Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: RoJ/GmSY65yAMotQlgUjCf0wg9gRLdH1+p78lG3CSXs=
Subject key identifier: 21:0B:6B:2C:2F:D1:93:62:CB:9C:BB:05:F7:38:A0:70:22:C9:08:D9
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019EBDA2BF4C2D1367F2342710F88FC50324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 1321
Signing time: Fri 12 Jun 2026 21:00:20 +0000
Manifest this update: Fri 12 Jun 2026 21:00:20 +0000
Manifest next update: Sat 13 Jun 2026 21:00:20 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: nxNpWEuI2SoLqbi+g4F7mnDTP9m6T0uujfTnIccZxGg=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:bf:4c:2d:13:67:f2:34:27:10:f8:8f:c5:03:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jun 12 21:00:20 2026 GMT
Not After : Jun 13 21:00:20 2026 GMT
Subject: CN=210b6b2c2fd19362cb9cbb05f738a07022c908d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:c8:6f:a6:89:4d:7b:fb:56:30:af:7b:90:
2a:d4:0b:b0:d8:77:81:47:22:91:ef:ee:02:b7:33:
09:bc:7c:61:e8:1b:7f:29:31:9b:cb:bb:25:6b:16:
67:1a:4f:e0:56:9b:c1:85:20:17:08:20:49:ce:7f:
31:ac:96:23:c8:ae:50:32:93:60:64:7e:29:27:a9:
50:0d:0a:9d:1a:10:2e:c3:c8:07:84:24:72:87:b7:
bb:7d:67:fb:ad:fe:83:de:24:ef:fb:9b:0f:2a:0d:
d9:27:45:18:16:aa:2d:6c:1f:7f:09:1c:6b:bf:a3:
68:3d:98:44:2a:5f:11:09:28:35:d3:23:84:2d:74:
b3:44:4f:ed:9a:10:22:56:23:80:37:d2:3a:56:f6:
d6:90:e0:61:16:99:8a:01:c7:d2:cf:3a:01:fc:99:
f4:48:aa:5f:f9:cc:7d:f2:a3:22:75:49:59:6e:9a:
64:0d:ef:5b:e6:47:ae:19:21:24:e6:f2:cd:0f:f0:
73:9c:50:94:8e:de:30:6d:a6:ae:1e:89:dd:5c:31:
b5:f0:13:77:2c:e5:ea:75:cd:28:ff:4a:08:d1:66:
9f:c8:1c:0d:70:c2:78:ed:3c:b7:c2:7d:c3:c7:f1:
a0:99:e0:c1:c4:7e:e3:68:88:03:83:df:82:f6:92:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:6B:2C:2F:D1:93:62:CB:9C:BB:05:F7:38:A0:70:22:C9:08:D9
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:d0:fe:76:79:fc:93:9b:0b:6b:7d:8b:1f:d4:94:32:40:
d7:04:27:24:ca:15:8c:42:c5:58:d0:0f:fd:49:1a:20:ae:f8:
b7:e1:32:18:5b:a9:d0:4c:23:74:60:e7:d7:0e:5e:5f:69:cf:
52:a6:d5:41:d4:85:bf:9b:59:07:6b:9f:6e:51:5b:27:59:8b:
c0:02:f3:5a:96:b4:00:67:f1:65:3c:63:dd:3d:3a:51:cb:f4:
12:41:3f:e5:86:a5:40:e1:75:ee:63:ef:a5:75:e4:48:f1:5d:
ef:21:c2:eb:25:69:dd:ed:43:6f:26:1c:21:23:4b:8f:f7:f4:
38:2e:3b:31:ee:9e:8b:6a:88:30:8d:4a:41:52:2e:dc:b7:b7:
ca:c3:11:f9:56:12:34:d9:ef:86:f4:d7:a2:eb:b1:de:4d:78:
7e:bf:15:94:4c:54:9e:c6:7d:72:78:59:08:cc:c3:03:16:2d:
a8:27:a5:51:31:93:09:99:c1:48:54:4a:5d:24:40:06:be:83:
3b:01:3c:69:fb:5a:5c:f7:23:ea:ee:08:9c:0c:29:e2:fd:15:
96:04:99:b5:8a:ef:b8:b6:33:d8:71:fd:04:3d:a2:86:d6:3e:
8a:ed:58:e0:ea:7a:90:e1:1a:5a:c5:0e:fa:6e:b4:64:e6:a5:
f3:d8:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client