Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: pPD1wpysy4uhrI2U1202DfcO6auwJC+HAQAXNhrKduc=
Subject key identifier: 14:65:15:0E:79:FC:6B:7A:5D:BF:98:1E:20:6B:CA:C2:01:26:F5:AE
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019EBFC86C7D023E2652BC43F2531AD62574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 07:00:43 +0000
Manifest this update: Sat 13 Jun 2026 07:00:43 +0000
Manifest next update: Sun 14 Jun 2026 07:00:43 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: mn+tLiyLf6ZJA5suBflYb06ZbAo8EpQnMrDrS84WIAc=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:6c:7d:02:3e:26:52:bc:43:f2:53:1a:d6:25:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jun 13 07:00:43 2026 GMT
Not After : Jun 14 07:00:43 2026 GMT
Subject: CN=1465150e79fc6b7a5dbf981e206bcac20126f5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:93:69:1e:e0:a0:f5:5e:45:ee:45:9a:cd:
f3:10:af:53:b8:8c:21:f9:ef:0f:1f:cb:86:86:3b:
3e:fe:af:ee:c0:56:8f:4c:2b:cb:25:3c:ed:f3:b4:
15:4f:2e:15:12:80:68:6e:be:5e:e7:31:45:cb:3c:
7b:d3:fa:28:53:32:08:60:bf:cb:ba:56:80:6e:35:
4e:a4:f9:62:d2:ee:bb:5d:d1:b5:9b:c2:38:3d:92:
5b:09:1e:3b:4c:17:34:46:f1:49:9a:61:c9:7a:62:
1b:35:5e:12:da:bb:de:ed:05:5a:4e:bd:7b:07:68:
ff:74:a1:f0:e7:a3:3f:be:9e:99:e4:1e:3e:8f:ad:
30:ca:ec:be:16:ec:c4:a1:f9:6b:5d:c4:4e:42:c2:
ec:07:39:20:0e:4b:68:18:e4:01:ba:09:03:06:fd:
f1:4e:f7:bd:f6:d3:03:b4:3d:82:e3:6f:3c:fe:b5:
45:64:0f:46:7c:4f:a1:b3:18:b3:94:c7:c4:9a:f5:
f9:3d:79:6a:a0:2b:be:ac:64:9b:8b:5c:c5:00:6b:
37:20:5e:c7:27:46:60:2e:99:96:ff:be:4e:34:a2:
7d:f8:da:10:21:f1:85:92:1c:87:2d:08:85:72:6a:
1c:28:7b:89:56:6f:3e:cf:fc:cc:48:30:ca:c4:0c:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:15:0E:79:FC:6B:7A:5D:BF:98:1E:20:6B:CA:C2:01:26:F5:AE
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:22:5f:0e:0c:01:79:b6:38:82:6e:23:22:5c:96:a5:2d:fa:
68:0f:a4:47:aa:f2:fa:bc:3c:49:8b:f0:69:b8:4b:38:40:a7:
a7:43:48:8a:e2:f0:f6:71:33:80:97:e1:a5:b2:56:50:6e:e9:
0e:d9:69:97:6f:8e:f5:2f:4e:60:7b:66:09:bb:c9:db:ab:31:
67:d2:ff:ac:42:7e:6e:a8:2a:c6:2f:3b:e6:17:15:35:18:12:
64:2c:55:dd:8b:fc:99:2d:3c:cd:ac:56:3d:3d:da:96:41:3f:
4a:66:60:13:94:bb:34:c4:c4:23:f7:a7:0a:2e:b8:50:41:64:
70:c4:a7:d6:b6:58:dd:36:a8:04:e4:c0:c4:6a:ac:5b:6d:09:
9c:cf:a8:c6:e4:b6:7c:19:8b:a9:a5:67:54:65:61:91:55:f7:
6a:ca:a4:63:0c:08:d0:6e:21:af:f5:60:04:10:1c:e7:f0:6e:
6a:44:9c:05:fe:31:3f:80:f7:69:20:13:0e:ff:2c:ff:a8:5b:
1b:5f:15:bb:bf:ee:80:8d:54:81:3d:0d:66:0b:b2:31:a0:de:
c7:50:02:f5:ca:b2:e5:f5:26:f7:14:40:0c:96:36:78:bf:ab:
27:4f:94:7d:28:2d:ff:1b:d5:4e:96:db:b1:3d:dd:97:27:cf:
66:78:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:20 2026 by rpki-client