Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: 95PrGCj8nPat3cN5QD9srr5s2qq5Q1I+JjlCf6zpeGk=
Subject key identifier: 5D:FC:09:86:BF:10:01:84:12:08:5C:8F:71:D7:AE:76:E0:3F:13:4F
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 019EC036258512D063D8BCC52757342DBE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0DDC
Signing time: Sat 13 Jun 2026 09:00:34 +0000
Manifest this update: Sat 13 Jun 2026 09:00:34 +0000
Manifest next update: Sun 14 Jun 2026 09:00:34 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: MHIL6b/u4ekdvAs0nb2eR0TKCHKFAPErHKEMSt6GTEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:25:85:12:d0:63:d8:bc:c5:27:57:34:2d:be:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jun 13 09:00:34 2026 GMT
Not After : Jun 14 09:00:34 2026 GMT
Subject: CN=5dfc0986bf10018412085c8f71d7ae76e03f134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:1d:53:11:f7:c5:0c:b0:53:ab:39:8e:a2:
fd:e8:4f:b6:99:07:29:9a:c7:43:50:80:65:3e:62:
aa:96:98:8b:de:c4:98:2c:bf:dc:97:65:62:f2:1a:
06:ef:0c:46:d5:26:47:66:ed:94:32:18:20:44:cc:
b1:53:7d:49:ee:4c:a7:98:5e:5d:c6:ca:69:e9:ea:
82:05:84:db:65:1c:86:13:1a:7c:61:36:52:dd:58:
a3:40:c5:00:f8:13:02:6b:2d:60:71:ac:1a:c9:af:
81:74:74:18:94:4c:e2:3b:a1:ae:0b:4c:db:40:7c:
f8:fc:20:1d:10:99:61:db:21:07:26:87:f3:af:b5:
ef:c2:7e:af:d4:bc:ca:06:5d:c8:6f:2f:a4:25:4d:
fb:86:3f:23:23:31:01:44:aa:ae:25:02:25:a4:ad:
4a:99:fc:58:77:c2:99:21:75:e4:72:9f:98:53:ef:
35:22:a3:f9:a6:6d:8d:5f:36:83:b1:24:96:b9:b5:
a4:70:db:2f:3e:12:88:ee:65:de:75:75:aa:b9:ec:
af:08:58:ad:6c:04:89:63:d4:7a:59:ef:1e:45:de:
dc:d8:0c:d4:6f:57:af:17:84:54:b4:d8:d7:05:9c:
ab:91:19:cb:f9:bf:34:4e:2e:52:5d:99:90:b6:47:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:09:86:BF:10:01:84:12:08:5C:8F:71:D7:AE:76:E0:3F:13:4F
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:de:bc:57:3a:db:9a:1a:17:49:15:af:f3:ac:70:19:bd:
7e:d0:aa:af:24:44:f5:05:d5:de:84:b5:1c:ec:36:83:34:9a:
84:a6:54:f3:2f:f1:1d:21:65:56:4a:ac:8a:8f:3d:4f:77:6a:
13:e0:8a:c3:95:ec:4e:d7:d6:a8:9e:a5:65:df:29:28:7a:c1:
3a:5e:5f:fd:66:ca:0f:9a:24:88:c4:de:99:39:a0:4d:5c:db:
0e:7f:fb:7d:26:df:88:5e:00:e3:b9:81:bd:32:25:c8:b5:e0:
e3:2a:49:7d:4c:06:e2:99:25:17:98:7b:cf:65:9f:07:aa:9d:
17:60:d3:28:59:98:12:df:a7:da:39:61:58:21:9b:d0:32:bd:
69:00:ba:71:05:24:5c:51:1c:6c:a7:54:78:b1:26:f7:e7:66:
56:77:2e:fd:64:2e:f7:2a:66:0c:18:25:48:55:27:3b:fd:21:
c6:7f:1f:15:fa:3b:d6:65:99:fd:f8:0b:48:f4:7c:9c:63:7f:
39:a6:04:03:96:8b:df:47:a6:1c:e6:b7:0a:f1:bb:3f:7c:8c:
44:77:00:29:90:e4:27:e2:73:d3:1b:a2:c4:a6:82:d1:c2:51:
2d:65:8f:de:55:ed:a0:40:73:b1:5e:97:28:dc:a8:49:e8:be:
59:68:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:00 2026 by rpki-client