Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: XSWLPd8GlftyGNnfTlSqhyUAw0/Pg9RZOArSmdYQ/c4=
Subject key identifier: 8A:60:7C:F8:8C:7B:58:CE:20:2B:28:95:F9:DE:E7:B0:B0:31:5A:02
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019EC25BE4CB947D49F4940F842CEB4A55EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0564
Signing time: Sat 13 Jun 2026 19:01:02 +0000
Manifest this update: Sat 13 Jun 2026 19:01:02 +0000
Manifest next update: Sun 14 Jun 2026 19:01:02 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: S3qhgniytggVe8as21df47BOA6gmZ0wSIWpXZdAxGmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:e4:cb:94:7d:49:f4:94:0f:84:2c:eb:4a:55:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jun 13 19:01:02 2026 GMT
Not After : Jun 14 19:01:02 2026 GMT
Subject: CN=8a607cf88c7b58ce202b2895f9dee7b0b0315a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:32:e9:ea:88:07:34:97:d8:16:03:fc:d2:
70:d7:3e:89:dc:46:45:93:57:01:1d:94:76:36:65:
89:78:46:24:45:f1:2c:c4:8a:dc:a0:24:5d:35:40:
64:db:3a:ce:f7:7d:3c:4e:7a:e5:c4:0f:32:b6:9d:
1c:ac:9d:93:9d:23:fe:22:58:5b:18:22:63:29:12:
89:b8:6c:fd:2d:5d:be:be:65:73:a2:59:54:d0:76:
33:c5:f0:7b:49:be:f9:da:7c:4c:47:18:b6:13:96:
3e:87:2b:0a:f2:4b:7d:59:f5:7d:45:64:48:87:22:
e2:44:33:7f:b1:40:58:67:2b:f1:a4:77:48:a6:02:
d5:fb:42:34:ce:26:a9:31:67:60:ee:04:19:f0:cc:
03:b8:03:ef:17:03:ae:04:c5:1f:e1:d3:9b:70:ed:
67:bc:fe:94:83:dc:f9:ae:92:70:88:5f:a3:a0:20:
a1:de:2a:82:cb:be:c1:f6:c9:71:c5:1c:eb:67:06:
f5:88:3a:c8:e9:21:1d:5c:41:a7:d7:e6:ce:bc:20:
2a:4a:7e:4d:37:08:a2:0c:0a:96:72:b9:aa:8d:58:
aa:28:55:92:28:c0:1b:7c:2a:c0:cb:6e:57:2c:95:
cc:2e:1d:f3:25:d1:ff:61:79:53:4d:83:16:29:dd:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:7C:F8:8C:7B:58:CE:20:2B:28:95:F9:DE:E7:B0:B0:31:5A:02
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4d:92:a1:1d:da:7d:76:8d:43:f8:40:5d:a5:fd:21:cd:d9:
4e:a0:55:1e:1a:a1:ec:ed:74:92:f8:6b:b5:38:d0:4c:22:28:
97:1a:8a:c6:80:69:bb:46:aa:b1:9f:50:06:20:7c:38:d2:16:
be:c2:f2:09:35:c6:0b:77:99:d8:1c:33:24:3b:02:39:47:89:
a4:4a:88:a9:62:15:d3:b1:3c:79:e8:42:05:d3:70:1d:a5:9f:
f8:c2:1b:73:43:51:8b:9b:b6:4f:ca:92:d8:1b:f3:a1:7f:07:
c4:cc:90:f2:c7:0e:41:13:1c:1e:5d:c2:ca:be:98:35:15:63:
b2:68:1d:d9:63:6c:3a:69:e3:a5:aa:44:ea:c6:b1:7d:94:6a:
9e:7e:d7:34:1d:18:38:e7:37:af:1d:a9:c7:22:5a:3b:af:16:
c4:d1:7f:87:c2:29:e2:9b:d1:96:9b:a1:53:b3:ba:bc:a0:38:
e1:5d:88:03:03:3f:df:49:61:9c:f4:e3:99:22:ee:6e:43:27:
13:15:04:d5:d3:4b:40:18:d4:ac:bc:1a:28:1e:82:68:ad:f5:
26:4f:c0:0a:11:60:55:1c:48:88:1f:b6:55:2d:e7:19:55:2c:
23:1a:cd:cb:ae:a7:d8:f3:8c:c4:c9:46:42:ab:ef:f8:0c:44:
9e:6a:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:35:05 2026 by rpki-client