Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: +oiA/W3ugB/Mj2HXB2sLMN36zhz9B/Fo90DIaOgEhTc=
Subject key identifier: 89:4F:93:06:69:1F:8B:F6:C9:DA:C9:97:17:F3:6A:6C:05:8F:5D:74
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019E886CCA3E41CEF6626893F30B9013AAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 02B8
Signing time: Tue 02 Jun 2026 13:01:31 +0000
Manifest this update: Tue 02 Jun 2026 13:01:31 +0000
Manifest next update: Wed 03 Jun 2026 13:01:31 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: Mf9DtHdLH8i/YdCZ5/OKI/SgXZnlO8/YhwM+iCkVryA=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:6c:ca:3e:41:ce:f6:62:68:93:f3:0b:90:13:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Jun 2 13:01:31 2026 GMT
Not After : Jun 3 13:01:31 2026 GMT
Subject: CN=894f9306691f8bf6c9dac99717f36a6c058f5d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:60:35:e2:7b:1d:5d:33:52:59:f6:8a:d6:
a3:0f:be:68:f5:1b:d6:5e:bf:2f:ad:10:72:c4:f6:
3d:17:5a:1d:4e:eb:89:9d:38:94:8b:13:df:39:6f:
9e:2d:5b:b1:40:9c:11:5c:90:c7:55:49:3c:23:6a:
a3:52:49:f2:4f:2e:64:9b:0c:8c:a8:e1:fe:82:17:
5c:7a:8b:e2:18:32:20:70:62:3c:85:76:c4:40:59:
0c:cd:39:c7:dc:08:42:f6:ce:fe:b0:cc:35:da:22:
6b:c4:df:7b:9f:f4:cb:57:4d:c6:15:36:21:27:0d:
da:81:04:a5:50:c1:64:71:fb:e8:eb:e0:18:fc:6a:
6c:2e:f8:07:bb:e3:83:45:e9:5f:39:72:26:9c:6f:
95:01:63:8a:ce:13:17:d6:c1:74:27:da:e0:bb:13:
77:38:12:f0:0d:b0:61:ea:af:fe:bc:b5:35:01:9c:
bc:57:17:83:71:b8:34:a8:8c:b0:f1:71:f1:35:29:
57:93:96:a8:64:b1:0f:51:5e:6a:7c:d0:ce:7d:4f:
bf:82:9d:34:fc:be:7b:4b:64:69:4b:07:46:3c:53:
93:61:f5:01:05:e0:62:47:6d:fe:8f:28:61:8d:fb:
6d:3b:17:ba:b2:c4:32:e6:2d:ed:f1:10:3a:a9:60:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:93:06:69:1F:8B:F6:C9:DA:C9:97:17:F3:6A:6C:05:8F:5D:74
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:af:b7:3a:12:ce:6d:2f:61:ba:17:98:bb:95:2d:7e:f9:91:
3a:1c:40:87:e9:ba:e7:f4:ad:c1:9a:2c:47:a9:ee:f6:b2:03:
0c:64:ab:84:c4:d7:67:96:e0:bc:3c:3a:f4:1e:e8:72:20:bf:
cc:f3:85:be:6b:6b:13:28:03:71:dd:57:66:c1:a3:1d:1d:16:
c9:88:ad:2b:18:6d:96:75:50:10:07:6c:fc:1c:c4:84:88:72:
72:94:41:3d:ed:ca:52:6e:ec:1f:9c:a2:88:c2:08:21:5b:7a:
f6:3f:1d:d1:cb:17:8a:6e:df:53:d7:13:4d:31:13:51:c5:2f:
9a:cb:af:6d:69:96:24:c2:b3:dc:e7:01:1c:c4:44:fd:8d:85:
c2:1d:93:f2:43:50:d9:fb:f1:55:b8:5b:31:89:07:a3:ef:ce:
43:1b:b9:ef:c9:9e:d0:cd:66:b0:1f:52:b8:46:ae:20:d5:db:
6f:dd:a3:66:db:e0:ab:f1:da:f1:f9:79:36:c1:e8:38:87:ba:
a0:1a:61:1b:1e:22:bb:89:28:b5:27:7f:68:79:cc:98:22:bc:
6c:87:c8:4e:f5:a8:c8:88:b5:26:b5:13:e1:95:fc:b8:5f:22:
1a:73:1e:23:a6:a8:7f:ad:c4:87:56:fa:8d:d0:41:bb:d3:83:
b0:06:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:17 2026 by rpki-client