Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: ggiSh61TMUltsiZOjHmlKIWVRETOBGpeqR5AHWw+dJU=
Subject key identifier: 68:1C:13:76:AB:5D:99:37:21:6F:2B:7D:09:18:9C:59:4D:67:15:1A
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019EBFC926B31DCAA8BE06877B89CA9A1F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 07:01:31 +0000
Manifest this update: Sat 13 Jun 2026 07:01:31 +0000
Manifest next update: Sun 14 Jun 2026 07:01:31 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: geYG2TsJoTaUnk3ov+d8ibJpQYhoLffJ7RUYMiJBr9A=)
2: HxYUvq4j2kjQjb7fshoqtr7XjZM.roa (hash: cwIpRvWEll/venDzRwZfRL54RVOPqOWPtG5IFPsqVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:26:b3:1d:ca:a8:be:06:87:7b:89:ca:9a:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 13 07:01:31 2026 GMT
Not After : Jun 14 07:01:31 2026 GMT
Subject: CN=681c1376ab5d9937216f2b7d09189c594d67151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:5f:b3:9b:fd:e6:7c:38:2a:6f:00:f4:ca:
8e:c4:68:26:af:1e:7a:c5:80:69:52:d9:ec:64:f8:
01:ea:fa:fe:cf:57:33:2a:fe:73:0b:d0:2e:5c:38:
67:c1:85:d8:05:8c:84:f5:1d:52:10:43:e7:79:c8:
71:2b:c4:cd:a7:f5:fb:07:f8:4c:27:16:4f:1a:26:
74:65:f7:08:90:d1:30:13:07:82:d6:02:c1:b2:93:
d6:5a:2b:00:63:02:4a:1d:ee:ea:9a:ff:0c:e8:1d:
a1:a1:9d:5a:05:bf:57:98:58:b0:9f:db:25:ee:26:
37:ca:e5:25:bd:49:a8:98:04:49:57:a2:fa:e3:32:
b4:09:e6:97:60:32:ac:26:96:02:32:79:7e:2d:ec:
65:14:a0:8b:b1:80:89:11:84:85:f0:a8:66:78:b1:
5b:39:76:47:43:25:2f:d6:0e:0f:23:8e:16:04:7b:
d4:f7:6f:6f:04:22:ff:35:fa:26:a1:c2:54:46:98:
9b:dc:e1:35:73:76:e4:96:61:46:45:57:8c:db:e1:
fc:a3:3a:1e:d7:f8:17:e6:22:b9:74:4e:24:5e:3b:
9f:04:4e:b7:ff:0b:58:69:35:a2:2f:5b:d4:66:55:
65:a8:64:53:46:bf:28:9b:62:96:82:90:41:55:66:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:13:76:AB:5D:99:37:21:6F:2B:7D:09:18:9C:59:4D:67:15:1A
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:ba:8d:ef:77:ec:e6:d2:b7:5b:0f:6e:49:96:28:fd:93:
b3:05:cc:89:10:52:33:80:42:64:b6:a2:78:23:eb:c0:bf:7e:
3c:5b:d8:f0:e3:8e:1d:30:30:d1:b6:0a:e8:0d:87:66:9c:5a:
d4:72:1e:cf:2e:9e:c2:25:3c:b4:87:a4:8a:06:ed:fe:02:6a:
70:ec:2a:f8:74:83:d8:6e:75:87:95:00:31:8e:9e:a4:c8:bc:
5c:fe:b4:fd:10:3b:31:33:0f:04:6f:fa:25:98:7b:8f:a6:2b:
49:46:c5:b3:d8:ab:7a:fe:5e:4b:75:cf:38:25:0d:d3:14:1c:
e1:ca:3d:33:67:1d:61:ef:8c:a7:6c:4c:01:ac:5c:46:76:5f:
80:0a:ab:f5:a7:5b:bd:fa:00:26:39:f8:7e:93:55:45:2c:49:
83:fe:14:eb:4e:13:c9:77:3b:54:7c:80:90:c2:8c:0b:e0:9b:
bb:e4:e1:7a:69:0b:03:b2:4b:e5:73:3b:88:ea:fd:9d:f0:40:
08:0e:19:09:a5:77:a5:e4:fa:56:98:91:0e:a2:96:c6:06:b5:
b8:6c:b7:33:8d:b1:b5:dc:4c:d8:b2:42:ed:c2:ce:2c:5b:68:
38:c5:a5:93:1b:2a:fc:a8:a0:c3:cf:e9:43:28:16:68:fc:86:
08:bb:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:16 2026 by rpki-client