Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: VzzFP6Yu8ohHJMNU6WRQCArnLFt/4JOvMeYKdFPw8F8=
Subject key identifier: 00:24:60:E0:BB:AD:65:BA:13:1A:59:12:C6:2E:6C:A2:A7:09:5F:47
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019EC1800FBEFAD8C86ED196F3B1076C0DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 15:00:55 +0000
Manifest this update: Sat 13 Jun 2026 15:00:55 +0000
Manifest next update: Sun 14 Jun 2026 15:00:55 +0000
Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=)
2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: 1WvNpjUXIynq93PTDrr8n98kezepmWJ0t9ETJmdvhks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:0f:be:fa:d8:c8:6e:d1:96:f3:b1:07:6c:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jun 13 15:00:55 2026 GMT
Not After : Jun 14 15:00:55 2026 GMT
Subject: CN=002460e0bbad65ba131a5912c62e6ca2a7095f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:83:82:8d:05:2f:f3:4b:fc:04:85:80:8a:
8f:36:11:2c:db:20:84:fd:64:22:7e:3c:1c:ad:f9:
1e:c2:44:db:5e:82:1d:45:f9:5a:d8:2a:ad:c1:67:
04:d9:01:d0:69:a5:00:b6:f3:fa:11:a9:fa:2b:8f:
fe:84:f7:68:a9:a1:79:94:60:f2:6b:4a:99:09:a6:
c7:bf:e8:6d:7a:9a:dd:f3:85:62:5e:a3:79:eb:6f:
42:a9:dd:5a:9b:ff:90:6a:88:83:71:cb:42:60:4c:
75:08:b6:5d:fd:97:87:05:96:d7:fb:cd:67:80:7a:
3e:aa:bc:0c:55:6e:71:71:1e:3f:e1:56:c5:71:9c:
79:df:a8:35:d7:3d:5a:fb:5a:1f:31:27:64:68:a0:
0d:eb:b3:35:1f:34:b9:f7:46:21:71:4e:4e:4a:d8:
9b:20:c8:ce:74:96:87:43:7e:b4:d5:ff:f1:92:d5:
09:98:12:b6:e5:c7:d8:4d:5b:d0:6a:9a:f2:05:24:
87:42:71:ae:a5:68:7b:fc:23:26:0e:f0:e8:be:00:
3e:e2:36:39:b1:c5:af:07:61:38:e4:4e:7b:e1:7e:
cb:4b:4f:c4:7c:0c:f9:78:4e:9d:62:91:41:6f:1b:
e0:cc:66:d8:02:dc:7d:f2:39:91:56:52:84:da:de:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:60:E0:BB:AD:65:BA:13:1A:59:12:C6:2E:6C:A2:A7:09:5F:47
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:ee:1a:74:49:11:65:23:4c:5b:70:8d:f3:90:42:06:a2:
71:47:62:17:83:56:ba:b8:bb:cf:4f:c6:c2:3c:59:8d:7e:17:
8e:07:40:aa:5e:d9:51:44:bb:b8:5b:c0:a2:16:18:a2:87:d8:
22:06:26:37:ab:51:52:6a:a6:05:79:45:52:76:ae:37:08:ec:
9e:71:b8:0a:3e:79:63:a3:cf:70:ef:c0:65:09:85:22:0b:f7:
ba:f1:63:26:0a:97:9c:f2:52:4b:ef:a1:2f:a8:d6:ac:76:f1:
d0:d2:71:63:0c:85:60:d1:a4:7f:d1:56:30:86:14:76:4f:1c:
6a:c2:58:75:d2:f4:dd:7d:59:78:dd:c4:b9:38:f7:c3:38:9f:
0f:51:b0:b6:08:a5:e4:c4:13:38:34:be:45:2a:75:0d:fc:f3:
a0:c5:f1:10:50:84:70:0a:5d:24:dc:df:6d:1f:8b:c3:d0:ac:
93:56:49:fb:fd:7a:00:b4:77:c5:ab:27:47:91:6f:32:3f:f4:
34:5b:74:d2:cf:6d:79:be:9d:81:5d:c9:60:1d:a2:8b:b6:fc:
d7:76:54:b7:2b:43:43:f8:a2:4b:94:d6:aa:02:ce:f5:99:ca:
e8:11:b1:44:45:87:18:f6:75:2d:8c:8f:ad:89:60:af:5f:9f:
e7:42:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:02 2026 by rpki-client