Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: sHArF+t/BMfloiMy07bbOonnF1ylVp1kmBD0oCKAho8=
Subject key identifier: E9:18:2D:7D:AA:C3:1D:B9:C8:FB:AB:A2:DE:54:28:36:BB:76:19:79
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019EB92187CDA0B5ACC343F0720E1BC8931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0345
Signing time: Fri 12 Jun 2026 00:00:42 +0000
Manifest this update: Fri 12 Jun 2026 00:00:42 +0000
Manifest next update: Sat 13 Jun 2026 00:00:42 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: Z3Iw8fSUskPE/dokhCnIR1OpbSBzEAbgbgU7f20NTz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:87:cd:a0:b5:ac:c3:43:f0:72:0e:1b:c8:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Jun 12 00:00:42 2026 GMT
Not After : Jun 13 00:00:42 2026 GMT
Subject: CN=e9182d7daac31db9c8fbaba2de542836bb761979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:0d:ee:94:38:cb:ae:b5:a4:ab:55:f0:ec:
46:df:d9:f9:b6:8b:d1:41:fd:73:04:e1:0f:4d:24:
dc:d3:a9:48:8e:28:a4:90:eb:bc:61:32:8a:17:a3:
5f:b7:0d:8d:85:e0:4d:a6:8e:81:d1:ed:61:88:3f:
09:78:34:09:1e:b5:50:6b:44:9b:df:a0:45:2b:05:
a5:2a:ff:91:89:58:a6:51:07:3c:42:ba:dc:70:f6:
b3:4b:ab:1d:07:03:ee:33:c7:4f:89:29:78:b5:c6:
73:3b:1e:d0:4f:ec:2b:af:ea:8e:22:2f:c6:9c:0a:
be:3f:c5:a5:90:2f:08:8a:b8:7a:6e:91:45:3a:c3:
43:1a:15:8f:b3:54:0d:6a:1f:a9:81:25:1c:f8:9a:
31:6e:42:d1:bd:32:fc:af:31:ea:0a:3a:28:75:11:
cd:bc:77:5b:7d:45:e0:fa:01:34:42:ff:6a:3c:7b:
54:cb:9e:9a:0b:86:0b:32:21:0d:05:1c:fa:f9:7b:
6f:39:f5:47:ce:a5:38:82:e5:ef:cb:9b:13:84:11:
f5:ac:15:63:8a:43:7d:b9:26:71:5a:ab:16:f7:9b:
d4:c6:b2:82:7e:45:ef:5b:53:a4:10:ad:25:3a:03:
c1:4e:a6:7e:3c:44:f1:98:67:eb:68:34:c3:6d:93:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:2D:7D:AA:C3:1D:B9:C8:FB:AB:A2:DE:54:28:36:BB:76:19:79
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:71:28:d5:be:a0:79:42:36:19:fa:66:39:cf:84:3c:0b:b4:
ab:42:46:7f:08:e0:c2:cf:2f:bd:ba:8f:18:bf:b8:ce:83:79:
3b:1a:7d:c1:2b:bf:db:91:2b:bd:64:3b:30:eb:5b:14:6c:70:
38:07:a5:1c:ea:73:7e:9b:96:60:25:cf:4d:bd:3e:ea:00:3d:
f5:16:c1:3c:7e:94:ad:5c:d1:7f:3b:89:49:4a:f9:17:59:9f:
0e:f1:04:b8:51:3d:35:46:53:17:1d:8a:35:42:76:db:e0:1c:
ab:37:05:7b:32:c4:1e:2e:f1:a3:b0:43:df:3a:c6:db:9b:ca:
98:9a:95:8d:8f:c0:56:7c:df:fc:98:e7:15:50:19:19:ff:6d:
f4:fd:4a:b1:f3:ca:aa:dd:6b:73:ed:ba:88:60:80:fe:9e:49:
08:88:93:68:ec:f5:a3:8a:c8:ea:af:f2:74:a3:1e:1a:e3:7d:
1b:31:ba:aa:bc:a3:e7:db:b1:13:10:a2:46:25:55:3e:8d:33:
ad:43:6d:94:a4:1c:b3:ce:13:90:2d:4e:fa:37:46:52:b9:fe:
4d:a7:1a:a0:2a:73:15:68:03:2e:13:9b:6d:7b:d6:ae:28:66:
39:b5:47:ad:44:31:15:01:11:93:ad:60:3c:01:ef:9f:62:ab:
5a:22:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:19 2026 by rpki-client