Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: rFoSMwkPKKnr3knpvYdDzPHHsOSBb51gq3ucK+y13Oo=
Subject key identifier: 73:6A:D6:A0:D5:AF:51:58:D7:41:23:35:93:79:5A:B2:E6:93:56:F4
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019EB87CEF50A1D62968F38657E8F4EECBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: c978a/3dTxhgGrQctljqzEvjP/TntJahlewjfAZj/8g=)
2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ef:50:a1:d6:29:68:f3:86:57:e8:f4:ee:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=736ad6a0d5af5158d741233593795ab2e69356f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:87:27:4d:c4:67:60:82:f6:d3:a5:02:0d:
72:78:fb:2b:37:2f:09:95:89:3c:38:a2:a9:7e:c3:
82:c7:6c:8e:70:92:a3:bb:1a:52:84:ae:39:35:9a:
a1:75:03:ce:2f:25:a2:ae:48:4c:ea:e8:99:5f:4c:
6b:9d:d6:a8:8e:07:42:d8:e8:42:a0:1c:c5:ab:81:
c4:b2:4d:7b:4d:2d:d1:a8:38:bd:af:7c:17:9b:1a:
25:46:90:91:ff:7f:3c:2e:ac:12:d2:4a:49:d2:9d:
e3:c5:4b:3c:56:58:43:60:67:5a:7b:e2:2d:0e:0e:
4c:99:13:3a:6a:6f:79:76:36:e3:f5:10:07:af:08:
cb:16:06:ee:c5:eb:8f:5e:6b:d9:c6:0c:9b:d4:57:
89:38:2e:95:9a:c9:b3:5f:71:09:e2:38:3a:a8:5f:
dc:f8:b2:2f:12:76:97:a6:3f:08:b1:23:fe:87:9f:
ae:d7:b6:f7:e8:bc:52:42:4b:08:de:88:c2:01:8b:
b9:06:67:c3:ba:dd:d0:46:09:2f:a9:80:c4:b6:ab:
81:10:54:31:4e:4e:25:41:dc:b0:78:e1:1a:4e:c6:
6d:f5:54:26:d3:f4:fe:76:ee:d6:8a:91:a9:b7:1f:
12:39:36:68:ae:52:51:13:2f:85:b7:0b:8f:c1:a0:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:D6:A0:D5:AF:51:58:D7:41:23:35:93:79:5A:B2:E6:93:56:F4
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:04:6e:29:17:4e:f1:15:6e:e8:d7:bc:b0:fe:e7:7a:a5:c9:
64:f0:ec:8f:be:d6:a4:10:03:75:53:57:d9:d7:34:1e:e1:f1:
6d:62:58:8e:55:36:28:f5:b1:09:54:c1:1e:db:43:f8:df:95:
2f:f6:fb:8c:f5:4c:49:22:78:cc:f6:0c:c0:5d:74:b2:38:55:
ab:4b:01:23:01:21:fa:35:8c:dd:36:27:8b:d6:53:d6:c3:aa:
65:8f:36:36:0b:45:ca:05:f6:bd:6c:ba:d3:fc:77:37:4c:6a:
96:96:34:7b:21:be:4e:7a:a8:c9:6e:17:30:63:df:45:9a:c5:
c4:03:cd:88:34:e5:df:6e:85:d5:b5:2d:bd:5d:77:ab:80:40:
df:19:4b:63:80:25:dd:5a:2d:d8:ba:85:a7:75:3e:24:cb:0d:
5a:95:91:e8:d6:08:7b:c6:20:67:86:9d:93:d0:a6:62:22:2a:
1c:ec:7d:f3:ed:6d:8b:1a:d0:e9:16:45:c6:b7:90:8f:a4:e9:
78:07:75:43:ec:bc:10:4c:e8:38:f7:09:dc:56:5f:6a:e1:80:
f0:e6:f7:e5:8f:45:fa:b0:64:ab:03:c0:01:f1:1c:1c:d2:d2:
b5:0c:70:38:cb:80:94:f3:53:39:a5:e0:fa:4d:57:2c:8d:8a:
0e:7e:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:32:58 2026 by rpki-client