Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier: qjOf95P6bS2BMOEkA0MOhrpt//usMbkovuF/OntJVlg=
Subject key identifier: 12:68:36:C5:50:36:36:28:DA:6C:82:EF:E3:05:6B:B2:F3:5D:05:E2
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 019F18307B73757C39EC430C8EE98B09BB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number: 0B99
Signing time: Tue 30 Jun 2026 11:00:58 +0000
Manifest this update: Tue 30 Jun 2026 11:00:58 +0000
Manifest next update: Wed 01 Jul 2026 11:00:58 +0000
Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: o5Yzr39W9zop/Woo0Hk9x1S2SfmMX8QsOFEJRfNK1oE=)
2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:7b:73:75:7c:39:ec:43:0c:8e:e9:8b:09:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Jun 30 11:00:58 2026 GMT
Not After : Jul 1 11:00:58 2026 GMT
Subject: CN=126836c550363628da6c82efe3056bb2f35d05e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:1d:9b:49:41:c6:cf:83:c5:a5:65:c8:9c:
5a:ee:09:50:e1:10:61:18:7d:6f:9a:93:6d:2a:9a:
ba:0e:ea:bf:21:63:6a:45:4d:fb:54:b6:5b:e3:bb:
36:86:00:f0:8c:fb:50:18:42:d3:71:fb:44:0f:97:
aa:e1:82:85:86:6b:17:3d:eb:ab:54:8c:73:9f:ab:
ff:36:25:4a:bb:e6:73:a1:ba:5c:af:71:94:51:c2:
5c:8a:65:f5:fe:0e:bd:ce:51:39:a1:23:7c:ad:65:
bf:42:ae:9c:f5:d6:ff:89:e1:5c:19:e9:3e:b0:23:
1b:94:6a:21:30:a0:f5:e4:9a:da:ce:5f:8c:07:2f:
22:b8:c7:38:df:75:fa:4d:38:8f:f1:57:15:38:31:
18:f7:8d:e2:64:8e:d4:fe:9d:6f:68:ff:01:36:a6:
3a:c0:aa:7a:6e:9b:be:ee:4d:8a:88:0a:7f:96:14:
e6:2c:57:74:62:fa:5b:f1:5f:17:bc:e7:e2:02:44:
e0:0b:eb:6c:aa:ee:6b:55:33:88:28:53:cb:bf:9d:
0f:a1:00:d5:0f:cc:9c:70:f2:d3:db:71:4c:43:79:
7c:25:46:d4:c2:82:59:33:1b:2d:e2:9e:ec:4d:f9:
a9:8f:70:28:e2:0c:7d:b3:99:e4:c3:2c:d1:0c:0d:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:36:C5:50:36:36:28:DA:6C:82:EF:E3:05:6B:B2:F3:5D:05:E2
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:66:25:00:05:eb:ac:06:8e:4b:17:e3:fd:f7:f6:10:da:
82:e1:62:d9:09:b0:5e:7c:19:26:a0:32:52:56:4e:10:c7:0e:
82:7d:f3:20:03:00:04:ce:7f:75:43:40:7a:b8:e1:68:09:64:
4e:39:67:f3:e8:2a:93:e8:33:65:89:21:85:94:95:9c:c9:41:
79:a7:06:7d:91:c3:1a:f8:09:d4:30:e9:8f:f8:b8:51:f5:00:
5d:d5:4a:89:21:88:55:95:be:39:b4:20:56:3d:9f:1d:b2:cd:
cf:05:e5:d1:98:d7:00:b7:60:12:2c:15:27:37:09:ff:c2:1a:
5f:2f:39:b5:95:45:e9:8d:b8:51:d6:5f:d3:a4:64:5e:ec:ce:
65:9f:d9:d6:a6:b8:9f:ae:66:52:cd:ca:f6:01:e4:42:f4:15:
bc:bf:87:97:ad:28:3c:1f:6e:69:ab:c3:26:c0:e8:59:bf:6d:
9a:dc:bf:d3:d8:4d:06:dc:96:e0:e8:96:db:03:d8:31:6a:8b:
23:97:2b:0d:da:1d:4d:10:a6:13:3b:3b:3d:52:55:ed:3a:1b:
28:bb:1d:26:a5:42:1b:a5:f0:21:85:80:c5:b0:76:98:5e:4b:
9b:f8:cb:df:57:e3:88:4e:96:fe:99:8d:04:59:0b:66:07:69:
12:17:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:45 2026 by rpki-client