Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: pYl8uhnMymSJSf2WaITMVbGmd/fgGIB0xBEK1ece6M8=
Subject key identifier: A9:4B:1F:3B:5E:06:F0:D4:FF:D8:72:C3:EE:DD:3B:A1:7E:77:B0:02
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019EE88D947282CAE8D9AE5DD17932D18BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0BD2
Signing time: Sun 21 Jun 2026 05:00:52 +0000
Manifest this update: Sun 21 Jun 2026 05:00:52 +0000
Manifest next update: Mon 22 Jun 2026 05:00:52 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: kglXdciz7Yd8OAUNaiEs2pmajaokEc4HVOtx6s1c0S0=)
2: bHXHREeiIlZobWnv85pxED889VM.roa (hash: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8d:94:72:82:ca:e8:d9:ae:5d:d1:79:32:d1:8b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Jun 21 05:00:52 2026 GMT
Not After : Jun 22 05:00:52 2026 GMT
Subject: CN=a94b1f3b5e06f0d4ffd872c3eedd3ba17e77b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:84:e6:9c:2d:32:91:96:02:1e:86:24:e9:
8a:59:37:43:0f:e0:a9:d5:21:35:95:bd:0b:39:2a:
38:fe:f4:d7:4c:11:f2:85:d2:0b:37:2d:f5:4c:9d:
22:e8:7c:74:5d:ac:56:d2:f6:90:f3:97:38:cb:29:
85:40:a9:18:03:7d:93:35:12:40:a4:7f:ae:76:95:
62:83:60:a6:2c:7a:46:f1:e9:b1:31:ee:85:66:30:
b1:d4:e5:28:40:9d:6c:ae:e1:05:ce:91:ea:26:91:
91:32:43:1d:78:38:ca:16:3e:a6:9e:71:ca:1f:1e:
c3:f9:3c:a1:a9:89:f6:b7:de:fa:b9:28:87:e7:e3:
cb:51:f2:00:7a:61:9e:57:58:cd:31:a4:4a:e8:2c:
fb:c4:13:1d:31:fd:ae:83:3f:19:fb:c1:72:11:8d:
75:d4:75:a8:64:48:b4:37:df:d6:a1:56:c2:02:e4:
59:93:ca:c6:2b:31:6b:07:7f:3b:a2:b2:40:1d:c0:
f9:83:3b:a8:87:a3:07:7e:42:cf:b2:ec:ca:d0:96:
a1:13:81:da:ba:73:8f:a4:42:e1:d1:eb:3a:15:b4:
df:40:bc:f7:e8:d5:b7:bd:91:8b:7a:88:c4:be:25:
ab:57:f3:43:41:61:19:b3:0d:59:c1:63:5a:f5:14:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:1F:3B:5E:06:F0:D4:FF:D8:72:C3:EE:DD:3B:A1:7E:77:B0:02
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:8a:27:b7:83:6f:62:f7:08:ae:47:da:da:b7:a1:75:a7:
dc:ba:03:95:d6:9a:94:e9:50:f5:08:7c:93:2d:75:d1:c8:f6:
95:2b:7b:9c:2c:bc:ee:a9:70:f1:f6:70:b1:08:31:53:8c:9e:
84:22:fc:9f:8d:db:73:aa:eb:47:1d:16:60:c0:d2:e6:62:57:
fd:9a:ed:b4:46:9e:e8:b9:cc:6c:b6:4a:2c:71:db:5a:7a:2f:
8c:71:f2:3a:61:35:c3:4e:a9:e6:a8:c6:be:e0:5e:29:7c:39:
ff:bd:0f:39:2a:54:36:dc:a7:f2:3b:3d:63:5f:a8:e9:2a:fa:
45:72:c5:b5:94:51:36:d8:e5:4d:5d:42:b6:2c:42:5d:c6:ef:
59:53:5b:da:62:ea:5e:37:b8:e0:a4:50:0f:d0:04:b4:d1:1f:
ef:57:75:f1:ee:d9:4e:97:39:fa:c3:3a:f8:c9:60:0b:12:00:
6d:49:2f:8c:d1:84:b4:16:99:0b:a8:4b:7d:32:7b:f2:58:75:
7c:4f:71:c6:68:9f:21:65:5e:35:cc:d1:c8:e3:9b:30:7c:7f:
5d:31:37:d5:0f:ba:34:91:da:0c:e1:27:3a:05:14:79:6c:5e:
9e:b0:93:a2:8e:32:43:0d:2b:15:47:e5:8c:f8:b9:d4:0f:ea:
cd:23:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:06:57 2026 by rpki-client