Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: XsXxJ98iMduXnrn4QUkNpk91/xOrKPn/weeMitw08mI=
Subject key identifier: 63:7E:D5:16:58:73:15:7F:5E:BC:F3:F4:81:3A:95:4E:6C:0E:B8:C9
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019F1943CD1BF77D5BD19ECB212123D3F81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 1008
Signing time: Tue 30 Jun 2026 16:01:41 +0000
Manifest this update: Tue 30 Jun 2026 16:01:41 +0000
Manifest next update: Wed 01 Jul 2026 16:01:41 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: tWrA58uRpAcMZ+pMse66hzLZWfE/kXRmaobJyvgf5go=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:cd:1b:f7:7d:5b:d1:9e:cb:21:21:23:d3:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Jun 30 16:01:41 2026 GMT
Not After : Jul 1 16:01:41 2026 GMT
Subject: CN=637ed5165873157f5ebcf3f4813a954e6c0eb8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:37:ff:fc:5f:25:c2:c7:2b:a4:04:a1:1a:
97:39:f0:cf:bc:93:a1:73:b1:b0:90:be:78:75:d0:
17:2b:9d:20:3d:0e:29:13:27:ec:8c:a2:34:53:6a:
32:0c:80:1b:33:f7:81:70:98:b8:27:81:48:51:2f:
22:0f:a1:9f:a5:db:0f:27:4c:5a:8a:6e:f7:36:5d:
23:21:59:d1:7c:f1:ae:2a:f7:0c:c6:0a:20:4a:b8:
b7:fa:7f:2c:1a:72:2f:be:b4:de:ca:ac:79:6e:fc:
75:b0:1c:3a:37:d5:29:dc:7b:f1:c2:db:90:74:8e:
e0:7a:9b:9d:3e:cf:f0:c2:48:f9:91:f3:ae:e1:15:
15:d3:4a:ab:b0:06:04:2a:5c:d0:04:81:7a:9f:09:
18:f7:53:8d:e5:84:b3:b6:f0:e7:68:05:6a:70:f3:
c9:08:93:79:24:fe:1b:78:a7:4c:72:3a:e0:65:5a:
4e:3c:78:f5:9a:40:d6:d7:e3:2a:bc:6b:2e:4a:4e:
7f:44:40:25:fd:13:01:2a:0d:37:1c:34:14:45:ba:
e2:32:79:ff:ef:dd:13:31:fc:19:95:f7:fa:fe:f7:
3f:e4:58:4b:d7:04:7a:c7:48:f5:83:d0:b8:45:e6:
9e:be:b9:9f:82:1c:2d:23:4f:59:0c:77:32:7e:e0:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:D5:16:58:73:15:7F:5E:BC:F3:F4:81:3A:95:4E:6C:0E:B8:C9
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:45:6a:2a:cd:00:6b:7e:eb:db:50:75:33:99:3b:02:f7:
cf:f5:4e:8f:e8:ba:5c:25:21:7e:67:58:ea:99:27:e2:34:ea:
c0:07:ac:ee:fb:a6:1d:29:4c:ce:67:3c:4b:0a:02:49:ee:1a:
3e:0c:a1:ef:4c:f5:17:26:6a:b9:ee:6e:23:99:48:f0:d2:05:
7c:09:e5:8b:01:ae:a8:aa:6d:6a:71:3f:e0:a3:11:36:4c:0e:
39:86:57:a0:b9:1c:bb:2c:3d:e5:79:56:ee:1a:7c:56:ca:8e:
9d:ac:53:1a:67:b9:47:1f:85:5b:54:d3:d1:e5:37:f7:16:6b:
e7:ba:2b:ff:90:a3:ef:fd:c7:f5:1a:77:0f:40:3b:97:7f:50:
2f:fc:d5:6b:e9:9d:03:18:26:75:75:1d:22:c7:1c:69:80:51:
47:20:21:a3:a4:9d:a4:d7:a6:0f:8e:00:61:21:58:42:08:ec:
d3:17:f1:57:01:e8:bd:74:48:3d:68:01:c1:f2:33:50:95:3b:
ea:cf:23:8a:37:21:84:e1:c3:f1:c0:39:7a:ef:f6:ef:46:fa:
95:12:29:64:9c:32:e9:6e:c8:01:6b:f4:d1:f0:c0:bb:09:5b:
63:6d:15:5d:b2:f7:1b:d3:cc:09:b5:2b:18:44:e5:b2:74:12:
c3:a2:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client