Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: 07M5rt2Zb7XuQt7HYPQdu/Hglzlw5XBPe9S97KZHbPY=
Subject key identifier: 9E:97:1D:CF:29:00:F9:BA:8A:A7:C7:EA:30:89:F4:D8:8A:F8:BD:EB
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019EBF91307D4B8676D7417D4DBE340ECA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 06C1
Signing time: Sat 13 Jun 2026 06:00:23 +0000
Manifest this update: Sat 13 Jun 2026 06:00:23 +0000
Manifest next update: Sun 14 Jun 2026 06:00:23 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: XJKX+SpVO7S2PptmV8+PN7P0R2s5mDt3rNTgWzaQbCw=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:30:7d:4b:86:76:d7:41:7d:4d:be:34:0e:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jun 13 06:00:23 2026 GMT
Not After : Jun 14 06:00:23 2026 GMT
Subject: CN=9e971dcf2900f9ba8aa7c7ea3089f4d88af8bdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:10:7f:44:89:a2:8d:8d:0d:97:b7:56:19:
cd:75:8d:f2:53:28:7a:43:2c:9e:e7:2b:fc:e4:48:
08:00:e8:53:6e:f9:1b:44:9a:c1:fa:aa:2d:17:e2:
d5:8f:15:e0:d4:9a:5b:fe:82:ff:43:23:cf:ae:cd:
f8:10:88:4f:e7:05:cd:f0:44:e3:db:ef:1d:d1:f7:
95:96:56:a1:dd:01:06:96:8a:ec:76:c9:e7:27:73:
32:aa:18:60:8a:a9:22:cf:59:8c:be:2d:d6:d0:f3:
a5:aa:23:38:cd:8e:ab:e6:6a:b4:c7:08:8c:c0:9a:
93:26:3d:a4:3a:4f:04:e4:58:78:3e:64:26:4d:7e:
45:03:4e:b5:42:ea:f7:18:62:b4:f6:0c:16:81:7e:
1d:46:82:6a:f5:79:61:43:67:ef:0b:05:a1:67:91:
a1:1f:2f:f8:a2:a5:69:9f:82:2c:4a:3b:f0:be:af:
ac:05:5d:75:2e:37:c5:6d:1a:3b:71:66:7e:8f:e4:
15:07:50:bb:54:5e:1e:50:3f:70:b2:02:ed:7f:55:
22:a9:56:e6:f5:0f:41:c2:19:e0:76:f0:8d:53:18:
97:df:31:d6:0c:34:2f:9f:66:c6:47:71:1f:3b:54:
61:3f:73:c7:f7:45:87:c3:f7:19:0b:cd:08:47:f7:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:1D:CF:29:00:F9:BA:8A:A7:C7:EA:30:89:F4:D8:8A:F8:BD:EB
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:a7:1f:f4:23:de:67:b8:30:86:fd:4a:55:89:cf:ff:dc:
d4:12:d3:ef:43:61:21:db:de:71:72:ed:c3:99:0c:3b:24:fb:
03:dd:2f:c4:a4:a5:cc:61:76:b7:ae:63:9d:7b:7b:d4:67:cc:
48:b9:8d:0e:e3:07:59:37:56:7b:8d:7a:6e:89:eb:3a:92:ef:
61:a4:8b:f2:54:41:fd:11:9a:ec:cf:bd:5e:7d:ab:65:95:26:
8e:b6:0a:d4:73:94:ae:c3:9a:fc:03:66:bb:c9:4d:dc:c1:99:
67:1f:f3:c1:33:7e:8d:6a:14:4f:40:7e:95:82:a3:b9:28:a3:
7b:9e:5d:13:59:26:55:4e:a8:07:64:a0:22:f1:bf:e2:99:e5:
2a:fd:f3:d7:ed:0c:1f:d7:f0:09:39:5c:03:96:68:1b:fe:af:
d6:df:e6:40:4b:0b:a7:4e:21:a4:30:c8:39:75:26:18:c0:5d:
f9:29:41:ea:87:ab:27:a0:af:b3:63:03:78:40:a8:e9:91:28:
c4:cb:e4:ed:90:b1:14:ea:cc:9f:36:cc:d7:79:80:ac:4e:67:
e0:e6:03:99:ac:64:8b:27:91:c0:21:04:a8:db:1f:95:35:4c:
c7:5b:fe:e3:0f:31:1e:4a:01:9a:4d:0c:fd:28:8c:9e:09:57:
6f:10:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:17 2026 by rpki-client