Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: R08pwExH30Jr3x3WvVCqnfSkUyDk6HirD7YqnL53Fvk=
Subject key identifier: 2C:DF:50:34:D5:F6:0B:20:C2:9A:D0:47:0E:B5:3A:75:A0:35:E7:FA
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 019EC2C9B14C34901EBC6F6B9E4EBFB80888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 1005
Signing time: Sat 13 Jun 2026 21:00:58 +0000
Manifest this update: Sat 13 Jun 2026 21:00:58 +0000
Manifest next update: Sun 14 Jun 2026 21:00:58 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: 34yHyfpfQTuIPCuMLW0+TQMMmefevAZLYMfT41Nwha8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:b1:4c:34:90:1e:bc:6f:6b:9e:4e:bf:b8:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Jun 13 21:00:58 2026 GMT
Not After : Jun 14 21:00:58 2026 GMT
Subject: CN=2cdf5034d5f60b20c29ad0470eb53a75a035e7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:a4:16:f4:03:32:70:55:59:02:fd:b4:d3:
81:49:2d:c1:2b:ff:3b:49:39:a7:06:3e:ba:0a:3b:
ed:1e:51:57:d6:24:8a:40:81:9a:03:39:f8:84:fd:
5f:66:36:dc:68:94:74:73:94:90:f7:95:de:fe:b7:
93:c3:74:8c:3b:5a:e7:77:44:bc:36:80:2f:b2:5a:
09:46:c1:91:c3:a1:1a:35:06:92:5b:e3:92:aa:63:
72:b8:5a:d4:a6:af:0e:a8:d7:0b:97:93:f3:db:d0:
f5:c9:41:29:86:7b:55:cb:c1:5f:bc:88:29:67:3e:
2f:90:c2:5a:e9:c5:8e:26:f1:23:fb:27:f4:5d:67:
df:46:7c:c9:02:c3:c4:b7:89:2c:b5:45:2a:c9:4b:
6a:6b:7e:9c:ce:a2:9d:bc:39:60:6f:20:0a:8e:c8:
af:07:25:5f:70:2b:01:9a:0a:fc:a1:5c:0d:90:40:
7f:8b:af:40:a7:64:ae:02:2a:29:d4:3d:7c:63:8a:
d7:09:cd:d6:af:38:79:eb:59:08:0c:61:b6:c8:7f:
26:af:b0:73:6c:71:5d:38:bf:2f:bf:e6:3d:c1:86:
15:42:86:80:99:94:1f:50:fc:d9:36:38:5c:25:7f:
cd:77:7d:45:1d:ec:1c:e4:5d:e0:92:75:5e:7b:98:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:50:34:D5:F6:0B:20:C2:9A:D0:47:0E:B5:3A:75:A0:35:E7:FA
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:e4:bc:0c:fb:c6:f8:21:0f:17:a3:96:9e:93:1f:d7:f1:
73:85:91:56:06:2e:2b:03:04:37:6d:37:26:4f:69:95:5e:52:
2b:22:fc:e6:a5:f6:dc:4b:8a:44:fe:50:6e:03:31:c9:3f:fa:
4f:8a:3e:67:ae:ca:84:8b:41:c8:0d:1f:cd:88:3f:e0:79:95:
41:8a:ca:77:5c:4b:3f:6b:a8:6f:9b:7b:3d:d4:72:03:6f:66:
9a:1b:49:75:ab:9f:f6:0d:71:84:68:f8:6b:d9:a2:a5:44:c4:
29:6f:a1:8b:13:2a:5b:2b:27:72:83:c6:35:ee:02:01:fe:aa:
05:c4:6e:a7:fd:c8:07:e1:75:ab:7a:63:56:e5:3b:e0:e2:59:
78:b1:7d:1d:8a:7b:74:52:ed:32:77:b4:94:55:08:ea:c7:66:
be:07:b1:de:73:84:01:2e:76:c3:52:02:0e:fb:df:0f:ea:ea:
0f:39:d4:6a:9b:56:1c:ab:f9:29:84:58:60:a6:70:44:98:6c:
f6:2e:74:36:de:a4:17:02:70:2a:06:6a:97:4c:76:d8:0d:6b:
f3:ad:e0:da:de:5e:9d:ad:c5:d5:4b:8d:3d:fd:fd:7a:5f:80:
f5:f1:f6:e4:a6:11:6b:ac:4e:b8:a4:e3:d1:2f:2a:94:a9:fa:
d6:60:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:39 2026 by rpki-client