Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: nwIAcao4d7bZnnjsQBR2aFKrqOIdZX/AeB2DcCDl8V8=
Subject key identifier: 1B:EE:FA:C7:B3:D6:4B:88:CA:A9:32:7B:5C:76:75:0B:C8:3C:8D:C6
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019EBF240EF79966CBBA109E2CB9AB73B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0E39
Signing time: Sat 13 Jun 2026 04:01:11 +0000
Manifest this update: Sat 13 Jun 2026 04:01:11 +0000
Manifest next update: Sun 14 Jun 2026 04:01:11 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: JwYBaRxPzvOaQ56jnsnK6KoJkAP3vYn5Sps3QyaOUAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:0e:f7:99:66:cb:ba:10:9e:2c:b9:ab:73:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jun 13 04:01:11 2026 GMT
Not After : Jun 14 04:01:11 2026 GMT
Subject: CN=1beefac7b3d64b88caa9327b5c76750bc83c8dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:80:b5:50:4c:e2:d9:48:a2:17:6b:e2:85:
9c:27:cf:07:b4:22:8a:94:55:c8:39:18:67:81:52:
54:2d:76:8f:6e:e9:76:a7:94:d0:26:3f:9b:66:ea:
dd:ff:05:58:b7:21:c3:63:e8:cb:17:97:a9:71:7c:
2d:4b:bb:a0:64:d4:12:7e:21:b7:38:04:92:d6:93:
60:e2:5c:da:4d:02:99:06:7c:88:3a:1c:14:cf:79:
cb:5d:df:7e:a3:42:00:7b:4d:62:fc:11:c5:12:bd:
a3:e2:57:2a:fb:d0:4b:63:c2:94:7d:68:f4:1c:f7:
69:65:a5:a2:bf:54:60:0f:09:b7:7f:c1:25:f2:f2:
ac:48:e6:46:f5:89:31:93:db:a6:5d:c9:bd:9f:47:
7e:b8:c2:d0:45:51:59:bb:e7:eb:af:ff:e5:1f:06:
e6:36:a2:a5:83:ea:d2:59:0a:19:42:ab:9d:f3:83:
73:bc:78:85:d9:34:e4:c8:43:b4:55:88:4e:00:dc:
78:cb:7d:71:8f:05:fb:f9:5d:e0:9e:c7:41:2c:bd:
75:2d:92:be:e3:4a:73:51:69:9b:b5:1e:36:5d:d0:
34:45:f7:55:dd:49:50:56:ed:12:09:fd:d6:e0:5c:
8e:af:db:29:d5:d6:73:56:44:8c:ba:8a:07:bf:56:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:FA:C7:B3:D6:4B:88:CA:A9:32:7B:5C:76:75:0B:C8:3C:8D:C6
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:45:c4:4a:67:bf:b7:a8:94:5c:56:b7:19:12:ed:2a:71:3e:
e6:8d:ab:8d:d9:b7:c9:6e:65:3d:25:d5:71:d9:41:c7:b6:7d:
82:f4:8f:99:c5:d7:34:55:9d:2b:a5:12:b9:89:54:50:8c:9c:
06:0d:3a:c1:97:2d:4c:97:67:03:4a:eb:8b:2e:65:d4:91:d4:
39:03:3c:4f:95:c3:30:ca:12:e1:c5:15:06:b4:b8:df:e3:99:
d9:b6:03:6d:73:8d:08:12:e5:3b:79:16:80:da:2e:af:5b:1d:
3c:2b:a5:54:00:84:0e:12:17:fb:53:1c:f3:cc:3c:3b:7e:47:
85:8a:84:65:a6:02:ba:6f:9c:4e:2e:77:52:cc:f3:5c:0b:90:
65:9b:c7:4d:f1:d3:a3:c8:82:40:1e:30:79:d9:89:68:62:de:
a0:4c:55:71:ee:73:75:e0:b4:70:a1:68:95:7d:b6:fb:b2:b6:
98:e1:9d:37:70:91:83:c4:ee:da:04:de:94:d2:30:55:49:d6:
25:15:af:da:3b:c8:f7:25:4d:02:36:77:f2:0f:dc:94:1e:37:
5b:83:42:8e:7f:8d:f9:16:52:29:54:9e:bb:33:ed:a8:65:3a:
84:cb:27:e0:b0:81:d9:bf:b3:f2:76:a4:49:84:eb:44:73:69:
56:65:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:07 2026 by rpki-client