Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: mLW7wi6k5VJR8aeNJCQFnG75w20RI/l5SacYVZd+hrg=
Subject key identifier: 55:BF:82:DF:71:BE:44:AA:39:12:50:60:99:33:1B:90:F9:43:7A:FD
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019EBE478C62AB117E3998B4068643D0EE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:20 +0000
Manifest this update: Sat 13 Jun 2026 00:00:20 +0000
Manifest next update: Sun 14 Jun 2026 00:00:20 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: 4Fdaf2pe5QK09wA6WMyCE1GMS9Phjr1G9mZEuGW3bq0=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:8c:62:ab:11:7e:39:98:b4:06:86:43:d0:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jun 13 00:00:20 2026 GMT
Not After : Jun 14 00:00:20 2026 GMT
Subject: CN=55bf82df71be44aa3912506099331b90f9437afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:ce:f2:2b:fa:28:bd:db:3d:44:93:94:f7:
c2:57:f4:fd:99:8d:71:92:72:14:d2:2e:88:3e:0a:
74:bc:6e:e5:c0:65:8f:b2:76:8c:b5:a2:b4:8a:90:
79:a3:f3:d3:0a:09:6b:62:61:53:e3:ca:13:43:e1:
06:f5:56:fd:c4:4b:70:e4:18:c7:e7:18:3b:8d:eb:
00:19:6a:42:a1:30:a9:26:af:61:0c:98:01:89:6b:
75:e2:86:45:8d:c8:fb:d5:43:4f:76:33:47:a5:00:
89:a8:76:7f:1d:a7:2d:95:57:e3:ea:84:18:19:8a:
06:22:37:39:1f:ba:23:43:aa:ee:70:54:55:29:95:
08:56:85:9f:dd:22:d1:3d:21:05:8e:03:5c:ee:95:
6c:20:e7:37:22:38:b8:e5:7d:45:39:c7:e7:96:ad:
ae:da:c0:d3:59:a7:b1:2b:b9:21:0d:04:a5:6e:9a:
1c:76:29:42:ba:14:c3:53:9b:9a:6c:4d:55:01:40:
ce:39:9e:1e:a2:78:88:5d:f9:ec:d6:72:ee:10:8b:
34:03:d2:9f:4e:64:49:30:71:19:f3:e0:95:14:a3:
ec:f5:9e:0f:82:9e:9d:52:9d:e2:c0:f5:4e:83:4d:
d2:69:ce:dd:6c:08:a2:aa:72:39:71:d9:23:0a:95:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:82:DF:71:BE:44:AA:39:12:50:60:99:33:1B:90:F9:43:7A:FD
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:04:df:2e:d8:58:de:da:39:24:56:1a:a7:52:4a:b9:22:85:
5a:fe:01:20:e4:3e:18:06:02:64:58:32:58:f7:04:33:e5:5c:
22:8a:19:72:43:dd:41:ee:df:e2:21:c5:44:d4:be:26:6d:dc:
72:84:a4:91:67:9f:39:0d:ba:ea:95:0b:f4:42:42:b8:ed:4e:
9e:23:3e:01:50:54:31:f2:17:67:80:ab:4f:25:e3:fc:15:f5:
e5:22:67:23:61:20:16:54:8c:f8:32:04:11:68:cb:ce:ef:06:
23:6b:2a:c9:fc:54:6d:44:4b:b8:92:03:5a:90:e4:af:a5:bb:
f8:e6:d7:57:df:6d:82:fc:d1:3a:a3:16:2f:a6:4c:cd:96:a1:
01:ed:8c:3b:b4:91:e1:c4:08:aa:56:51:ca:2b:c1:3a:8d:7b:
eb:fd:09:73:17:43:e8:3f:af:23:9a:18:f5:d9:28:ff:5e:b5:
86:9f:f3:2f:cb:0e:58:c8:84:8a:54:92:48:32:9f:76:a3:48:
b1:d5:c6:d6:2a:53:3d:b4:14:e1:1a:f1:65:d6:b7:d5:d8:13:
bc:2d:86:4d:12:6a:8f:1c:d1:3a:1a:f5:a7:98:3c:ed:8c:16:
4e:3d:4b:63:46:76:44:21:77:16:1b:c4:d7:a8:8a:13:b7:7d:
96:36:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:02 2026 by rpki-client