Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: WaQ57CAuVuWP45Scem/T7xyQWFfLf0wi5/M9XLgOOgw=
Subject key identifier: 84:F2:E8:64:34:67:5F:E1:B8:EE:15:CC:2D:EB:96:5D:BE:EE:D6:63
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 019EBFFEF112A621EA26206315F48F98EF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 18B2
Signing time: Sat 13 Jun 2026 08:00:16 +0000
Manifest this update: Sat 13 Jun 2026 08:00:16 +0000
Manifest next update: Sun 14 Jun 2026 08:00:16 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: ejm/uGI39wjdZrhKZDwF1eYYg/Ty9UWcHsUvkzKMI9E=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f1:12:a6:21:ea:26:20:63:15:f4:8f:98:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Jun 13 08:00:16 2026 GMT
Not After : Jun 14 08:00:16 2026 GMT
Subject: CN=84f2e86434675fe1b8ee15cc2deb965dbeeed663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:18:46:ab:58:e6:b5:11:0e:b8:dd:3b:c7:
95:15:ac:a9:94:42:c5:71:26:b1:5c:a0:6f:90:96:
00:ec:c9:39:6c:d0:64:38:ab:52:7f:0b:46:16:48:
b7:21:19:92:a9:f4:80:76:de:c0:bc:a8:61:1e:bc:
1d:88:f5:ac:d1:13:b0:d7:95:9e:ea:6a:3c:a7:2f:
33:7e:cd:2b:68:d6:fc:b5:5e:0b:4e:51:cd:43:09:
6a:39:0c:25:10:51:c4:18:8d:a8:88:d6:43:1e:93:
eb:ed:98:a1:25:79:da:f1:13:86:1c:98:23:eb:8d:
c1:7d:f3:ed:a4:c9:4b:9d:7d:80:ad:0a:d5:60:1e:
10:07:35:f1:43:54:b0:e5:75:5f:d5:70:1e:47:50:
1b:27:09:91:c2:00:af:95:67:23:1c:3a:d3:ed:d5:
62:1c:68:77:87:95:4c:aa:51:e9:58:d1:9b:13:a1:
81:92:c7:41:8d:83:4c:ed:da:ac:37:21:e7:e5:65:
30:b8:b7:26:8d:7c:6d:61:98:af:23:c3:22:5c:ec:
90:28:89:50:3d:95:63:6c:1b:89:f5:0b:16:59:8f:
b1:ef:3f:05:f6:31:3a:0b:96:fd:2f:f6:f6:ff:c6:
df:0d:02:48:6e:09:b5:3f:0e:34:73:a4:c6:21:39:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:E8:64:34:67:5F:E1:B8:EE:15:CC:2D:EB:96:5D:BE:EE:D6:63
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:73:e3:b5:b9:37:69:a1:99:57:a8:1a:76:a6:47:3e:cf:4d:
3e:62:e1:ef:ce:26:48:23:ee:1e:7a:49:0a:7f:e3:fb:27:b0:
71:6c:b7:45:36:87:19:21:50:ed:bf:49:12:fc:47:f2:7b:d0:
81:fe:73:e6:a1:60:4f:b1:54:35:75:d3:de:ad:25:7c:6f:c9:
0b:bd:35:e5:e0:1f:89:a7:33:f6:e5:47:2f:01:21:b9:90:ae:
ec:24:b6:5d:a8:53:e3:5d:34:b6:39:ea:57:ac:74:2b:4d:7f:
06:c3:42:27:4b:a7:98:53:b1:3d:fc:96:f7:55:99:d5:5c:6d:
c4:df:99:48:29:76:04:52:c9:b6:90:1b:98:3c:1c:4e:72:90:
22:dd:f3:25:99:f7:a3:eb:6a:ff:d6:65:db:56:3a:9f:9f:55:
eb:5f:5d:ac:6e:4d:c5:62:3f:8f:a5:e3:dd:06:32:a0:c7:45:
c8:eb:4b:0d:7c:2a:e4:8b:2c:a5:3a:f2:9c:e7:de:f2:17:00:
5b:c7:c0:75:aa:35:02:2d:03:61:5c:d4:84:83:e1:d4:fd:79:
67:49:3d:63:02:92:bd:8d:a7:ba:a7:10:65:88:37:f6:04:e0:
dd:47:b7:a1:16:14:cb:d2:38:55:c9:d7:a1:52:ed:b8:78:54:
90:f0:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:30 2026 by rpki-client