Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: vUQT108exvAJhP+IbjMBOPnNi56UceabRYmAR5CnLG8=
Subject key identifier: 85:80:C5:69:49:D6:2C:46:17:F4:C4:41:70:78:9A:B3:53:6A:12:1D
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019EC035EC9CB626BD059DB3570DE6BB453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: D8
Signing time: Sat 13 Jun 2026 09:00:19 +0000
Manifest this update: Sat 13 Jun 2026 09:00:19 +0000
Manifest next update: Sun 14 Jun 2026 09:00:19 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: 7CGpwI3rM4TsCUZ5zm4ue2oQ4hTgIo/v4j/U1JYCrrk=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:ec:9c:b6:26:bd:05:9d:b3:57:0d:e6:bb:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Jun 13 09:00:19 2026 GMT
Not After : Jun 14 09:00:19 2026 GMT
Subject: CN=8580c56949d62c4617f4c44170789ab3536a121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:ed:7b:cb:18:66:3f:70:20:a6:85:ca:ae:
ed:d4:69:40:e0:80:46:a1:8a:eb:ad:cf:70:86:76:
a4:54:ae:40:15:f3:61:fa:19:b6:ee:94:bc:16:81:
10:8f:62:3d:bd:01:4f:3e:e8:35:a5:ca:7c:3b:f2:
fe:ec:7f:cc:1b:3d:8a:81:b3:fd:c8:fa:7a:73:c0:
42:cc:c2:24:b3:e7:c4:3e:4c:8b:fc:77:04:64:06:
68:88:04:58:74:51:4d:c2:b0:ed:1d:72:e5:47:b5:
54:ca:5f:b5:89:64:7c:6a:0d:c3:60:45:ef:c5:2a:
0d:06:27:fd:a8:80:6f:27:88:94:12:09:1c:8d:0d:
66:bd:5b:f8:2a:25:b5:b6:f0:21:4d:99:07:a6:a5:
a0:a2:ba:ee:af:db:5e:60:ad:ba:23:25:e8:d3:0e:
48:c2:0f:74:73:92:54:8c:57:43:60:8f:c6:47:b1:
3c:6b:b6:31:0d:5a:8c:ae:5c:03:23:18:1d:e8:20:
35:99:f7:01:68:24:06:c1:e3:91:3c:42:34:d9:2d:
ae:43:a2:5b:75:b8:8e:d4:5f:e5:8d:c9:d3:39:d4:
57:1a:59:29:e5:c0:43:2a:ff:0a:2b:bd:1f:26:f9:
b4:0f:b9:c0:e7:5a:4a:ca:29:d8:09:db:50:84:5c:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:80:C5:69:49:D6:2C:46:17:F4:C4:41:70:78:9A:B3:53:6A:12:1D
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:57:9f:bf:11:8f:c0:b7:8c:f3:a7:45:57:a7:e2:fa:4d:9d:
63:92:c3:30:80:44:ec:c1:f6:43:b4:dd:ed:19:b1:0f:c3:e5:
4b:bf:c8:d1:35:87:9d:c5:7f:53:8f:21:74:85:dc:89:17:47:
28:c3:0c:3b:b7:b8:1f:5d:a3:2a:d2:00:0c:ae:64:e9:83:8b:
d8:1b:41:8d:76:c7:0d:80:10:a5:e7:63:72:73:b1:52:a8:e6:
a2:90:bc:bf:0f:bb:46:e0:6b:d9:72:f1:c1:18:b0:33:4a:f0:
16:71:fa:65:76:2c:fa:c0:1c:b4:5d:90:3c:24:3c:ae:c4:6f:
3f:01:14:3b:b7:de:91:0d:a7:1a:a6:e6:08:1f:6a:c8:68:eb:
91:28:ed:5a:d4:99:6a:1a:8f:f3:14:7c:5e:2a:cf:aa:22:31:
88:c1:5c:db:10:15:7c:41:cd:54:8a:8c:b6:4d:63:76:14:e4:
b5:03:ec:ba:ac:61:d8:e7:11:05:44:96:de:70:79:0a:b0:68:
f1:da:76:12:e8:49:e0:76:46:f9:c2:4d:32:1e:09:43:51:44:
4f:1e:80:92:a0:15:91:dc:fc:27:b6:8d:b7:0f:f7:b5:b6:66:
0d:e4:6d:26:74:76:3c:33:12:e4:1e:4f:7e:e3:a3:b2:4b:39:
05:b8:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:50 2026 by rpki-client