Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: t1Of4Nb8ntvl9qkzRln5bR91y3k5xSgyeyK133C1bXg=
Subject key identifier: B3:EF:A2:F7:8A:10:EC:22:1F:85:3B:C3:6F:D7:66:F7:72:B6:98:AB
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019EB62107F9B65ECAC3E3B0A36D6A690EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 18E6
Signing time: Thu 11 Jun 2026 10:01:18 +0000
Manifest this update: Thu 11 Jun 2026 10:01:18 +0000
Manifest next update: Fri 12 Jun 2026 10:01:18 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: 8z+Bpna0awoPVLYYPWQlsbHI6Hc18vnHSvZVucjG+cU=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:07:f9:b6:5e:ca:c3:e3:b0:a3:6d:6a:69:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jun 11 10:01:18 2026 GMT
Not After : Jun 12 10:01:18 2026 GMT
Subject: CN=b3efa2f78a10ec221f853bc36fd766f772b698ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:51:44:8e:b0:2e:06:8d:b9:d0:2c:43:ca:
5c:20:50:60:aa:2f:65:68:37:a8:d0:5c:2b:7b:4f:
db:cb:9a:53:b9:96:38:b8:88:50:e9:1a:c3:74:77:
05:e4:20:18:50:a4:2f:18:6f:d3:a0:e6:67:05:db:
55:00:fa:65:39:d7:97:90:0a:15:d2:3e:84:9f:5e:
a0:c5:98:3b:04:fe:00:47:1f:a6:cd:3d:6a:eb:98:
7a:68:e1:a2:07:49:28:12:16:9d:92:03:19:b7:11:
e5:3c:dc:59:58:80:82:22:a7:74:7f:f2:c1:99:ff:
b3:4b:a5:5f:cc:46:9a:f8:85:b6:6a:94:33:62:9d:
16:30:02:44:00:87:b5:2e:54:77:2c:fa:58:7b:e7:
c2:df:2d:4d:fe:19:5b:cd:15:98:0c:d7:93:d4:d0:
0d:6b:bf:40:b1:d3:4c:9e:e1:6b:ce:be:15:96:fc:
a4:4a:2f:9b:33:36:d9:b3:7e:6d:85:f0:65:e8:10:
27:d4:6f:ed:e2:0e:ce:64:17:10:1b:5a:04:76:80:
40:c2:74:69:cc:d0:db:69:85:4b:1f:36:20:44:0a:
db:b0:a7:ea:35:62:28:3d:d1:5e:f4:58:9b:40:ff:
54:4d:d7:ca:cb:ae:fd:c2:7c:6a:ab:8f:0f:16:5f:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:A2:F7:8A:10:EC:22:1F:85:3B:C3:6F:D7:66:F7:72:B6:98:AB
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8a:c7:e1:ad:c3:4c:a6:fd:33:ba:89:c3:98:01:f4:46:2f:
81:47:9f:81:02:36:52:74:63:87:2e:37:70:1e:df:42:47:3d:
4d:c2:21:7f:f9:d7:a3:f1:7b:db:00:05:2e:49:91:0c:b0:3a:
fb:9a:c2:be:13:04:97:76:5f:74:35:2b:5f:ad:2f:e1:66:6d:
98:b6:2e:38:a8:6c:37:51:ee:2b:55:95:74:07:58:40:a7:ed:
63:14:08:46:b6:26:03:ed:4e:dc:d3:ac:6d:09:c3:a3:47:f7:
9e:67:98:e6:7d:2c:04:05:dd:c8:ee:cd:aa:cb:23:51:e9:d2:
00:51:4b:42:bb:ee:cd:65:49:d5:9f:16:ce:cb:bb:40:aa:79:
11:b4:38:b7:8b:6d:d3:12:3f:2b:13:a2:c9:c5:c5:0f:b6:48:
27:eb:4b:cc:9a:eb:cb:ba:a8:26:4a:85:28:4a:9e:a2:ba:50:
db:11:89:d2:b6:08:10:52:cc:5a:19:98:7a:63:a0:bf:1e:df:
a6:34:16:71:29:bb:9b:de:3e:5f:c9:b0:be:a1:85:43:11:86:
6d:6c:42:59:15:68:c0:fe:84:ce:34:18:dc:c0:2f:a9:e2:9e:
24:c6:31:ec:e2:13:61:3b:cf:33:61:13:51:14:59:b3:78:d7:
bc:88:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:37 2026 by rpki-client