Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: u1VZZKdb7icqDRqDD1Me9QOiylQDiA4nad1v9DvvQMg=
Subject key identifier: 20:7F:95:72:BE:80:E2:51:C3:4F:42:2A:C3:EF:B1:77:1C:A6:C5:C6
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019EBE7F3025C0DEA74ED2ECE7B894879EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1445
Signing time: Sat 13 Jun 2026 01:01:06 +0000
Manifest this update: Sat 13 Jun 2026 01:01:06 +0000
Manifest next update: Sun 14 Jun 2026 01:01:06 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: CKO+aH29boVIpkmF5zsRtoi1WBjJrXiPLB9fOE6q0FM=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:30:25:c0:de:a7:4e:d2:ec:e7:b8:94:87:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jun 13 01:01:06 2026 GMT
Not After : Jun 14 01:01:06 2026 GMT
Subject: CN=207f9572be80e251c34f422ac3efb1771ca6c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:d6:42:4f:6f:81:7d:73:56:b2:44:8d:b9:
8d:e1:17:c6:e8:c5:c6:8e:ea:5a:d8:de:c8:3f:30:
64:5e:d6:eb:4c:26:43:f7:e5:3d:2f:d1:1d:2a:ed:
74:a3:23:fb:ea:52:05:a1:85:4e:2e:25:ee:51:b6:
51:9f:41:6f:ce:8d:ad:fc:04:f8:94:c2:ab:64:f6:
62:2a:4e:b1:cf:c2:ad:4e:7b:89:e6:03:f3:40:d7:
96:87:03:eb:73:f4:8f:5e:01:cd:db:f7:78:11:1f:
e9:f5:eb:30:92:a6:68:08:80:cb:72:11:f7:59:88:
63:c4:56:65:16:0c:f0:1c:f0:f5:93:8c:08:cb:d0:
7a:08:27:44:96:e7:50:ec:d5:22:c5:f9:f5:92:8c:
a0:6e:8c:4d:9c:1a:73:30:df:04:2e:a2:fd:09:ad:
f2:0c:bd:0c:70:6e:1d:88:0d:20:38:97:8c:cf:81:
75:f0:bb:ce:5a:52:23:85:d4:6f:58:18:2e:82:c9:
98:6d:24:b3:84:ab:63:14:f3:de:f3:8a:e7:0f:72:
2c:aa:50:c8:7b:76:33:31:c2:db:7d:3e:a8:e8:6a:
e6:07:f8:b9:b5:8b:ef:1d:6f:2c:52:49:6d:36:e2:
54:1d:70:06:1e:e3:63:c0:86:3f:9e:67:d3:73:7a:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:95:72:BE:80:E2:51:C3:4F:42:2A:C3:EF:B1:77:1C:A6:C5:C6
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a6:e6:1d:5a:6d:c3:46:40:a8:75:3f:5e:96:59:c4:11:b5:
bf:3c:08:74:11:5b:60:26:3a:48:e8:b0:de:d9:a7:7b:69:75:
27:df:62:d9:fb:0b:f3:9c:2d:8f:15:54:c7:90:8b:84:6c:d3:
83:0a:74:8a:16:8c:5d:d1:93:cd:7f:5f:50:15:14:5d:bc:1f:
dd:f8:47:a1:99:56:63:3e:aa:94:64:39:9c:1e:4b:57:6a:ed:
22:b1:56:84:49:2b:90:c7:93:82:89:92:59:35:b7:18:da:7a:
36:41:2a:4d:5d:56:71:10:08:74:6f:69:49:b2:e9:3c:b1:be:
4d:8d:f1:ab:70:d7:dc:e6:c9:a9:b8:97:ce:ac:f5:a5:e7:32:
69:29:d2:55:75:de:2e:5d:09:3b:af:64:bb:52:cf:da:43:c0:
f4:ad:7b:1e:83:a2:1e:c7:4d:bf:b0:19:ae:fd:75:0a:22:20:
a4:61:8e:e3:19:af:92:67:3a:3f:67:d0:53:cf:e5:0a:25:04:
fa:2d:f0:e5:5d:d6:31:c4:1c:98:0d:b5:71:27:73:7a:cd:37:
c4:33:40:8a:ac:1d:92:b2:aa:c8:ef:f4:e1:00:80:1a:18:e0:
f8:d9:cd:15:92:2f:1f:d2:78:2a:5e:8f:3a:36:3d:38:27:0a:
44:20:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:40 2026 by rpki-client