Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: TXDO+z/n1O+D+SNxKvma/TCZ7gTJhj3M94eKmjHPnXU=
Subject key identifier: 09:51:CB:76:DD:27:90:3F:09:20:E6:EF:D7:56:5E:6B:4A:1A:29:50
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019EC036520A423CCAF921F30BC7AD83BE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 0858
Signing time: Sat 13 Jun 2026 09:00:45 +0000
Manifest this update: Sat 13 Jun 2026 09:00:45 +0000
Manifest next update: Sun 14 Jun 2026 09:00:45 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: 1esfPjLlpCseBPL3rjk+/IA0svM9li98XjMJJwd1Eyw=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:52:0a:42:3c:ca:f9:21:f3:0b:c7:ad:83:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jun 13 09:00:45 2026 GMT
Not After : Jun 14 09:00:45 2026 GMT
Subject: CN=0951cb76dd27903f0920e6efd7565e6b4a1a2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:52:5f:fd:e7:8a:5f:bd:36:8a:f9:d7:93:
58:30:e4:8e:37:f0:b0:21:7a:15:59:34:30:e6:91:
62:58:9d:28:5f:a2:55:3c:4d:1c:ef:b4:d3:15:a2:
c3:8b:dd:0f:44:ed:a4:a4:11:6d:83:d4:95:15:9b:
a5:7c:f2:99:8b:04:c9:fb:05:3c:c7:f0:b6:c7:f2:
89:a9:1d:13:b2:8b:77:b2:d4:b3:54:00:f3:a6:7f:
99:4e:ad:2f:e5:13:b3:8b:2e:08:63:c4:d5:47:7d:
62:d6:00:4b:31:da:fd:2a:52:2a:1d:8b:94:19:97:
e6:8d:a0:08:ca:69:6d:57:5f:9f:66:16:1b:07:d9:
c0:6f:e1:6f:e1:fe:23:79:aa:f7:dc:c8:ae:ea:55:
1c:e0:ad:76:15:77:4a:6a:22:6d:90:af:ac:77:9c:
6d:c9:e5:6e:01:06:b4:3a:7e:f4:2b:00:07:30:d5:
dd:3e:1b:d8:d3:31:9e:39:e7:a8:f7:26:2c:6c:f2:
dc:b3:0f:61:21:27:39:1c:91:85:a7:d2:79:85:01:
f4:9f:f4:14:ae:7b:57:5d:db:e5:ea:75:68:c4:15:
49:28:37:f5:04:45:b3:7d:6a:7f:b2:fc:fe:06:1e:
4a:8f:71:14:8f:7a:37:9c:8e:28:b1:ab:6a:9a:8c:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:CB:76:DD:27:90:3F:09:20:E6:EF:D7:56:5E:6B:4A:1A:29:50
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:31:ee:18:3b:4e:45:0a:88:3f:70:58:2d:8b:0c:01:69:
6d:f2:a6:75:6c:d6:ed:6c:9f:5e:47:f1:e3:a4:fa:a9:bd:53:
eb:62:33:87:06:d7:a6:15:b4:a9:5d:ed:da:39:46:65:f8:4f:
c2:eb:de:b1:07:81:bb:57:46:4e:01:83:92:86:f3:a6:75:df:
71:f6:40:7b:d6:f7:8d:1c:17:a0:e9:cc:1e:36:37:a5:04:7a:
e8:bb:d8:29:ce:43:30:db:58:2c:cc:b1:7d:16:b7:81:b8:c9:
b6:45:87:19:f4:c2:fe:57:e2:48:dd:9b:de:ed:fe:78:80:71:
bf:8d:e1:8d:9d:35:31:5c:df:ab:f1:54:56:89:be:e4:fd:79:
ee:13:6d:50:6e:77:ee:26:a4:f9:a6:4e:cb:72:af:54:f9:86:
89:60:bc:b0:7d:4f:1c:2c:4a:4f:67:be:cc:db:71:7a:6f:ac:
64:00:82:70:6b:b5:0c:8a:a3:e9:5e:24:55:d8:f7:61:b3:0f:
73:83:0c:cd:26:4c:b2:4f:77:98:b9:c2:59:67:7b:c3:7d:55:
11:f4:f7:85:fb:99:04:db:0e:e0:bb:a0:48:ef:e5:4a:d4:72:
14:9c:b6:09:84:5d:37:49:e5:23:38:09:0b:af:e2:f1:d0:84:
ee:62:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:39 2026 by rpki-client