Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: dFwPKf2xnVcN164M8YxkExEj993vl9tM1p1gmeQMFWI=
Subject key identifier: 08:E8:3A:ED:D4:C9:BE:AD:BD:80:E3:EB:09:60:E4:A9:AC:0F:38:00
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019EBE1135B4A08A548B5A24B957DAB11BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 195F
Signing time: Fri 12 Jun 2026 23:00:59 +0000
Manifest this update: Fri 12 Jun 2026 23:00:59 +0000
Manifest next update: Sat 13 Jun 2026 23:00:59 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: OM/upeDE7j9n90x9wrjRyCgzoB/EMiGkbFnwJdf/D0o=)
2: X45FUcZNo-YtDvtPWevU4wJ2FEY.roa (hash: rSd13zzClfxZXjpfUKzjtwc06S4fldzcQ0W8TuRXJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:35:b4:a0:8a:54:8b:5a:24:b9:57:da:b1:1b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jun 12 23:00:59 2026 GMT
Not After : Jun 13 23:00:59 2026 GMT
Subject: CN=08e83aedd4c9beadbd80e3eb0960e4a9ac0f3800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:c6:26:21:3b:21:e2:0d:e5:6a:47:0e:5d:
4f:a2:f9:54:ad:c2:fb:e3:fc:a6:dc:29:2b:da:31:
b0:11:58:70:ee:5a:84:28:74:7d:c5:75:fa:c5:19:
31:e2:0c:54:77:4d:13:b2:75:3c:4c:93:01:d0:b5:
8d:cf:53:e8:1d:d0:1c:09:77:7d:0b:2e:74:6c:83:
f9:ff:c1:61:4c:8a:50:32:db:60:6e:8b:93:99:6d:
27:5e:99:81:0b:72:a8:5d:a3:1a:bf:9b:ee:bb:18:
ef:61:d2:b0:7c:fd:e5:b2:28:5a:b9:15:50:18:a5:
b9:04:37:11:ea:2d:90:dc:01:89:a8:f0:7b:94:7c:
7b:05:0a:52:df:bf:62:05:b6:8a:e1:59:82:46:9c:
98:b3:c0:f2:b2:a1:d8:d2:c5:2f:69:30:ad:8a:5c:
30:a2:32:fe:6b:b7:cf:3b:20:50:03:f6:dc:bf:6b:
b6:35:9e:ce:21:34:f7:fa:62:79:25:0f:ab:78:2d:
b8:0c:c0:dc:ba:c3:61:a6:0e:0d:8a:22:13:72:db:
cb:31:04:04:dc:12:1b:b2:9b:8f:54:17:90:ce:07:
4b:85:c1:a3:84:80:fe:7a:52:4a:77:35:42:f8:21:
4e:12:92:ef:0a:d6:c1:fd:e8:65:3d:ff:c7:db:a6:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:3A:ED:D4:C9:BE:AD:BD:80:E3:EB:09:60:E4:A9:AC:0F:38:00
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:59:d2:91:2d:93:e5:3b:d8:40:ec:ba:ab:8d:98:76:c7:
1b:c0:27:2a:2b:47:42:68:d3:98:cf:5f:04:4e:8c:26:65:8a:
3e:0f:e7:33:a6:14:dc:11:05:1c:45:27:e0:90:bb:a3:dd:ed:
95:6c:b8:fc:4c:cd:0c:ab:0d:b2:b2:a4:7c:c7:bb:45:4c:6b:
86:f2:a7:e0:9e:25:92:1f:0c:88:05:9c:6d:82:f5:c1:b3:1f:
28:38:5f:d6:17:3e:1f:7b:8d:b8:dd:78:f9:fb:b8:cb:b4:06:
c4:8a:5a:12:9f:4d:08:5e:6d:bf:4e:43:56:27:3b:11:34:3f:
bc:32:ad:fd:78:bd:eb:29:49:21:84:4c:3c:3a:03:b5:d2:13:
9f:0b:c9:99:e8:96:84:74:f8:0b:b0:78:5d:1f:2e:7f:6e:77:
45:3b:e4:d3:7e:bc:40:09:02:e1:47:71:83:60:79:f1:e5:50:
8f:c7:2e:6e:1b:9b:1b:f6:c7:e3:52:3a:ad:bb:3d:41:5d:35:
7d:da:a6:40:bf:54:bd:fa:c8:ab:da:7c:be:6c:86:68:3c:f0:
07:9e:95:d6:4a:71:df:cb:d0:26:56:7c:dc:05:29:16:09:c3:
83:df:72:56:ae:76:6c:c2:16:dc:0b:33:40:7c:ec:d7:25:66:
70:7e:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:51 2026 by rpki-client