Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: C+NvR+4grFZt1r0fcZwuqlNwenn/mRLD1j9qSgZkwr0=
Subject key identifier: E5:85:0A:D1:DC:D4:21:8F:55:EB:9B:86:4D:49:1C:F0:3C:62:7C:5A
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019EBDDA59D01E9522A65826B6FD6D4EA340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 22:01:04 +0000
Manifest this update: Fri 12 Jun 2026 22:01:04 +0000
Manifest next update: Sat 13 Jun 2026 22:01:04 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: 5fbCCm5EFBLk283zt8vWcyzzXJqFVOF4Yt0RKCIbkAE=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:59:d0:1e:95:22:a6:58:26:b6:fd:6d:4e:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jun 12 22:01:04 2026 GMT
Not After : Jun 13 22:01:04 2026 GMT
Subject: CN=e5850ad1dcd4218f55eb9b864d491cf03c627c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:f0:46:f1:01:8d:f3:1d:9f:eb:a0:89:b8:
ab:15:06:90:ba:5b:79:9c:d4:34:23:24:ab:e7:1e:
a1:01:d9:b3:1d:15:6c:73:e5:13:bf:43:32:f9:f5:
ed:75:26:7c:49:fc:f4:66:71:78:70:1b:df:39:3d:
16:dc:88:a6:1d:e7:c8:bb:78:77:e3:67:20:62:45:
8f:9e:d9:f5:de:c6:d5:64:75:da:36:ce:bd:97:c4:
de:f0:e3:ce:21:30:32:4b:b6:73:15:3a:32:db:f8:
a6:6b:6b:40:29:d1:75:9a:00:23:f3:50:b7:5c:6e:
dc:3c:89:c5:c5:2f:9e:a4:85:98:e0:a2:60:1a:9a:
c6:fd:88:92:64:3d:61:8a:6b:b1:60:1c:85:f6:16:
28:b2:4f:69:c1:7d:ec:a2:75:ce:60:22:46:cb:c1:
ec:a3:fc:f1:7c:07:e7:b0:b2:bc:e5:27:bb:ac:fb:
b7:4d:67:7f:a2:cf:5c:28:ef:b3:fc:23:cd:d2:68:
40:c2:86:aa:34:f1:ea:1a:2c:16:0f:f8:90:d4:bc:
84:cb:f9:b6:a1:cc:da:6d:de:1b:d1:18:9c:d6:27:
9e:20:72:cf:23:48:2d:1c:d4:fc:8c:7a:7c:c1:21:
57:39:26:41:20:b3:4d:7a:0e:f8:38:11:dd:55:2d:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:0A:D1:DC:D4:21:8F:55:EB:9B:86:4D:49:1C:F0:3C:62:7C:5A
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ad:9b:a1:9d:17:c5:d3:52:5d:45:2d:e6:15:b3:dc:50:0b:
95:af:dd:c5:cc:17:79:55:43:b9:e7:fb:14:4e:cc:3b:ad:6b:
b2:f3:bb:b8:43:d4:85:85:f2:ce:bf:93:59:95:7d:df:27:cf:
57:c9:1c:73:67:c9:a3:98:f3:c6:14:e8:e9:5e:bc:bb:ec:2a:
40:0a:7e:d2:7d:ab:dc:53:1e:ec:da:60:90:ac:8e:7d:1f:86:
e5:e6:bc:e2:16:02:87:10:97:df:90:b7:23:e9:84:ae:0d:c2:
0d:0f:59:31:cc:71:2b:d1:27:99:f2:45:bf:95:d8:b6:39:af:
dc:9a:98:50:b5:e0:f8:55:9a:c5:14:3c:f9:01:5e:e3:0c:af:
7b:e1:a7:35:9a:4c:03:40:f8:22:d4:fa:bb:5e:f4:be:21:46:
37:b4:e4:ec:0e:94:e8:63:80:0d:24:c9:98:a1:0d:ea:ed:2c:
ab:c8:7a:a9:84:11:47:76:72:d9:ab:0a:8b:21:c8:e0:86:5d:
b9:6c:67:d1:da:44:8f:c2:b6:75:83:4c:c5:a1:66:b3:bb:7f:
91:e9:de:43:0c:e9:2e:e6:eb:00:fb:4f:0a:94:94:c5:6f:db:
e3:c4:54:83:51:1e:1a:9e:4b:3b:ba:9c:39:2d:04:9a:21:0b:
60:78:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:48 2026 by rpki-client