Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: vSdPzC/KZhRaAQuwOo/jTLriJKTLz82QVYR4hmFhtYk=
Subject key identifier: 0A:73:81:7E:D7:8C:10:9F:BD:1D:88:A2:A6:C1:0A:30:60:E9:28:EF
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 019EB8460DCBA23789FF4415461EF2BB94E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 20:00:59 +0000
Manifest this update: Thu 11 Jun 2026 20:00:59 +0000
Manifest next update: Fri 12 Jun 2026 20:00:59 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: rlfeGgTSy05oCBPO5Ssdj6ysa8SYzVO/Gp1rDHfSMRw=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:0d:cb:a2:37:89:ff:44:15:46:1e:f2:bb:94:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jun 11 20:00:59 2026 GMT
Not After : Jun 12 20:00:59 2026 GMT
Subject: CN=0a73817ed78c109fbd1d88a2a6c10a3060e928ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:4c:ef:94:2b:e7:fe:79:c7:6d:fb:ad:b0:
de:c2:ef:0e:80:00:6c:c8:7f:7c:74:54:e9:a7:4a:
eb:ce:de:74:6e:bf:53:c2:f1:38:9a:4a:0c:47:b2:
9b:f2:d7:0b:2d:d2:36:da:64:99:a6:c6:2b:b0:02:
8f:8b:14:2d:3c:72:11:20:6f:a7:67:79:a2:e5:40:
28:ad:31:4d:05:65:11:63:98:b1:f4:cd:3f:38:03:
bd:2f:42:6e:34:36:bb:9d:cd:eb:ff:08:cd:f9:3c:
5b:49:9c:c9:14:be:65:dc:a5:e6:10:6b:e4:6e:01:
6c:49:fc:51:60:4d:7d:bd:0d:6a:9b:20:12:bb:89:
70:60:e3:87:3e:9a:b6:09:1e:e9:24:1e:dc:15:a4:
f6:25:96:52:aa:68:02:41:b5:66:1e:3b:1f:72:6a:
1d:60:ff:d8:11:df:77:e3:47:ca:34:75:41:12:b1:
45:3c:9e:cd:86:8f:e2:d5:df:4a:ee:a5:6c:5b:d2:
d7:10:67:19:bf:dc:b6:d5:e6:dd:00:bc:a3:d6:6d:
db:09:65:80:46:13:0f:0f:b2:0a:d6:f1:a9:ff:32:
50:54:14:96:be:76:a5:02:01:22:45:87:cd:d3:42:
0e:39:40:6d:95:a4:cc:64:d8:ea:8f:8c:a3:eb:ea:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:81:7E:D7:8C:10:9F:BD:1D:88:A2:A6:C1:0A:30:60:E9:28:EF
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:4f:59:24:99:91:4d:e0:7c:d8:e5:9d:f6:c8:92:ab:2d:
8a:89:96:d3:f8:83:69:17:37:1a:a0:e2:cd:d9:ac:fd:0c:f6:
c0:51:b8:4d:8d:47:f4:5d:1a:96:09:9c:88:4b:d6:dd:17:92:
51:65:86:a9:f7:e0:81:df:35:80:0e:a6:f2:48:6f:dd:11:5a:
af:28:89:2b:67:79:c2:4a:2c:eb:0a:67:a2:ba:6e:70:20:eb:
0d:81:12:3f:44:22:12:6f:84:2d:07:96:74:5c:9a:e9:51:1c:
9a:a5:5f:f0:7b:68:09:33:b8:59:ec:7e:29:e5:7e:a5:23:ec:
55:29:ee:2d:6e:3e:7a:0c:21:3e:33:4d:01:f1:f6:d4:59:98:
da:a9:d3:ae:07:0d:4a:65:5c:57:ff:60:4f:58:5a:62:e1:f6:
3f:f5:1f:44:db:2b:39:c6:67:00:0c:42:54:1c:30:9a:99:4a:
d7:dc:35:f7:20:da:3f:48:cc:7d:68:b9:5b:7f:59:e5:54:c1:
20:a8:d1:05:1d:8a:2c:80:a4:a2:57:d4:f1:f7:47:6d:70:6a:
48:3b:16:db:dc:7b:ba:8f:e3:6c:d4:d4:3a:b0:c3:83:9a:49:
20:cf:46:6e:3d:8f:9d:7b:40:38:1b:ec:e7:ef:a7:1f:e2:0a:
2c:05:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:04 2026 by rpki-client