Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: JWIJaZom5NGzLRMrHkP+MGwseTVi27COgX2kQ7/0wXw=
Subject key identifier: CB:B3:99:CF:E1:81:27:25:E0:D2:8D:5A:58:2F:89:71:23:78:85:EC
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019F183133132BD6011D4781D511B854F5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 18D9
Signing time: Tue 30 Jun 2026 11:01:45 +0000
Manifest this update: Tue 30 Jun 2026 11:01:45 +0000
Manifest next update: Wed 01 Jul 2026 11:01:45 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: IQv4YEF/L8w8hVPKAm69vObBaoMJaekCd6MTzii04Po=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:33:13:2b:d6:01:1d:47:81:d5:11:b8:54:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jun 30 11:01:45 2026 GMT
Not After : Jul 1 11:01:45 2026 GMT
Subject: CN=cbb399cfe1812725e0d28d5a582f8971237885ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:00:d7:67:77:e7:11:ce:99:80:0e:36:0b:
6c:52:f9:a9:7f:26:c2:b6:99:ca:0a:d5:47:e4:ee:
2c:51:ee:d2:0e:ac:de:04:41:09:81:67:0f:b2:25:
c3:7e:ce:37:69:5d:2a:b3:ce:76:f1:c0:b6:69:dd:
17:57:cf:f0:6f:87:9d:e4:cc:fb:d8:5c:f8:ef:fe:
e6:75:95:a0:2b:7d:94:eb:17:5a:8e:1a:f2:d8:39:
5e:e6:f7:f1:65:46:45:03:a6:ce:2f:27:7d:6e:7f:
a5:db:21:fc:31:63:4e:59:de:78:06:70:e4:ca:f8:
a1:8a:31:84:ec:df:78:cb:d4:4f:15:d0:e8:25:c9:
4b:74:8d:18:11:b3:fe:e3:5d:3e:a2:a3:34:c7:d1:
26:49:12:71:90:6f:f1:fc:3d:69:fb:93:0d:1d:07:
c6:5a:af:a8:a3:e5:b0:3d:ed:d8:02:e1:6a:9a:cc:
26:39:08:17:7c:75:5a:49:f1:b8:f3:d2:1d:3e:6f:
b9:25:13:f3:04:2c:f0:ae:e0:8f:d1:ac:f0:9c:9c:
ca:aa:45:8a:14:af:4f:ad:d7:de:05:fe:fa:bf:12:
36:55:a3:f7:7e:a4:ff:c2:6d:95:ed:9a:62:8d:1f:
db:ab:39:8b:a3:8a:80:3c:98:d9:47:96:0e:03:bb:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:99:CF:E1:81:27:25:E0:D2:8D:5A:58:2F:89:71:23:78:85:EC
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:f6:ec:98:45:d0:d7:5d:5a:08:2c:ec:01:7a:72:6f:01:
5a:f6:3d:3c:10:66:ce:83:65:2e:1a:72:82:80:5d:17:e2:60:
32:13:ae:b1:e0:1c:43:88:7f:d9:25:cb:a7:7b:d7:7d:a8:05:
89:43:46:19:c9:4b:70:ef:5f:b6:70:6b:02:ce:11:cb:e1:d0:
70:3f:c4:96:df:59:0e:a9:80:1c:49:c6:ea:d7:94:13:6f:3f:
ce:72:a7:f0:aa:30:11:96:de:62:c4:7c:4a:23:0e:b6:b7:37:
86:97:49:c3:4d:2c:63:0e:49:68:81:c5:22:07:1a:cf:f9:3b:
b7:38:89:cd:fa:82:7d:23:8c:fe:38:21:29:cf:d8:80:1a:9d:
39:56:19:fa:3f:fe:2d:4b:02:77:19:34:af:8f:c4:59:26:c0:
21:82:fc:35:5b:47:15:66:84:14:ef:54:b1:9d:7b:38:fe:67:
3c:ef:c1:1a:e2:51:08:2d:f6:6d:45:cc:d6:36:02:4a:9b:d2:
b0:32:38:c6:4a:c3:31:f4:7f:a1:2b:51:c3:20:71:05:6c:ae:
83:b3:15:d5:f9:a5:96:98:8a:20:6b:fa:65:78:a0:72:c5:06:
8c:b6:6f:02:5c:cc:4b:54:95:e7:15:3d:4f:46:88:76:85:61:
d9:b9:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:18 2026 by rpki-client