Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: pSDLqGSyKVYAbw2pdnvoqLZ4zHrl62hNNuUOTGSxSRA=
Subject key identifier: 27:2C:A0:F2:15:6C:8C:89:F9:C4:75:DC:B4:E5:A5:8C:C6:55:77:A5
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019F134185D6BB2E82104E412CCAB612F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1990
Signing time: Mon 29 Jun 2026 12:01:28 +0000
Manifest this update: Mon 29 Jun 2026 12:01:28 +0000
Manifest next update: Tue 30 Jun 2026 12:01:28 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: h1Sp9nbZQ9+Chluii7B2+qtuMe3FBLXmCW7elFpicbk=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:85:d6:bb:2e:82:10:4e:41:2c:ca:b6:12:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 29 12:01:28 2026 GMT
Not After : Jun 30 12:01:28 2026 GMT
Subject: CN=272ca0f2156c8c89f9c475dcb4e5a58cc65577a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:0f:32:1a:97:e4:fe:4a:f7:6d:3b:f4:83:
f4:4b:b6:b5:11:43:1a:32:59:84:8a:2f:62:94:6c:
91:89:42:16:26:04:4d:ab:2e:0e:4f:dc:b4:63:75:
55:54:fd:bd:83:db:0f:0e:6b:06:cc:2b:3a:7c:52:
c6:c9:c1:3a:24:86:34:e9:4c:06:ed:20:b3:5a:3b:
96:c3:c7:12:0d:a9:b9:90:75:00:83:c4:f8:5a:59:
c4:ed:30:70:3b:05:b0:b0:2c:f9:d8:61:3c:5f:be:
bf:04:a7:d9:c9:b2:a0:3f:a9:9f:2a:50:51:a7:c3:
a2:a4:06:4b:39:53:f3:10:1b:48:06:b3:33:48:35:
ac:2b:01:8a:03:07:9d:1e:18:9c:f4:d5:25:27:e5:
fe:e6:ce:1c:b2:dd:59:64:a1:89:e1:0d:85:c5:96:
df:ff:b6:6e:4d:60:77:f8:dd:ca:7a:dd:f5:94:31:
f6:67:60:82:53:f5:92:d9:45:08:d4:cf:1e:e4:4b:
c1:66:e3:5c:f9:cc:62:55:09:1f:3f:b5:39:2d:1f:
96:98:81:0b:5d:c9:8f:d1:18:ae:55:64:21:62:4a:
d4:89:87:b9:4d:af:2b:fb:3b:8a:2d:37:7b:65:91:
da:6d:c1:7c:f8:30:bc:f8:49:a7:5a:80:f0:7e:b6:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2C:A0:F2:15:6C:8C:89:F9:C4:75:DC:B4:E5:A5:8C:C6:55:77:A5
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:e0:01:b1:82:0c:75:b2:63:d2:e0:04:52:3b:2e:c7:ce:
ac:09:82:ac:c1:6b:ef:28:cd:f8:4a:f5:74:9a:2b:bd:55:c0:
9a:18:15:16:67:03:c2:66:9c:5c:e0:6d:30:2e:85:7e:58:59:
68:bf:a3:1e:c9:75:6b:ea:f9:9a:3c:3a:63:b6:e7:7d:07:cf:
80:ae:6d:92:31:88:93:78:ed:99:36:fb:2e:32:b6:c6:3e:1f:
bb:7c:1e:9b:24:5a:fe:bf:f2:87:24:bb:97:61:3f:93:0f:88:
d0:7e:68:d0:cd:f6:56:5c:b7:6d:1d:d8:10:b7:50:e5:7b:a0:
12:40:7a:34:46:02:39:fe:d5:d0:03:de:ff:fa:18:e4:ba:12:
c5:ca:2f:97:f5:a8:82:56:bf:c1:f3:90:5a:bb:a3:f0:9a:88:
c5:6d:26:00:7a:17:24:e4:35:6d:14:2c:7d:fa:df:71:0a:11:
6f:60:f0:98:ab:0b:a9:2f:a9:c3:7a:86:e2:66:17:e3:c2:b6:
a6:b7:bb:29:1b:be:e4:d4:63:de:83:cf:d0:00:a2:f8:6a:ab:
8e:d5:8c:c6:04:86:f1:ec:85:a0:fd:ff:ee:b8:1a:07:e9:85:
12:b5:fc:8d:c9:92:97:d8:79:70:82:92:cb:b8:cd:89:65:15:
82:1e:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:36:30 2026 by rpki-client