Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: 1M+OI328XA7ds2ZgCVwAtt8X7Cj2ZKCAkaODiAgqzCI=
Subject key identifier: CE:B8:3F:E7:C7:9D:39:0A:6C:C2:E5:15:AC:2E:D3:A3:EA:06:2C:34
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019EBEECDC23767DD3E3CBCED977907CCAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 03:00:54 +0000
Manifest this update: Sat 13 Jun 2026 03:00:54 +0000
Manifest next update: Sun 14 Jun 2026 03:00:54 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: BlkGbPKleR9KCvIHDaUrg1yD9LHgft4JWxLZkTLA2QU=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:dc:23:76:7d:d3:e3:cb:ce:d9:77:90:7c:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jun 13 03:00:54 2026 GMT
Not After : Jun 14 03:00:54 2026 GMT
Subject: CN=ceb83fe7c79d390a6cc2e515ac2ed3a3ea062c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:7a:3b:9b:5a:de:fd:e6:4f:12:02:8c:d9:
5f:2c:01:53:8b:b4:7e:a9:2f:a0:c3:32:50:78:f9:
3e:5a:d0:a2:87:e9:e8:be:dd:0c:8a:e0:31:87:8f:
51:5c:69:1a:72:20:d7:3a:dd:e0:93:37:8d:e9:2f:
5f:f7:c5:54:83:bd:d4:72:c6:f1:5b:2f:c5:ac:59:
8d:a0:d5:80:cf:05:6a:58:b7:b6:66:2d:5e:94:3f:
25:b2:ca:7d:f7:05:94:1f:c9:dd:be:62:34:e0:f2:
0b:a5:9c:97:fe:68:dc:4a:ce:78:66:5d:fc:39:ee:
9c:ad:36:bf:ab:42:45:aa:df:f9:86:74:97:df:f5:
01:31:49:83:5e:7c:96:2a:1c:6a:b9:d2:fd:64:4b:
c8:4e:3b:4a:f3:50:ea:20:fd:99:5f:69:8d:20:f8:
bf:72:e8:a3:28:d7:4c:0c:33:d5:85:91:8f:5e:d7:
0b:63:4d:0c:57:9e:20:9b:f0:dc:fb:a8:d8:a1:db:
53:20:45:0a:92:20:ad:18:ca:54:ee:98:0a:54:a1:
5f:d2:30:75:4d:eb:69:27:08:1c:f6:4d:cc:11:57:
79:3c:5e:10:ce:b6:ff:ef:f1:3f:bd:11:a4:cf:4b:
39:fd:c3:da:d1:a7:74:a1:61:8d:7a:09:4b:a7:10:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:3F:E7:C7:9D:39:0A:6C:C2:E5:15:AC:2E:D3:A3:EA:06:2C:34
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:71:75:f5:b1:66:65:43:5d:7c:ba:fe:32:6b:90:31:5c:63:
d5:7a:c5:a7:6f:17:a9:81:8f:a4:cb:90:a7:c4:ed:3b:ba:da:
92:e4:82:4f:b4:6c:d9:95:c0:cd:0c:f8:d0:f6:f5:53:4f:3c:
5a:4d:79:6a:6c:da:ab:42:d2:e4:d2:fc:9b:57:30:73:54:56:
3b:bf:a2:32:16:59:9f:c8:b7:03:b4:c3:01:3a:82:09:16:35:
09:2e:fa:a9:a7:50:0b:df:13:f5:1b:c0:f4:e0:90:95:47:4c:
5c:c0:9c:d0:ef:f4:45:b0:bb:1e:4e:80:1f:67:73:5f:24:96:
ba:8a:ef:24:af:57:2b:39:29:5e:da:9b:eb:ee:96:5b:bb:4b:
c6:60:fa:85:21:81:79:28:f2:5c:03:46:cb:a9:6d:1a:2d:4c:
fd:8c:06:4e:94:77:84:fd:a9:c1:f9:29:0a:a6:3e:42:f5:cc:
5f:bb:2b:2a:3c:96:b7:1c:61:78:3c:02:73:dd:09:d2:c4:bd:
fa:0b:5e:33:9f:e2:db:1b:c8:1d:8c:ce:d5:8d:1e:e7:0b:65:
4a:69:15:d4:8b:3c:b1:13:ed:85:ee:e4:01:48:71:cb:41:3c:
8d:49:eb:fe:51:60:06:25:f4:ff:73:4b:41:df:d7:75:a2:de:
2c:cc:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:55 2026 by rpki-client