Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: 88l4n/zLwGJzPsfMDiEO/S5dUm50PLaP7dNKpJZZwHA=
Subject key identifier: D4:73:8A:8F:47:42:97:9C:89:0A:E2:C6:74:7A:49:FC:AB:63:C8:40
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019F17C228E37BFF2B810BF3EBB402D4B3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 19A2
Signing time: Tue 30 Jun 2026 09:00:27 +0000
Manifest this update: Tue 30 Jun 2026 09:00:27 +0000
Manifest next update: Wed 01 Jul 2026 09:00:27 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: ot2njhK0GwFkPa1EtN9tnSvpCSdx97MRXg2L4GwzvOw=)
2: HJaqxqktn6jSURWfLmaFrTGw4k0.roa (hash: nCPkWfg8fjBLOL82SkTcjqLkB+FTPueLRpgWHpz5rHo=)
3: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (hash: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:28:e3:7b:ff:2b:81:0b:f3:eb:b4:02:d4:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jun 30 09:00:27 2026 GMT
Not After : Jul 1 09:00:27 2026 GMT
Subject: CN=d4738a8f4742979c890ae2c6747a49fcab63c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:60:a1:6c:92:18:56:2e:a6:a7:f1:29:c8:
e3:5f:c6:a8:f5:ad:4d:77:cc:de:6a:41:64:ac:35:
01:db:2c:59:ba:0e:1d:8c:09:71:c5:f9:9d:4a:44:
2e:ce:1e:4c:7f:18:82:00:35:b7:11:60:95:bb:83:
b8:bd:7a:33:38:5d:59:6e:73:02:09:73:85:0f:e4:
aa:84:52:97:50:97:4d:65:35:3b:72:29:dc:23:35:
c2:e7:e3:15:fc:b1:a8:f6:26:24:f8:b9:c0:3a:a2:
60:ec:de:0b:30:53:f7:3f:53:0f:5a:c1:c0:44:92:
0a:63:f0:43:83:d4:26:83:cb:a7:b8:b4:18:15:74:
1b:cd:3b:43:44:93:6d:df:23:43:4c:08:a3:b5:92:
20:d9:be:67:74:c9:88:8b:ed:9b:3c:81:9e:8e:5a:
46:dc:d8:20:34:a3:17:51:ca:b6:f3:8a:3e:a3:4a:
21:1b:43:45:e6:a0:9c:32:b5:1f:19:e8:d9:8b:06:
8a:38:8e:3b:0b:25:45:1f:b7:47:54:88:12:db:37:
74:ae:f4:80:87:79:00:87:21:0a:89:6f:f8:ae:df:
bc:ec:a7:5e:ed:09:69:65:cc:7a:07:64:7d:7f:67:
dc:65:dd:ef:bf:e2:b6:2c:cd:ae:e3:64:ae:16:22:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:8A:8F:47:42:97:9C:89:0A:E2:C6:74:7A:49:FC:AB:63:C8:40
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:58:16:59:47:8c:5e:4c:66:c3:09:7d:82:b9:d1:0e:b9:
a9:8b:b7:ff:53:68:c3:d2:39:a7:2c:c1:f7:6c:7b:b9:f0:03:
f0:22:6e:f0:35:3f:3c:74:9f:cf:0f:c4:72:71:de:6c:8c:5e:
f6:94:6a:30:3b:7a:0a:02:79:bf:56:47:10:50:13:50:88:d3:
41:a7:8d:98:20:ac:e1:50:71:88:45:21:ae:42:95:57:56:83:
a6:00:ce:38:cc:a0:87:e5:51:01:a6:7b:f4:59:a3:c6:e6:65:
61:19:92:a2:5b:d3:63:27:f0:6f:98:b1:ec:33:2e:81:65:aa:
90:90:f2:d0:ed:31:63:46:5b:49:dd:30:41:fc:7b:af:64:1d:
d4:94:1e:37:9c:e0:91:a9:bc:24:5a:6b:60:66:7b:af:a2:cc:
23:92:cd:88:71:0e:66:55:6c:22:e9:2c:45:42:41:7b:3a:19:
88:08:8d:2c:82:f0:76:ee:d5:a3:c1:6d:b4:94:c1:ec:90:4c:
99:20:37:97:60:f9:e9:f1:54:15:bb:ed:4d:51:c3:8d:55:1e:
4f:7b:e4:b3:f3:a4:25:dd:e0:ba:62:db:d3:f2:4b:6a:08:49:
22:bf:3f:fa:38:91:c0:09:2a:45:26:9f:71:de:a5:29:7c:06:
53:9f:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:22 2026 by rpki-client