Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File: 0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier: su8leZlnNsA+8n+8xwAzX0/4ze2+WFgVx0drj1XtAR4=
Subject key identifier: 3A:3D:D2:DE:3F:7D:61:EC:1E:EB:29:15:33:AD:62:C7:0B:E8:29:B3
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer: /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial: 019EC2C9F9C33092464867A4B268BAD93790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number: 0C8B
Signing time: Sat 13 Jun 2026 21:01:16 +0000
Manifest this update: Sat 13 Jun 2026 21:01:16 +0000
Manifest next update: Sun 14 Jun 2026 21:01:16 +0000
Files and hashes: 1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: u0Ds/V92o8zpxCEC/MXgBw70EyIhlXG2fS/S3VKKeHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:f9:c3:30:92:46:48:67:a4:b2:68:ba:d9:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Validity
Not Before: Jun 13 21:01:16 2026 GMT
Not After : Jun 14 21:01:16 2026 GMT
Subject: CN=3a3dd2de3f7d61ec1eeb291533ad62c70be829b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:7c:e1:97:b2:51:dd:a8:e5:41:be:46:91:
43:0c:b0:b8:dd:90:05:9b:66:6b:ea:3e:50:34:34:
38:5e:18:ff:e4:83:c9:32:c0:8e:d9:db:be:07:d4:
f2:4f:6a:15:a3:92:b7:53:d3:50:e2:02:1a:54:f1:
1f:2f:73:dc:48:bf:34:6d:6f:af:eb:2a:09:af:d9:
b1:c8:13:8e:58:c1:5c:2b:56:05:c2:7a:c4:ae:8a:
ae:cc:a8:73:17:c4:9b:53:9a:b0:f1:51:52:60:7b:
25:2b:97:1a:bd:5d:e3:8f:a0:69:fd:00:69:92:85:
9f:db:6e:43:69:d9:94:ae:10:de:e0:ae:11:01:33:
ad:ba:83:e7:ee:ff:d6:ad:97:35:cc:d4:60:04:ea:
14:1a:57:cf:84:39:ad:8d:72:8e:7c:65:86:91:e6:
ca:f9:cc:9d:db:76:e3:b4:7a:50:82:a6:5a:bb:3f:
18:52:23:b0:60:09:38:22:37:86:64:21:12:26:27:
b2:4e:1a:f0:05:70:e8:61:43:71:78:c4:5d:eb:94:
bc:41:2f:6a:22:d7:e8:22:4c:ec:7e:e0:fa:e8:fd:
d5:cd:ea:89:3c:51:5b:46:2f:84:1d:98:22:3e:4b:
6d:3d:44:11:87:12:f6:96:d4:d2:b5:5d:e3:7e:52:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:D2:DE:3F:7D:61:EC:1E:EB:29:15:33:AD:62:C7:0B:E8:29:B3
X509v3 Authority Key Identifier:
keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b6:58:1e:c8:5a:d4:31:60:68:8a:0e:3d:5a:28:0e:60:a4:
d3:61:da:9d:54:b4:c3:fa:64:e7:17:56:29:a7:b3:8e:90:9e:
fc:41:1a:53:8b:f0:21:ca:f2:6a:7c:51:a1:d6:0a:40:6a:aa:
04:f8:cf:61:51:51:e6:52:80:92:71:6a:81:57:4b:60:00:e4:
c0:08:2e:ff:b0:2d:ef:db:87:86:83:4d:71:58:ff:a6:3b:ea:
7b:8c:49:46:6a:34:35:2c:8f:40:d6:95:12:18:7b:e9:5d:15:
25:b3:de:98:58:44:d7:69:aa:cd:13:91:3f:f9:9c:53:8d:e8:
89:48:a4:d7:86:e8:a9:26:b1:2a:6e:26:b4:d9:97:b8:78:ab:
1a:6e:d3:14:88:5f:ba:80:e9:df:88:64:29:1b:26:71:2e:72:
7e:46:04:48:dc:5a:ad:48:d2:e5:78:a6:52:d1:72:5c:88:e5:
31:b8:c9:b8:60:b2:1e:e9:3a:8b:ff:4e:b7:37:05:d7:a9:3e:
fe:a3:01:32:ee:cf:f8:28:58:1f:a9:26:74:b0:cc:90:cb:b2:
81:da:de:6b:df:04:73:b4:f4:92:a4:aa:b1:ef:bf:8b:6a:04:
31:30:69:95:42:1c:d4:90:ba:4d:5a:9d:de:b5:fa:87:7d:2a:
15:69:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:58 2026 by rpki-client