Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: n4RKk+EPVJwXVgDcS4lPfwrtxO/NP+SK3UmjRxyh3hI=
Subject key identifier: 05:D2:19:31:FD:6D:7D:12:6E:99:0B:0C:EE:02:07:C5:80:28:30:FA
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019EBFC89846ECA71CBC1EE5E1C1A0AAC2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0689
Signing time: Sat 13 Jun 2026 07:00:54 +0000
Manifest this update: Sat 13 Jun 2026 07:00:54 +0000
Manifest next update: Sun 14 Jun 2026 07:00:54 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: jwW+G2jNzt9jhRyROBsbudQr2TyT9bWZV/zXh/WJgNQ=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:98:46:ec:a7:1c:bc:1e:e5:e1:c1:a0:aa:c2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jun 13 07:00:54 2026 GMT
Not After : Jun 14 07:00:54 2026 GMT
Subject: CN=05d21931fd6d7d126e990b0cee0207c5802830fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:ef:47:54:2a:67:06:84:ec:89:98:9f:f3:
2c:42:1d:cb:ec:ec:43:83:8d:2d:9f:2a:4a:15:0c:
8f:d7:58:d8:d1:b9:a7:ec:34:1a:e0:fd:9c:f9:a3:
fc:a7:35:a7:cd:b3:e2:2a:1f:f0:a7:52:36:bc:a9:
30:e0:7d:10:90:42:a9:d6:15:76:99:a7:ed:a7:3e:
a9:0d:04:a7:b3:61:1e:a5:30:56:8c:05:61:f7:03:
d7:fe:90:29:39:ed:d7:1b:99:1d:0f:a4:0e:1e:99:
4f:d0:fb:01:d0:67:64:7f:7a:70:9f:ed:24:5e:d7:
eb:15:cd:d0:ec:07:24:69:15:10:2a:33:d9:d1:71:
f8:8c:bb:ec:a9:47:08:1e:a8:8f:cc:92:ca:b0:02:
ca:9b:9d:8a:a2:d7:bb:c6:ba:ef:cc:32:df:50:32:
f6:bb:1d:71:08:16:d3:fb:25:55:a5:74:1b:a6:eb:
80:fe:d5:4f:3b:fe:a3:90:87:62:89:f4:66:34:ad:
ea:ec:40:4f:6e:bf:5c:ce:cb:f0:18:3a:5a:b8:e8:
7e:a1:9b:dd:7e:7d:cc:e2:40:78:fd:51:63:7d:32:
37:42:d1:f5:9b:51:2a:ee:b7:a8:d4:bd:fe:8f:a3:
84:9a:60:9b:1a:b0:de:75:a6:59:e7:3f:e8:6e:a8:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:19:31:FD:6D:7D:12:6E:99:0B:0C:EE:02:07:C5:80:28:30:FA
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:c5:ea:7d:75:9f:33:99:e7:c0:d3:a3:e9:7b:e5:e2:bb:
d5:de:89:28:01:54:50:2c:ba:9f:97:dd:c5:f1:38:f0:4f:87:
76:08:11:cc:09:cc:ce:72:fa:dc:60:68:87:ff:9c:f7:a2:be:
da:80:25:2c:c7:cf:e8:7f:ec:a0:0d:e8:ef:01:66:4f:bb:8c:
63:b8:2b:40:80:35:d7:15:1b:6b:d9:7c:3d:a9:62:37:11:9b:
ab:bc:be:d6:84:dd:e9:09:4a:ad:b1:03:4e:5e:64:c4:df:dd:
97:c9:1b:a1:51:e8:ce:b1:ad:b7:64:80:51:30:48:0d:22:56:
d2:c1:6f:b0:c2:19:fc:59:e1:db:3b:d6:21:f9:3f:8e:c5:60:
b2:40:38:f8:e2:b0:64:2c:94:42:b8:16:20:e5:bd:44:aa:12:
e7:88:66:18:e9:3b:9a:90:32:06:48:c6:73:a9:d9:86:0b:05:
d1:5a:2d:d7:56:de:ec:c5:43:43:34:4c:39:af:8e:3a:3c:62:
cb:6f:bc:34:2b:ac:45:81:f7:bf:6a:67:a1:54:2f:e4:d9:18:
45:e3:d7:7c:3b:dd:a3:f3:b5:39:6b:c3:2e:9f:d8:20:5c:5c:
25:59:bb:9b:aa:89:8e:75:91:67:08:f1:5d:4a:7f:a5:4f:22:
06:7e:e5:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yJhG7KccvB7l4cGgqsLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYwNjEzMDcwMDU0WhcNMjYwNjE0MDcwMDU0WjAzMTEwLwYDVQQD
EygwNWQyMTkzMWZkNmQ3ZDEyNmU5OTBiMGNlZTAyMDdjNTgwMjgzMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZPvR1QqZwaE7ImYn/MsQh3L7OxD
g40tnypKFQyP11jY0bmn7DQa4P2c+aP8pzWnzbPiKh/wp1I2vKkw4H0QkEKp1hV2
maftpz6pDQSns2EepTBWjAVh9wPX/pApOe3XG5kdD6QOHplP0PsB0Gdkf3pwn+0k
XtfrFc3Q7AckaRUQKjPZ0XH4jLvsqUcIHqiPzJLKsALKm52Kote7xrrvzDLfUDL2
ux1xCBbT+yVVpXQbpuuA/tVPO/6jkIdiifRmNK3q7EBPbr9czsvwGDpauOh+oZvd
fn3M4kB4/VFjfTI3QtH1m1Eq7reo1L3+j6OEmmCbGrDedaZZ5z/obqgxDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXSGTH9bX0SbpkLDO4CB8WAKDD6MB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5bF6n11
nzOZ58DTo+l75eK71d6JKAFUUCy6n5fdxfE48E+HdggRzAnMznL63GBoh/+c96K+
2oAlLMfP6H/soA3o7wFmT7uMY7grQIA11xUba9l8PaliNxGbq7y+1oTd6QlKrbED
Tl5kxN/dl8kboVHozrGtt2SAUTBIDSJW0sFvsMIZ/Fnh2zvWIfk/jsVgskA4+OKw
ZCyUQrgWIOW9RKoS54hmGOk7mpAyBkjGc6nZhgsF0Vot11be7MVDQzRMOa+OOjxi
y2+8NCusRYH3v2pnoVQv5NkYRePXfDvdo/O1OWvDLp/YIFxcJVm7m6qJjnWRZwjx
XUp/pU8iBn7lng==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:51 2026 by rpki-client