Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: /5knPcekKGAPbBHF22z0vY45KI6npxGroCc29nxaR/k=
Subject key identifier: C2:DC:04:5B:BA:2A:C5:35:36:CD:E3:AB:60:7C:75:86:40:6E:2B:E0
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019EBF23466B906D94DCD1689B5C02D9C96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0DBB
Signing time: Sat 13 Jun 2026 04:00:20 +0000
Manifest this update: Sat 13 Jun 2026 04:00:20 +0000
Manifest next update: Sun 14 Jun 2026 04:00:20 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: jxf98DzCnpK0DwFNlWRtI0XDFePhEVMfFxEmxHlc+AA=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:46:6b:90:6d:94:dc:d1:68:9b:5c:02:d9:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jun 13 04:00:20 2026 GMT
Not After : Jun 14 04:00:20 2026 GMT
Subject: CN=c2dc045bba2ac53536cde3ab607c7586406e2be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:39:0d:de:e3:47:93:55:c4:cc:c6:01:01:
6f:82:5d:51:4c:d8:80:6f:aa:e3:6b:12:08:75:41:
84:34:17:a4:2a:14:d7:57:b0:47:de:f6:3d:23:86:
8b:fd:a1:7f:83:b6:01:62:e1:26:ae:cc:3b:f5:98:
a8:63:0c:44:6f:24:7b:db:55:4f:97:dd:bf:2b:ab:
28:5c:54:30:f0:0c:52:4b:87:94:6c:92:4d:84:03:
ab:5f:20:80:2e:31:61:ac:97:72:27:7d:26:b9:b5:
50:f9:ac:ba:88:13:e9:4b:e3:ab:fb:45:5b:33:4f:
6c:dc:fe:1b:bf:cd:f6:3d:64:c3:eb:ca:26:c0:35:
a8:c7:dc:96:c6:9e:7e:fb:73:22:02:ec:fb:34:71:
a3:60:df:77:41:f8:97:be:bf:f8:6b:74:fb:af:e8:
2d:d1:26:36:55:ee:e8:10:80:31:83:fb:5e:84:d8:
58:64:f1:ff:0c:ea:0c:c4:cc:15:c7:28:c6:a1:0c:
1b:03:c3:c6:ee:60:ef:fb:55:b2:4f:53:0d:a4:b1:
de:5d:4c:10:6e:73:b9:d8:1d:26:83:d0:fa:e2:a4:
bb:32:87:a8:f5:12:ec:38:1d:44:ba:8e:ee:46:05:
8e:0a:41:44:77:53:61:4d:bf:52:30:38:56:0f:be:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:04:5B:BA:2A:C5:35:36:CD:E3:AB:60:7C:75:86:40:6E:2B:E0
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:58:b0:f9:26:5c:c5:48:e9:4f:7d:e3:68:80:0f:6a:7c:c3:
cc:36:b9:3f:69:5b:a6:47:e9:fe:1e:4f:45:bf:fd:88:cc:e1:
14:06:fc:49:f5:5c:3b:f2:20:91:4d:8f:6f:c8:61:4f:bc:a8:
c1:07:aa:98:d5:8f:db:18:b8:90:12:8a:a5:09:9b:eb:09:49:
12:bc:65:e5:21:bf:c5:6d:a7:64:a9:40:22:0e:0b:c7:26:77:
fc:01:39:0e:07:d3:ab:85:dc:eb:6d:7e:58:62:af:5e:e5:63:
36:c3:48:0e:45:b6:db:1b:0e:1e:9b:d1:eb:65:87:8a:03:51:
92:a3:00:4b:80:5c:62:00:d7:d1:3e:1a:fb:db:f2:8a:05:6d:
88:3a:39:c6:26:64:b3:a5:5f:f0:8b:70:ef:0c:62:06:e8:79:
c0:c1:d3:e4:b3:90:85:ef:16:ed:a6:62:61:67:33:77:27:c5:
1a:7a:19:08:ae:8c:f6:66:03:36:61:52:79:09:8d:e1:c3:e3:
26:2b:1e:58:5c:7a:00:1b:2f:af:00:5e:d0:5c:18:6a:25:d4:
ad:1a:54:a0:e0:77:71:66:98:84:ba:b0:a8:9a:7e:07:f3:0c:
65:39:92:0a:77:d3:45:f1:b8:c0:1e:4e:7a:96:c7:eb:91:9a:
b9:90:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:11 2026 by rpki-client