Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: +RAJpZdyL8bU/2DmKdgEVLtYmg5I4D49PSFZu5hnlzg=
Subject key identifier: 14:D4:33:65:D4:BC:3B:A5:00:94:15:CE:3E:8E:ED:0B:06:6B:55:87
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019EC0DB70E185E6ED2FCA87232D600A7B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 09E9
Signing time: Sat 13 Jun 2026 12:01:07 +0000
Manifest this update: Sat 13 Jun 2026 12:01:07 +0000
Manifest next update: Sun 14 Jun 2026 12:01:07 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: r3h3Dl4rFgixo2Vlsr8GzmqvOFNZ93KkzGMfBOBTtok=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:70:e1:85:e6:ed:2f:ca:87:23:2d:60:0a:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jun 13 12:01:07 2026 GMT
Not After : Jun 14 12:01:07 2026 GMT
Subject: CN=14d43365d4bc3ba5009415ce3e8eed0b066b5587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:97:f0:23:6b:34:7a:70:a3:1b:d3:1b:bf:
74:05:0f:6a:f1:07:f3:73:9f:df:b4:0b:cb:df:14:
f3:25:b1:1e:f0:8e:4e:92:cd:79:a0:3a:05:b4:aa:
fb:ab:fc:9c:c2:c9:54:68:2e:4b:da:e8:8f:8e:da:
e9:14:1f:3c:57:b1:f1:13:75:71:37:4f:6e:04:27:
01:b4:c2:0d:49:ee:48:e2:44:23:82:3b:08:03:cc:
99:ae:43:bd:b3:2c:aa:f6:f4:d2:69:93:d0:9b:93:
de:3a:d7:e6:80:30:cb:5d:17:a8:49:a0:10:0b:d3:
de:46:79:70:a4:69:03:dc:66:58:3a:a3:76:09:01:
70:81:ad:57:77:20:e8:fa:9b:34:94:75:03:de:35:
f5:b1:50:ff:6c:2b:6d:04:6e:b7:9c:16:84:50:36:
86:7b:da:fe:a7:c5:2a:fb:c8:09:4c:8b:b9:22:6a:
76:6e:51:e3:c9:10:1d:c7:88:ff:c3:11:0e:11:8b:
26:35:4b:73:4a:ec:90:3d:41:99:f1:44:32:91:38:
a8:86:af:c6:6c:8d:07:d2:e6:74:4d:a3:0f:38:c4:
ff:a5:7c:d1:1e:73:60:09:c1:f4:58:b0:f3:98:8b:
88:d6:21:54:ec:fc:7a:42:a7:cc:b6:99:c3:a4:1e:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:33:65:D4:BC:3B:A5:00:94:15:CE:3E:8E:ED:0B:06:6B:55:87
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:de:37:5f:cd:ec:b9:07:cd:d4:74:45:8e:f7:51:84:23:
69:3a:69:71:4e:b0:94:8a:19:ff:95:88:c8:ef:e9:81:d6:4a:
bb:f8:91:36:70:53:5e:34:0f:62:fe:44:79:32:01:84:ef:be:
cb:8a:c7:75:e7:bf:f8:d7:66:9e:63:20:6f:82:08:fb:3a:2c:
53:57:60:44:79:fe:63:ab:a1:e3:81:72:7a:d5:c8:7e:8c:c0:
87:65:c6:a6:7a:52:4b:20:2a:2c:be:75:47:2d:02:83:96:42:
fc:20:1e:78:0e:b0:75:c8:4c:a4:e7:c9:fa:50:fb:b2:c7:7f:
1e:ea:34:f0:68:c2:da:f4:fe:49:c2:83:8e:e6:f8:c5:7a:ee:
9a:8c:d3:02:89:90:33:89:c2:46:3b:3c:37:8c:05:6f:d6:91:
a7:e1:67:a9:d2:81:10:ad:41:f1:1f:5d:f2:0c:41:a6:c0:2a:
bc:1b:df:00:23:91:e0:b9:63:e9:f5:17:db:43:c8:0e:d0:3a:
da:b8:47:d3:0b:42:e5:5c:09:2a:01:9a:60:0e:46:87:8d:8d:
f0:f1:27:89:6e:7a:3e:c4:ba:c6:6d:c3:83:39:b2:c7:0f:7a:
e1:df:bb:90:09:70:9d:ac:ea:90:93:3f:d9:e0:bc:a5:67:f4:
64:5d:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:14:30 2026 by rpki-client