Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: gZCJLoONIbCIAl5paoFqroSv1y7v8Cw/WJqphn8BpNw=
Subject key identifier: EA:28:E2:5E:35:8A:32:0E:1F:CE:94:4A:8A:7D:5A:8F:B6:F9:98:B7
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019EBF23C4022CF119D52AE33F82F1A02043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 04:00:52 +0000
Manifest this update: Sat 13 Jun 2026 04:00:52 +0000
Manifest next update: Sun 14 Jun 2026 04:00:52 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: oBkjOPyFkIpZif9laJSzpKrUE88x1J+acDG3ZQvj3Xo=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:c4:02:2c:f1:19:d5:2a:e3:3f:82:f1:a0:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Jun 13 04:00:52 2026 GMT
Not After : Jun 14 04:00:52 2026 GMT
Subject: CN=ea28e25e358a320e1fce944a8a7d5a8fb6f998b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:6e:dc:3e:5b:ee:3a:00:24:04:e0:ed:ac:
eb:af:7c:c2:bb:6e:c1:9f:ae:d5:37:18:ee:97:3d:
90:87:bd:89:bd:29:cd:a6:fa:97:87:29:72:f4:de:
a6:54:88:07:57:26:ae:ce:b6:da:41:c4:dd:aa:fd:
0b:37:c3:61:33:77:0f:54:19:8d:1c:ad:48:9d:9a:
75:8f:b0:03:18:5c:6a:1a:df:b3:a1:a2:20:41:1f:
38:7f:2f:12:03:f6:12:8c:54:c5:c3:00:d4:51:74:
2f:f5:16:a5:7c:6d:1a:fa:a1:d6:a8:9a:42:07:37:
02:29:4f:c7:a5:51:b0:4f:5a:1a:f4:7d:25:5a:66:
3f:ff:77:71:15:b9:c0:20:95:fe:62:db:96:3a:6e:
10:a9:33:ab:60:f5:0c:d3:3e:dd:26:ef:7f:12:b1:
c7:9c:3e:4c:7a:fc:62:b7:4d:01:44:52:8a:bd:68:
0b:1d:50:fa:86:ee:3d:d5:b3:2e:75:da:23:ad:5a:
6f:3b:ac:78:8b:4a:c3:fb:37:32:88:eb:bf:12:5d:
fa:6e:5a:dc:e6:39:a2:9a:93:11:7a:5c:16:ce:5e:
d2:a5:2e:e5:56:7d:39:58:19:53:1b:73:a7:be:4d:
7a:b7:a3:ec:5a:25:f5:17:29:d4:bc:02:65:50:9d:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:E2:5E:35:8A:32:0E:1F:CE:94:4A:8A:7D:5A:8F:B6:F9:98:B7
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:d9:2a:be:ae:79:d4:1b:a1:59:21:12:55:d6:e4:a2:07:
47:33:18:9c:46:0f:7c:8f:04:be:60:63:ec:5a:9b:95:8c:a5:
33:c4:3f:11:7c:5c:a5:e6:fd:4e:08:2f:4a:18:f4:9d:e9:50:
0f:9d:50:ca:56:d6:bc:a5:77:6a:e7:b0:56:56:6a:ec:e1:14:
eb:fe:f2:fa:91:e9:77:d4:19:31:06:65:ec:6b:f2:2b:ed:0f:
35:54:78:7c:46:95:f8:a1:2c:b0:ec:c8:cc:21:2d:ed:8a:62:
7e:98:58:a7:b1:8f:25:db:80:be:e7:86:40:6a:99:be:b9:f6:
64:01:b3:cc:f6:20:24:5a:c8:8d:8b:c3:ed:c6:06:49:a0:5f:
28:ec:a4:fd:86:81:cf:7f:f7:8d:fe:df:19:55:06:31:1a:54:
cc:58:c1:df:ba:92:ee:c7:43:a6:89:eb:15:11:2e:1b:0b:15:
a9:55:60:db:67:80:7e:3c:e4:9b:4a:47:b9:a8:a2:21:e2:99:
1c:25:24:8b:b8:cb:2c:7b:31:a5:81:6a:c0:4b:82:61:e3:8f:
5e:0b:a0:7d:26:d8:7d:93:da:a6:14:14:c6:02:ad:79:0d:8f:
bc:ff:35:34:26:5a:7d:e4:3d:6b:8d:85:28:f2:6f:b0:af:d8:
b9:1b:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:39 2026 by rpki-client