Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: +8HE+d1lMBaYthaOf/N1qR/EE0UJQNJWWwb0Pax7W6o=
Subject key identifier: 93:B5:8E:B4:EF:58:2F:B7:0C:92:12:21:2C:E9:BE:32:25:87:5F:83
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019EBF91754BE168C7AE00FADA955812D310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 06:00:41 +0000
Manifest this update: Sat 13 Jun 2026 06:00:41 +0000
Manifest next update: Sun 14 Jun 2026 06:00:41 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: 0k493qZ6w1GhaOFCr5VfX2S+ss+M79Ce1ckyL+OOVbE=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:75:4b:e1:68:c7:ae:00:fa:da:95:58:12:d3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jun 13 06:00:41 2026 GMT
Not After : Jun 14 06:00:41 2026 GMT
Subject: CN=93b58eb4ef582fb70c9212212ce9be3225875f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:10:01:5e:37:c6:bf:81:be:2b:e8:30:73:
c2:46:1b:04:98:dd:27:98:81:43:0f:e6:30:e6:d1:
ee:d8:a4:2c:b5:4b:b0:61:22:0f:8e:34:24:4f:38:
57:b5:e1:32:a7:32:ef:c5:37:d3:7f:3c:93:88:d6:
33:62:fd:e1:1b:f0:97:ff:43:e1:d7:f2:e0:a0:da:
89:8f:91:c9:a6:25:79:05:01:86:6b:96:b7:5f:fb:
41:21:6e:5b:76:62:52:e8:dc:b5:c0:60:37:0a:22:
92:a5:08:23:1c:1a:0d:b4:6b:9c:e0:57:58:78:e2:
0b:9d:e9:b7:07:b4:2e:6c:e3:2f:27:0a:77:da:5e:
9b:97:5a:99:ea:1f:49:26:b8:42:be:0a:01:c3:3a:
27:39:61:bd:5b:29:ba:76:8e:3e:a8:50:97:5c:aa:
81:10:33:be:b4:d1:f9:38:e7:8d:fe:09:9a:2e:63:
a7:f8:8e:ca:e6:21:68:09:61:1b:9b:b4:43:90:94:
3c:10:cc:23:f2:b2:66:b2:a3:f5:f4:e9:e2:85:bf:
24:18:7e:36:2b:72:d4:e1:d5:74:37:e4:57:0e:3a:
10:ce:c4:5d:45:85:70:aa:c9:1e:65:14:96:59:54:
4a:94:9d:80:f6:ea:ab:4c:a9:bb:af:e8:5c:2f:97:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:8E:B4:EF:58:2F:B7:0C:92:12:21:2C:E9:BE:32:25:87:5F:83
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:93:1a:c8:40:1f:9c:ff:2c:88:68:a6:55:2b:84:45:ed:cb:
70:bf:43:14:6a:9c:e6:ed:9a:c7:05:b5:01:5c:4f:cb:ae:d0:
80:53:93:0a:a4:72:fb:27:47:ae:cf:8e:e0:eb:09:91:28:1a:
7e:94:fc:83:3b:4a:21:18:c4:37:88:eb:1a:e0:8a:db:45:8b:
c3:fa:ea:b7:81:7b:c1:4f:aa:90:b3:ac:8f:10:a9:7e:28:c6:
ea:72:89:e0:ed:5b:57:23:4f:09:b6:f6:4e:6a:25:7b:35:68:
b8:11:50:61:ab:e3:b4:2f:20:07:aa:c4:62:92:a8:ed:b6:9c:
c4:85:9c:d6:a2:5a:82:ba:9c:6e:4a:9d:31:db:af:00:d4:c4:
ea:c2:ec:9f:b6:57:15:54:05:80:5f:74:51:f6:58:2a:cb:f5:
29:31:99:92:80:e7:a4:7b:9f:95:b2:d9:ab:b5:1c:f6:c6:ed:
1b:ac:1b:1a:c5:3e:52:47:45:2b:99:c4:1a:2e:cf:03:2a:a7:
ef:1b:db:38:fb:d4:a1:21:b9:ca:bb:17:06:52:29:b8:03:bc:
fb:5a:cf:07:a8:fe:4d:3f:04:96:b7:f1:68:02:7d:a3:8e:98:
4d:aa:70:4f:11:43:d2:d4:cc:8a:64:fb:76:06:db:f1:64:30:
36:a6:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:23 2026 by rpki-client