Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: KvWtRoc8zIfuyki4u7ikfDmjodpXGioChfwhBNMfJks=
Subject key identifier: 19:5D:9A:6D:37:E6:21:BE:3D:2B:59:E4:B4:10:81:D6:6F:62:AB:42
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019EBE7F86B4571320B183EA3F31959DCA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0BFA
Signing time: Sat 13 Jun 2026 01:01:28 +0000
Manifest this update: Sat 13 Jun 2026 01:01:28 +0000
Manifest next update: Sun 14 Jun 2026 01:01:28 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: vSmx+cTYdV0FTM7BgnHdNKwEgIVcCfHiSN16syauwFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:86:b4:57:13:20:b1:83:ea:3f:31:95:9d:ca:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Jun 13 01:01:28 2026 GMT
Not After : Jun 14 01:01:28 2026 GMT
Subject: CN=195d9a6d37e621be3d2b59e4b41081d66f62ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:81:dd:b6:eb:ea:59:1e:93:b2:41:19:18:
16:bc:33:0a:fd:7d:62:33:f5:25:ee:3b:1b:cd:31:
62:5a:d9:02:81:87:4e:f0:fb:d9:93:b1:79:3a:54:
6a:03:f7:08:2c:e9:34:cc:cf:c5:1f:42:dc:75:37:
5c:14:eb:e2:9f:97:83:c8:68:09:07:39:d4:5d:4b:
b0:6b:63:d4:e2:90:f1:5b:ed:04:e6:d0:ea:1e:b5:
2a:e1:60:42:b8:59:2d:ec:1b:1d:3d:3c:1a:02:48:
67:37:1b:7d:8e:53:b2:ef:cf:bb:cc:42:be:5f:dc:
02:e2:cc:14:8a:3a:ee:45:e2:79:ca:16:84:d3:08:
b8:50:39:dc:d9:d9:53:19:fe:e6:7e:90:78:71:1c:
06:7b:f6:b6:47:a5:d5:06:43:e5:ca:6e:ac:f5:40:
24:1d:ab:c9:da:8b:d8:5d:36:7c:1a:86:53:65:27:
8d:72:40:a8:2d:23:38:4c:df:97:88:37:67:ac:ac:
08:f7:02:86:09:70:cf:74:05:a7:e8:51:3f:cf:23:
e5:51:f3:7d:d5:a4:2a:db:14:07:bd:b0:1c:e9:81:
e5:6f:1f:d1:bb:76:30:aa:a9:d8:96:5d:1a:b8:b9:
c9:73:9b:01:eb:d0:7d:af:57:05:21:11:63:8c:94:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:9A:6D:37:E6:21:BE:3D:2B:59:E4:B4:10:81:D6:6F:62:AB:42
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:3c:81:e1:b4:eb:75:93:de:f1:90:fc:4d:44:ab:12:06:
03:5c:ad:93:e4:82:e1:86:d6:36:51:e9:b1:e0:8b:e4:e3:f5:
55:3a:c0:71:41:ad:e4:67:fb:7a:c3:ba:36:e9:21:b5:60:10:
39:96:50:3b:ce:f5:29:5e:90:37:15:41:4c:ff:2e:e2:b6:cd:
f9:5f:bd:4b:33:f9:06:b0:d1:f6:95:aa:32:08:12:1d:88:27:
1e:42:51:81:c3:45:f2:02:f7:35:e3:1c:25:f5:5a:03:b6:f2:
fd:d9:b6:2e:ca:10:bd:51:f4:58:33:70:4a:66:67:e6:9c:a9:
98:3a:9f:40:94:7d:08:71:d1:a4:2f:89:c3:0f:e0:7b:ad:0f:
62:92:0f:30:56:f6:ff:31:da:52:1b:08:75:78:26:90:bc:4f:
36:0e:d4:f5:df:55:0c:44:90:c4:f4:7e:cf:c1:37:36:f9:76:
0e:5d:d0:5c:1e:c3:b5:94:a1:0f:bc:93:42:d7:f0:42:5f:e7:
62:14:1e:2d:de:36:c0:fb:6c:11:ff:cf:95:78:1d:17:28:40:
11:f7:c3:7b:5c:33:1f:5d:2f:2b:7a:40:95:20:94:3a:d8:72:
2e:ed:55:b7:a1:0e:19:32:40:ba:4b:1c:09:e6:af:a3:a1:4f:
77:b4:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:16 2026 by rpki-client