA:28:5E:8B:60:2B:12:B7:8E:38:0E:C5:95:3C:C8:59
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8e:e7:a3:89:b3:f6:31:00:39:6a:bc:6f:ec:a6:ef:f3:41:
37:0e:91:f4:8a:f4:2c:13:14:58:e9:99:37:50:94:7b:88:7e:
f6:84:27:77:a3:31:96:db:0a:56:31:c7:d5:12:ae:81:f8:3f:
27:4a:0f:00:30:b7:1e:d3:cc:67:5d:0d:d1:03:9f:05:59:d4:
b0:70:14:b4:55:0f:df:d3:80:0a:81:21:1e:a1:f8:b6:6b:80:
56:d5:0b:cb:ff:a4:8d:7d:14:61:52:6d:16:8d:b5:3b:b2:7f:
46:cd:36:bd:6f:fa:03:e2:45:15:da:52:d9:0e:24:9c:d7:fe:
52:7f:fc:a5:dd:bc:74:08:bf:d4:b2:a2:7d:fe:5e:46:76:57:
4b:f5:b9:4f:47:99:b4:61:fb:1d:7b:a4:a5:fd:d9:1e:eb:10:
d1:78:f7:db:19:53:ef:25:fb:95:86:a5:05:b1:2c:3f:eb:9e:
88:7e:fe:79:da:e5:c7:a4:99:32:9c:71:ed:ab:c2:65:fb:8a:
97:fd:0a:e3:e2:03:e1:37:25:0a:02:e8:0f:fa:77:7b:30:98:
a6:99:e8:65:44:0e:55:ee:6a:7a:26:a0:e9:34:f6:3b:8e:1c:
92:bd:cc:0e:f2:80:9a:20:d8:62:6d:bc:38:31:e3:30:7d:59:
41:79:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:27:13 2026 by rpki-client