Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: FYu7a2ioOmMdOREPelnEc9GMsR8UBYZ0cHMhH/FgMM8=
Subject key identifier: 9E:5C:88:22:A8:91:4A:EB:A5:17:28:30:D9:E8:59:D2:0C:6D:DF:00
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019EBF5AD9EECF12B77F75FAFAC4CC23B04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 12CB
Signing time: Sat 13 Jun 2026 05:01:02 +0000
Manifest this update: Sat 13 Jun 2026 05:01:02 +0000
Manifest next update: Sun 14 Jun 2026 05:01:02 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: VaOapabV8z2iLEACewbrprEJDN4U7vEhnHYcFj4gnwM=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:d9:ee:cf:12:b7:7f:75:fa:fa:c4:cc:23:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jun 13 05:01:02 2026 GMT
Not After : Jun 14 05:01:02 2026 GMT
Subject: CN=9e5c8822a8914aeba5172830d9e859d20c6ddf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:69:af:b5:60:d3:ca:d4:dd:a1:1e:3e:75:
d9:46:ca:c5:9c:a8:d9:23:f5:98:38:62:20:43:1b:
70:f2:11:6d:32:9f:38:4e:ab:15:93:92:f4:93:9d:
5b:0a:71:e9:bf:ca:34:c3:19:ef:85:f4:ed:49:9b:
19:15:7d:a4:45:77:ed:1a:ac:89:12:ba:95:37:00:
ec:7e:10:b0:4e:4b:ad:38:90:88:16:9b:11:4c:34:
4a:cc:07:ea:b2:09:cc:fc:92:11:04:71:a5:0c:6b:
8c:22:a6:fe:8a:87:4e:0c:55:54:fc:fd:62:4e:94:
d2:4b:7c:47:58:16:e6:03:10:e4:5b:d4:89:1a:c2:
2e:5e:73:16:3d:c9:e6:0d:50:d7:d9:8c:95:3f:75:
73:b6:a8:37:6c:69:ef:11:55:e0:4e:5e:23:f8:02:
b6:12:73:57:f7:7c:c1:f2:77:a9:dd:24:c2:a4:40:
b3:6e:2b:ac:81:f7:0d:26:8a:5c:fc:16:b5:0d:b3:
a5:7f:17:00:1a:e6:22:d1:59:72:38:38:84:47:33:
37:0d:28:7b:68:00:17:49:2b:7f:a5:e5:d2:56:70:
ec:95:a1:9e:d1:e1:96:a2:8b:5a:55:ef:69:5d:a5:
79:08:e3:9b:63:9f:9b:72:90:c1:82:88:7f:bf:3f:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:88:22:A8:91:4A:EB:A5:17:28:30:D9:E8:59:D2:0C:6D:DF:00
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:57:79:ef:c5:2e:9d:51:62:3b:14:0a:85:6b:f8:5d:a0:
06:fd:e8:4b:1d:9e:3e:4a:66:77:13:e1:39:8e:29:98:85:01:
b0:77:5e:10:95:bc:5c:18:6b:1e:85:6b:a3:90:c3:ad:19:bb:
73:a4:0e:eb:fe:7c:f4:c6:d7:67:19:18:de:61:99:51:20:ab:
b2:a2:f2:a0:2c:72:e7:71:98:1c:5b:3d:5d:e1:99:b4:61:84:
ef:67:3d:2a:66:1f:19:b0:6d:c7:17:dd:e4:85:b3:06:a5:b1:
90:00:ba:fa:b1:83:f1:79:86:f9:84:3f:1d:00:3a:c3:01:8d:
53:c3:29:7b:ac:2d:4c:77:67:36:d3:ac:78:0c:fa:0b:9b:c3:
b6:67:28:2a:6c:f7:4a:2b:5d:6c:21:10:76:00:53:56:7b:5c:
25:1e:7f:10:75:bc:f6:2c:42:b5:e5:03:50:24:65:ff:1d:e6:
fb:da:30:1d:38:63:07:ee:64:ab:ce:cd:17:93:e7:2b:b4:68:
8f:5f:16:cc:01:81:90:06:cf:cd:b6:51:5a:8a:a3:0c:d1:cf:
4f:f4:fe:6d:8b:81:36:69:7d:ce:c2:29:48:1b:db:32:49:b8:
54:11:96:d0:fe:49:41:39:cd:c3:e7:5c:d2:6e:07:86:dc:af:
2f:c8:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:08 2026 by rpki-client