Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: olLayNm80LV7l41y5G6rNx0RUZsdfJMa/6KJ0sLwwcM=
Subject key identifier: 27:D9:D7:F5:67:E4:A7:8B:95:33:52:CD:5E:BE:3A:3E:02:99:35:45
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019EBEEC5779553FF2D1BF963D454148EF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0E73
Signing time: Sat 13 Jun 2026 03:00:20 +0000
Manifest this update: Sat 13 Jun 2026 03:00:20 +0000
Manifest next update: Sun 14 Jun 2026 03:00:20 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: 0fHNxZu659v65K8holwaIMDUPmSC11xL5IlDH+jXJBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:57:79:55:3f:f2:d1:bf:96:3d:45:41:48:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jun 13 03:00:20 2026 GMT
Not After : Jun 14 03:00:20 2026 GMT
Subject: CN=27d9d7f567e4a78b953352cd5ebe3a3e02993545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:49:93:33:29:eb:26:ce:4d:45:24:54:c1:
96:f3:e2:4c:f6:48:75:b1:22:9f:0a:a3:8a:11:d4:
3a:c5:f4:de:88:3b:58:03:bf:9e:03:05:eb:43:4a:
d2:9e:0e:73:d7:e3:6b:49:c0:48:bf:7b:54:4b:fc:
fc:73:52:f1:dd:fc:0f:12:d7:a9:23:94:32:7d:31:
d3:73:05:86:dc:22:2f:7d:41:b9:35:5a:db:75:a4:
fd:49:ca:d6:81:83:33:d7:2c:33:c0:2c:9e:06:33:
7c:57:61:59:d6:30:99:c9:fc:87:c2:60:e8:5b:57:
c9:73:bf:3a:71:62:0d:37:39:ae:f8:42:03:92:77:
c4:9e:c3:ac:9e:31:83:39:0d:dd:ea:8f:a1:fe:4a:
b6:fd:a1:5c:af:85:3c:c6:49:2e:f8:2f:c2:19:c6:
f0:29:63:b3:39:4a:05:7c:05:3d:cc:54:19:a8:72:
e4:78:d0:5d:49:6e:c9:ec:b0:4c:ab:18:2c:c4:85:
ca:88:2d:6f:d8:e4:f1:94:6f:04:ea:7d:24:41:b4:
e3:84:46:a8:a1:32:e2:ab:79:06:5d:01:26:4a:00:
a9:84:7b:5f:c9:3e:59:dd:78:da:80:c5:58:9c:99:
64:cc:b6:91:38:7a:fd:e7:b6:b6:7b:e2:72:9e:da:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:D7:F5:67:E4:A7:8B:95:33:52:CD:5E:BE:3A:3E:02:99:35:45
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:18:bd:80:af:6f:60:82:02:9b:43:99:f1:1e:42:4c:13:a7:
84:58:23:05:a8:43:ab:c4:f2:24:b8:1b:2c:87:44:17:04:6a:
23:f8:5d:e2:29:89:71:9d:ae:c2:a3:61:70:83:88:36:40:f5:
bd:41:56:bd:89:cf:5b:eb:1a:8b:42:05:71:21:14:d5:ba:7d:
07:cf:e3:a5:30:52:9a:2d:36:45:53:de:41:ff:83:6e:0d:47:
7e:d0:34:84:08:4d:d9:19:78:12:09:6d:89:cf:8e:5d:50:fe:
dd:ec:c3:04:33:ab:0f:4e:7a:b6:c3:46:57:79:b0:a9:13:5b:
6d:c4:3e:02:61:61:48:5a:75:e2:98:c7:f5:26:5b:9a:be:40:
2b:3f:22:97:46:17:43:bb:52:9f:73:cc:95:10:4f:21:65:81:
f8:32:01:68:07:a1:59:b9:5c:59:a7:bc:a1:15:a2:b2:17:d0:
e6:e7:35:71:f4:ba:0e:91:fd:d9:2c:69:58:12:4f:0c:a2:ad:
fc:3b:92:b0:80:ed:b7:0b:3c:f3:d0:f0:7a:b9:64:04:f2:d2:
8b:d7:df:2b:48:e1:b3:cf:84:5b:78:26:a0:41:51:77:1e:1b:
50:f2:5c:a7:65:a0:c7:bf:5d:2b:a1:69:1e:46:cf:dd:1b:33:
dc:ea:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:43 2026 by rpki-client