
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: tQL4BM4pyguOFYqbcGCbu0sysBDRxpYertijkKSE8kg=
Subject key identifier: DC:52:02:21:D4:7C:96:25:CC:F4:5D:51:B8:D0:85:05:55:A7:E3:26
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019EC412E128E0D16C7E855686ECCC3572FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0EB5
Signing time: Sun 14 Jun 2026 03:00:31 +0000
Manifest this update: Sun 14 Jun 2026 03:00:31 +0000
Manifest next update: Mon 15 Jun 2026 03:00:31 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: V2s2ErXdv4WoSzOrHSJbMcT0qWfKH1R9l/TtUz83+vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:e1:28:e0:d1:6c:7e:85:56:86:ec:cc:35:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jun 14 03:00:31 2026 GMT
Not After : Jun 15 03:00:31 2026 GMT
Subject: CN=dc520221d47c9625ccf45d51b8d0850555a7e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cc:74:40:03:f4:9c:7a:f3:c6:93:0d:8e:ca:
da:6f:9b:34:7b:50:49:69:a9:45:04:87:fd:37:b4:
39:2b:ec:79:0d:7a:c9:1e:d2:b7:7e:f1:06:52:a4:
31:f8:e5:09:d7:1f:85:5d:bb:f8:2e:78:0b:c9:81:
0b:84:69:24:91:9a:6e:7e:58:8c:ab:21:c9:48:68:
1b:71:e3:1d:18:8c:9e:49:39:86:39:6b:3d:24:c6:
9f:fa:e6:8a:a5:42:2b:4e:1c:87:81:34:f9:49:78:
a9:54:2c:f5:1e:4b:e4:03:18:20:cb:53:23:99:cd:
53:d1:62:6a:eb:77:78:1e:5c:79:fb:89:e5:9e:8f:
a2:74:ba:4d:92:37:ca:d1:cf:20:5e:db:fe:32:78:
de:59:48:cd:50:01:65:89:8a:34:8f:f4:ba:76:c9:
76:94:36:e4:e4:3a:cb:10:c7:59:6d:39:bf:71:4c:
3f:35:23:3f:3c:47:79:53:90:56:2b:5c:b6:0a:5d:
c0:11:7d:43:1c:4d:98:06:af:2b:cc:0a:a5:9d:d8:
3a:1f:65:3d:19:8e:e3:f9:c1:ca:b9:e4:11:95:8c:
65:46:0d:f3:45:35:c5:cc:0b:d8:d5:b4:24:96:70:
5c:4d:da:ce:1b:8e:b9:a2:ee:85:35:b2:df:dc:bc:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:02:21:D4:7C:96:25:CC:F4:5D:51:B8:D0:85:05:55:A7:E3:26
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:a1:71:e4:78:5f:06:41:48:3f:4e:d3:43:df:e6:73:f4:
21:22:e3:2d:f6:3f:1f:47:c2:cb:b9:44:85:93:d7:b9:15:1d:
5f:4b:ad:c0:de:53:fa:88:42:71:4e:3b:81:7a:33:6e:08:9d:
2f:b0:d4:dd:57:97:2d:f2:ac:97:37:3f:d0:16:9c:2b:84:88:
ae:f9:6f:c3:54:d3:82:27:c1:44:a4:5a:17:7d:20:28:56:61:
c8:6c:10:92:6a:bb:fe:1e:7b:e6:2a:4b:f5:3b:1f:1a:5b:60:
97:bd:bb:b6:9d:42:eb:bc:ac:49:81:c6:23:a5:2b:77:5f:73:
7f:46:a3:de:28:47:8c:60:cd:13:0b:25:42:c4:d2:72:e2:c2:
17:6e:ae:ae:4d:41:8d:0f:9c:76:45:f7:65:23:2e:75:4e:8c:
cd:89:23:85:40:fc:12:a8:09:dc:a8:16:06:aa:4a:94:b7:94:
74:b5:f9:ea:c5:12:79:b1:bc:b5:a2:5b:a7:d0:5b:e5:47:13:
b4:ee:d9:9f:58:03:46:2d:1e:1b:17:80:15:dc:26:df:21:aa:
dd:18:2e:22:c5:63:c7:d4:6f:40:c4:78:b8:6c:78:31:59:75:
49:3b:83:c2:d7:bc:26:c9:80:e8:13:c3:79:4f:25:6e:49:c7:
26:34:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:09 2026 by rpki-client