Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: 8CoMdyGbrGQjZ23WcdZh0Mr5Rn8W+CZltWUeHpctg3U=
Subject key identifier: C2:5B:1A:43:3B:7D:14:E5:77:B6:1C:37:4E:93:ED:74:4F:BE:84:D7
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019EFCB95954E1C3263096635BE7F62CA0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 01DE
Signing time: Thu 25 Jun 2026 03:01:05 +0000
Manifest this update: Thu 25 Jun 2026 03:01:05 +0000
Manifest next update: Fri 26 Jun 2026 03:01:05 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: QOW0+Mgrbl+fDtvIEPcbxLivsoBLUN+h+eRIKEKPTmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:59:54:e1:c3:26:30:96:63:5b:e7:f6:2c:a0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Jun 25 03:01:05 2026 GMT
Not After : Jun 26 03:01:05 2026 GMT
Subject: CN=c25b1a433b7d14e577b61c374e93ed744fbe84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:bd:5d:de:76:ab:91:33:34:fc:b3:1c:76:
24:56:80:d8:64:2e:89:6b:cf:28:3f:c2:63:24:c0:
06:ec:45:15:12:8e:17:1e:1e:59:0d:77:50:5d:df:
a5:9f:e8:49:47:00:67:95:df:fd:e8:99:6f:c7:ff:
d3:83:d3:5a:0c:49:84:50:69:41:83:9e:21:ae:b4:
66:f2:8a:93:d0:d1:46:7c:b1:8e:5a:ec:b4:84:64:
a1:87:43:05:34:d0:e8:59:77:58:29:74:5c:81:7a:
95:5c:96:d0:cd:59:c5:45:c2:cc:fa:89:e2:f2:c7:
a7:12:e6:05:90:8c:0f:2d:19:66:9f:c3:c0:3b:df:
b2:9f:d5:04:8b:50:36:58:0a:d5:cd:b6:0f:bd:59:
f6:a5:34:2e:37:ed:dd:27:eb:c1:36:b8:f9:d1:d4:
d5:ca:cd:81:9a:d7:6c:fc:21:ec:56:b1:bc:03:fa:
06:9e:ab:3e:b6:03:c0:cd:c1:cd:86:17:9a:dc:80:
a6:a7:f2:2b:6e:a7:cb:9b:e2:32:69:37:58:9d:54:
62:25:ea:1d:36:7f:f8:13:77:0b:63:1a:18:37:af:
4b:f7:dc:2b:b2:c8:09:59:c4:f6:5d:4b:dd:b8:d3:
cc:0c:ae:10:0e:f1:3e:63:5f:d6:33:51:86:a4:66:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:1A:43:3B:7D:14:E5:77:B6:1C:37:4E:93:ED:74:4F:BE:84:D7
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:20:51:d4:94:7b:bf:81:c6:b1:5a:59:e1:bf:ff:0a:be:2a:
28:63:11:c5:42:83:7c:5f:07:34:e7:b5:ee:14:ae:1e:54:5f:
6e:54:fe:ef:2d:a8:dd:45:2c:ab:26:da:bc:a0:7a:f0:94:e9:
48:a3:df:f8:b2:bf:5c:93:c1:e9:99:fb:15:8d:38:08:e7:9a:
f7:80:8e:29:08:b1:d4:00:4d:44:62:8c:59:3f:ab:0c:44:7e:
8f:31:3b:df:6e:bf:1c:4c:4f:ba:13:a6:ca:c7:74:c1:61:3f:
7f:cb:87:cf:b7:58:2f:48:e3:69:2e:f9:81:07:f7:22:be:a5:
4b:15:55:22:45:69:80:a3:1b:1a:98:ac:09:b3:2c:7d:24:26:
1a:5a:ce:e7:c7:65:e5:52:b5:c9:40:d4:83:9a:a3:c1:5d:0a:
ec:54:b9:0e:d6:9a:10:f7:37:41:6c:5b:62:1d:63:ef:25:49:
57:e2:a5:b7:d0:bd:71:36:b8:57:eb:d5:ca:09:dd:26:a9:97:
83:97:6f:de:74:6a:06:fa:32:6c:26:d5:93:28:a3:a7:80:f3:
58:cb:98:ba:b6:d3:6f:a5:8e:a5:e5:b0:69:ab:67:67:cc:ba:
63:98:c0:89:f1:db:96:09:5e:e3:fe:b9:94:51:80:b0:88:e5:
e0:8c:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:16 2026 by rpki-client