Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: iInGMwKuXC2nr2Ci46Xsr9Z8pCn8d710vdjY/LklQD4=
Subject key identifier: 1A:2C:1D:40:62:54:CF:0A:06:32:08:70:91:B4:11:F8:26:87:F3:AF
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019EBDD9AEA527D7559FB7FF9F23FF27C7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 167F
Signing time: Fri 12 Jun 2026 22:00:20 +0000
Manifest this update: Fri 12 Jun 2026 22:00:20 +0000
Manifest next update: Sat 13 Jun 2026 22:00:20 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: 41tvR+bQE1qrExJxQnxDPEwONu3I0CKLoOGx+CuF+S0=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:ae:a5:27:d7:55:9f:b7:ff:9f:23:ff:27:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jun 12 22:00:20 2026 GMT
Not After : Jun 13 22:00:20 2026 GMT
Subject: CN=1a2c1d406254cf0a0632087091b411f82687f3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:24:0e:b4:ad:a8:8e:02:30:f6:d4:bf:e6:
d6:c4:b3:ab:b9:9a:16:97:94:d3:ee:9b:40:3e:55:
78:85:0e:89:b6:de:f9:66:d5:1b:58:f4:ae:ca:7f:
01:1b:74:7f:ce:83:14:66:c3:09:c3:dd:61:15:bc:
f3:aa:c6:4e:58:3b:75:3c:74:82:ff:98:48:ce:d3:
e4:dc:57:3a:f9:55:8c:d8:c0:b0:40:ea:fc:f5:ca:
64:30:ef:14:95:02:77:a7:17:3d:7e:3d:34:0e:c5:
bc:7b:5f:af:2f:1d:ab:a9:34:c6:33:b2:d6:c7:66:
ad:94:7b:f9:13:40:5a:df:36:67:3d:fb:a0:56:59:
e9:32:30:44:0f:61:48:8f:a7:3e:51:ed:c2:e2:1b:
fa:ef:ae:18:9a:cb:cd:7d:4d:5f:96:fc:30:57:9f:
eb:11:11:46:88:c4:4d:83:c9:8f:cf:11:7a:6d:d5:
54:0a:7e:e7:a7:34:33:98:0e:f8:9a:33:c3:44:5a:
95:1f:94:18:72:8b:0d:1a:22:78:f9:51:87:26:a5:
60:11:43:3c:32:aa:48:e2:a0:42:8e:bc:e9:e2:c4:
fa:09:b1:8d:dc:cf:e4:f6:c7:8c:09:cc:00:f8:53:
59:0f:11:3c:b2:6d:04:9f:65:fa:fc:cf:bb:a4:c6:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:1D:40:62:54:CF:0A:06:32:08:70:91:B4:11:F8:26:87:F3:AF
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:ec:83:2c:dc:c2:6f:ac:0a:00:49:c5:52:1c:d9:5b:5a:
51:9d:98:53:b3:40:1b:a3:a4:f9:0c:0b:f5:da:29:8a:7d:24:
11:9e:8f:ea:2d:c6:fc:c6:cf:91:0a:48:ad:3d:b8:60:6d:e0:
0c:fc:1b:a5:65:6d:78:b3:c0:e8:2f:89:21:e5:98:2a:f7:10:
87:3c:46:e6:74:f4:59:b0:ff:dc:70:ef:df:bc:0d:10:ed:c9:
37:cb:5e:7f:6e:db:d8:be:ca:72:21:d0:7e:09:50:e7:84:f9:
73:81:99:0b:be:69:36:2d:19:88:72:bb:5e:10:4e:8a:e7:c8:
50:bb:ac:76:89:09:55:3e:fa:5c:8f:7f:4f:d8:32:9d:76:e1:
60:3e:85:c4:44:02:7c:c5:a3:40:bd:00:5a:b9:2e:17:00:3b:
a3:36:46:cc:e8:93:35:ad:0e:89:cf:2e:9d:db:25:88:c4:ce:
f3:29:66:4a:61:33:68:f5:95:ab:c7:d9:6a:de:6a:28:f0:be:
59:63:58:55:c9:bf:ce:b1:9e:d1:9b:fa:82:b9:c9:28:b8:63:
4e:1b:e5:0d:0a:e8:d2:9f:2b:9b:2b:65:24:e2:fc:19:f9:0a:
bc:5c:6b:3d:67:70:85:ea:25:44:ac:32:ac:01:df:4f:9a:9b:
e5:b0:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:52 2026 by rpki-client