Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: yE4ZHCnZB7KGYhV3xSHq+OfglsPTw6vt9e+djteGAZo=
Subject key identifier: 7E:AD:CD:9C:43:DB:55:5C:22:D8:8D:E0:65:DF:7F:48:B5:D8:68:29
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 019F1867EE0E3F51C67FE0A4DAB95A5350C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:32 +0000
Manifest this update: Tue 30 Jun 2026 12:01:32 +0000
Manifest next update: Wed 01 Jul 2026 12:01:32 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: juk7ie2qqPNryduT2Q7c7TkV3UIsc9cgsU3xGRYYz6Y=)
2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=)
3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=)
4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:ee:0e:3f:51:c6:7f:e0:a4:da:b9:5a:53:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Jun 30 12:01:32 2026 GMT
Not After : Jul 1 12:01:32 2026 GMT
Subject: CN=7eadcd9c43db555c22d88de065df7f48b5d86829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:8c:1a:cd:ab:8c:4b:73:f2:99:31:f3:f5:
67:84:36:3b:f6:55:d9:c8:63:7e:8b:69:f0:9b:fa:
8e:fb:de:a2:2a:29:51:3a:ed:11:17:bd:92:0b:f5:
d7:96:7b:69:e4:cb:a6:78:08:e4:3e:65:7d:0d:ac:
42:1a:a0:3f:85:b1:1b:08:eb:c5:74:5d:1e:82:66:
eb:76:0e:37:a3:f0:f2:69:65:3a:0b:41:ec:e1:a0:
67:58:bd:ba:ae:9e:5b:59:96:d3:dd:1c:c5:69:c8:
7a:61:33:a5:45:29:47:15:70:61:30:23:a6:b5:28:
aa:ce:73:d8:58:19:e2:15:ef:df:ef:ea:4a:61:32:
02:3c:ee:99:a6:81:1b:f4:41:2d:96:e3:92:f5:c6:
1c:f6:a3:a7:45:3a:55:d7:e8:24:8e:e3:4a:dd:2c:
5d:da:69:a5:67:7a:38:b4:1d:29:4f:64:07:08:39:
9a:97:26:cf:47:6a:6d:fb:a1:9a:50:39:c4:d6:64:
0f:8c:53:eb:7c:cf:61:ab:df:f9:33:24:b1:1a:50:
fa:46:74:e0:2c:99:f7:94:0f:a8:8d:dd:5e:b9:07:
9d:c1:5a:cc:07:86:47:ec:22:76:36:cd:0b:e6:d7:
6b:29:f4:0b:95:9f:e2:8f:41:f5:fb:a3:d5:81:11:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:CD:9C:43:DB:55:5C:22:D8:8D:E0:65:DF:7F:48:B5:D8:68:29
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:c7:75:32:d3:67:b4:6b:06:98:b0:cd:e6:5b:15:20:55:
37:51:89:67:64:a6:75:ae:76:97:5b:39:19:08:33:3b:52:60:
df:7a:0e:c5:43:34:d4:ec:ee:ec:82:cd:4a:ea:62:d7:34:c2:
fc:11:3e:04:e5:7d:ee:e3:d3:6b:18:da:ed:db:e7:dd:18:cc:
f4:59:b5:65:c2:ec:d8:c5:1b:8b:60:23:4f:4d:f3:51:8e:91:
bc:8b:41:08:ce:31:93:30:08:fb:2b:1e:9a:ca:61:8f:34:b7:
5f:87:68:ff:2a:f5:16:10:22:80:e5:33:76:c6:f9:da:8e:b9:
c3:f8:c6:a0:f4:1f:24:81:a8:0e:54:c6:db:74:62:95:04:1a:
6c:2d:ac:4a:a0:d6:58:73:7f:ab:b1:87:48:66:dd:2d:98:a1:
dd:a9:42:b8:3b:26:53:d5:79:2a:50:1c:8d:c6:c6:a2:18:fc:
92:f3:1c:97:f3:fc:e5:06:06:8b:26:0d:70:1e:c2:6c:80:32:
14:08:24:8a:3e:0d:d4:75:1e:53:a2:35:83:1b:fb:09:20:40:
ba:3c:ab:58:30:07:fa:32:09:da:67:d7:05:15:b7:00:09:7c:
99:91:51:ed:b6:51:36:7a:68:84:99:8e:dd:06:b6:ba:87:63:
24:02:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:57 2026 by rpki-client