Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: eC8mazoazbjyL9yKu/K9cDicTPC+iKpO4VLOzenSaCk=
Subject key identifier: A0:27:49:87:36:AF:A4:CA:67:81:B0:6B:82:7A:AD:30:18:44:33:40
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019EC3DC77D0DEAA8F802CC74D0A4F029BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1967
Signing time: Sun 14 Jun 2026 02:01:06 +0000
Manifest this update: Sun 14 Jun 2026 02:01:06 +0000
Manifest next update: Mon 15 Jun 2026 02:01:06 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: P9Q/4joxvWvaMsOCcjmzYNF3Gou27jDpVOG/ss3GJEE=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:77:d0:de:aa:8f:80:2c:c7:4d:0a:4f:02:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jun 14 02:01:06 2026 GMT
Not After : Jun 15 02:01:06 2026 GMT
Subject: CN=a027498736afa4ca6781b06b827aad3018443340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:8b:8c:7a:c8:22:07:9a:b3:38:3c:fc:c8:
8b:7f:db:45:81:fc:e8:f7:52:f5:50:7e:f5:5e:05:
d8:bb:01:61:b4:3d:c7:36:82:d2:fa:b9:ce:5b:82:
34:18:c1:76:f2:43:ea:b8:d7:bc:84:df:dc:14:28:
80:69:7c:31:7d:ac:37:2f:8b:d1:09:f8:45:13:4c:
cd:5a:11:b3:2b:52:e8:6b:91:01:88:6f:19:45:a2:
01:fb:f2:ae:74:4d:6b:a5:84:d5:15:76:c4:27:41:
36:c4:c5:27:65:63:10:53:62:95:55:05:e1:82:59:
98:f2:73:ab:df:9f:02:f5:e1:c4:da:10:e1:53:8e:
f7:58:55:98:2c:0a:70:12:ae:d1:10:3f:9e:a1:c6:
86:fd:bd:eb:87:41:e5:f6:08:40:de:73:4c:1e:bf:
4b:47:97:34:c9:5d:5a:8b:f5:7e:a1:ee:35:83:15:
03:cc:fe:4d:01:9d:3d:a9:27:69:3d:42:4f:b8:6e:
3b:6f:2c:89:ae:e0:5c:88:2d:9c:4e:57:e7:18:57:
c9:7e:59:ea:5a:52:c2:83:7b:fc:f4:d2:29:92:2b:
b3:f9:f0:6d:b9:8e:22:77:f6:58:d1:02:00:8c:8e:
f1:e3:13:48:cd:38:9b:8d:95:a7:39:13:5f:ce:9b:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:49:87:36:AF:A4:CA:67:81:B0:6B:82:7A:AD:30:18:44:33:40
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:50:81:eb:9b:a3:7f:0d:32:45:ab:ea:a2:8c:7b:1b:9a:ac:
e0:51:57:67:1b:d3:e8:a7:9c:41:13:c5:c7:54:3b:4b:98:49:
2e:1e:06:e9:3d:d0:98:79:e2:cf:94:cd:e6:0c:3a:85:07:b3:
d8:80:41:21:3c:c1:6d:1f:b2:45:2c:ba:4b:0a:b0:45:03:5a:
8a:9d:89:bc:da:ef:44:53:f9:35:84:42:3e:9a:13:25:75:aa:
68:f5:67:be:8e:0d:0b:a1:f2:80:23:5b:61:53:f2:1d:b8:1b:
fa:2c:e1:d8:79:f6:43:3c:6a:ba:b7:5a:3f:d3:9a:9b:43:6e:
ef:5d:64:c6:45:e9:0d:b5:59:61:e3:21:4a:f0:df:f5:76:71:
66:20:71:b2:b4:32:da:c6:92:b8:39:bd:d2:15:c9:b4:93:8e:
ba:20:e9:ee:3c:12:17:50:b3:77:e1:73:78:36:ad:b1:2d:f9:
1b:b8:1d:50:cb:b4:54:22:94:af:2d:8e:02:e3:75:21:08:ca:
61:02:20:a9:53:6b:55:3f:4b:08:3d:8f:fc:e2:cc:ec:f1:48:
91:ba:56:e8:fb:31:25:81:b9:13:dc:84:53:8e:ba:f6:5d:f7:
12:29:d9:b9:b6:06:7a:b4:2a:68:d4:54:e9:7f:9f:25:71:ec:
f6:f4:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:59 2026 by rpki-client