Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: QHxORFj3DuZ6XkynKC1/TTpu7Dee7Rw/KuCcdmuSK9s=
Subject key identifier: EA:C7:76:AB:15:BA:CD:D6:67:0D:C3:C6:DD:6E:25:49:BE:5D:93:D0
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019EC0A408CA9FAD70685FB658C59CBC0929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 1633
Signing time: Sat 13 Jun 2026 11:00:36 +0000
Manifest this update: Sat 13 Jun 2026 11:00:36 +0000
Manifest next update: Sun 14 Jun 2026 11:00:36 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: K4igSST8Z6pvscUtl0y4yvVNT7lIE2dJdoKDXL5Kl3U=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:08:ca:9f:ad:70:68:5f:b6:58:c5:9c:bc:09:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jun 13 11:00:36 2026 GMT
Not After : Jun 14 11:00:36 2026 GMT
Subject: CN=eac776ab15bacdd6670dc3c6dd6e2549be5d93d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:b7:9a:a7:1b:95:77:cf:9d:58:de:dd:59:
cb:bb:2d:66:99:db:4d:33:15:89:12:60:62:5b:12:
68:4d:2b:1e:95:6e:cd:1d:5d:77:5e:94:33:5f:a0:
b1:ec:67:99:1d:92:3e:ea:cb:c7:e0:3a:f7:1a:91:
15:fe:6f:3e:24:fa:bb:6b:50:81:27:da:0a:20:e2:
0d:5a:ce:cb:a7:77:13:c7:9d:16:3d:2b:b4:72:77:
92:d1:05:c2:35:47:d2:f6:37:71:d3:c7:15:f6:7b:
b8:3c:1b:6e:87:fb:5c:42:ec:87:ac:6b:5e:ff:7b:
2a:06:ee:7e:43:a8:94:8a:9a:48:40:11:8f:34:7a:
6b:60:5b:3d:fd:9d:34:f8:62:d1:34:33:75:fd:ce:
90:33:30:d9:14:51:db:74:dd:a1:0c:d3:4d:0b:36:
82:37:a4:a6:d1:47:b4:90:92:e8:5d:a1:8b:1a:74:
a6:2d:9d:14:ae:d4:87:50:6c:e5:27:16:b9:70:56:
33:4b:f6:94:59:c2:e6:57:c4:42:f4:0f:85:2f:3a:
a1:53:db:e6:81:5d:62:ca:bf:3e:c9:d7:44:58:59:
51:08:5e:db:75:54:7e:a6:87:09:77:7d:8d:87:f7:
9e:e5:4e:42:41:9f:8f:85:7c:87:f6:8d:c4:c8:2b:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:76:AB:15:BA:CD:D6:67:0D:C3:C6:DD:6E:25:49:BE:5D:93:D0
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:ab:fa:f2:07:54:d4:9e:2b:97:1c:63:e9:bf:6d:40:26:
14:4d:d2:8a:16:ce:5d:ec:2b:45:48:27:b4:90:19:8b:b8:a1:
43:95:ac:54:f7:88:d4:24:70:ef:7f:0b:9e:8e:67:bb:56:43:
57:08:fc:84:8d:18:60:c0:b5:ad:7e:f7:74:f0:34:d2:d6:a0:
a5:47:b4:9b:ff:c4:a4:ff:c0:ae:11:e7:a5:c5:04:25:3e:08:
00:e8:1d:ce:cf:c3:a8:cb:ed:8b:3b:ae:8b:bb:ce:17:22:c6:
a2:dd:84:6c:f1:95:75:50:23:51:08:88:5d:41:28:09:07:58:
68:a3:5c:f0:67:2e:c3:d6:88:3c:32:f6:fc:3f:fc:4b:92:ec:
70:cf:ea:78:38:15:48:bc:2d:35:8a:35:7f:28:76:94:fb:3f:
52:5c:e3:b3:3b:4c:5b:ca:03:10:be:00:59:2b:fc:9f:2d:03:
e2:8c:6d:68:a3:f5:7f:42:71:cb:55:38:a5:c9:84:26:d7:63:
a5:f6:c3:65:aa:1b:b2:a4:af:30:01:71:fe:9f:7b:ee:84:74:
d7:8a:79:66:eb:2c:24:27:81:2f:4d:61:94:d5:2f:ec:e6:56:
9d:68:7e:93:b5:7e:e9:81:37:e9:fb:cc:b0:65:5d:6b:bf:42:
c2:7f:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:16:06 2026 by rpki-client