Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: 3hVBs0rQnjYBSS0OjiSLp3H3oRNPn8fbvs/bQAnJfSs=
Subject key identifier: 4B:CB:75:08:E5:0C:E0:BF:96:BE:8C:C1:7A:3C:E0:15:B4:F0:57:77
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019EC0DB81F28B0D79FD28D33AD71CD81F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 12D9
Signing time: Sat 13 Jun 2026 12:01:11 +0000
Manifest this update: Sat 13 Jun 2026 12:01:11 +0000
Manifest next update: Sun 14 Jun 2026 12:01:11 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: PZAli3Pk1Wnj1bq4vcWx6nX+IMuMGmygjGDMVCgMmK0=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:81:f2:8b:0d:79:fd:28:d3:3a:d7:1c:d8:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jun 13 12:01:11 2026 GMT
Not After : Jun 14 12:01:11 2026 GMT
Subject: CN=4bcb7508e50ce0bf96be8cc17a3ce015b4f05777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:9c:d9:f4:c3:9d:1d:00:e2:f4:4f:4d:15:
c8:2d:83:f8:c4:db:e1:4c:57:6e:1d:4c:d2:4c:2f:
f3:59:fd:69:af:8f:b6:b0:aa:39:52:fd:67:69:53:
8b:4a:dc:cc:91:2e:a9:25:7b:cb:6b:b2:3f:cf:78:
dc:d1:99:6d:e5:6d:81:a9:5c:c9:1b:e7:fe:48:22:
2b:f3:95:4e:5b:83:fa:e8:81:34:c3:79:0f:9d:05:
53:73:73:33:02:4c:87:3a:43:e9:e6:93:f4:10:64:
59:8d:d8:32:0f:6d:bc:aa:3d:7e:01:2b:24:be:13:
96:43:39:1f:ab:14:fe:ed:9b:6a:f7:7c:ff:96:ba:
d2:ac:50:98:be:f8:35:91:18:7a:67:6b:4b:46:45:
6a:56:5c:79:3d:5a:99:48:1b:14:d9:db:38:22:dc:
e0:53:65:6a:40:28:c9:0d:20:b5:08:4c:ae:1d:e5:
1d:4f:ab:6b:ab:bb:ae:b1:1b:21:2f:30:01:77:29:
28:7d:83:ee:5c:58:81:1f:21:65:48:f6:29:3a:cb:
4e:16:bc:5b:ab:72:72:e6:36:aa:33:11:84:e8:f1:
c9:e3:e3:5a:d9:9b:f4:e5:8e:0d:11:cc:ae:ca:c4:
ef:30:14:24:ef:01:57:03:d5:8a:3f:2b:c5:06:02:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:75:08:E5:0C:E0:BF:96:BE:8C:C1:7A:3C:E0:15:B4:F0:57:77
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:2e:92:8c:f7:a2:10:22:01:84:e4:a9:b6:ed:cb:15:f5:
53:c0:30:1b:88:1f:76:3f:4a:66:ca:d5:8a:e0:e9:f3:5f:dc:
62:b7:63:06:e0:79:a5:80:0f:d4:d3:82:96:4f:4e:81:f9:54:
0b:7f:7b:5d:14:c4:40:db:64:0a:60:30:b5:2a:c4:8d:d5:94:
dc:8d:fa:42:50:8c:e3:45:15:18:fe:29:40:84:ff:64:e3:64:
15:e2:0b:70:3a:cd:83:da:a1:36:ec:0b:b1:d1:7f:34:dc:fe:
88:87:f8:50:b0:ee:a7:73:f1:d6:34:85:b4:75:22:33:11:05:
81:9b:32:4b:65:9a:46:90:25:f1:f5:f6:6b:7c:34:17:34:9a:
45:f9:d1:79:38:08:8c:cd:8c:37:89:5e:03:a6:73:57:34:b7:
db:78:4a:b1:78:47:48:70:57:64:a1:ea:8b:30:fd:ef:a6:93:
a3:fc:00:4d:43:a2:39:af:35:a8:d0:a0:6e:34:47:01:66:93:
c1:4a:f9:45:75:d7:38:c5:8c:ed:bd:df:3d:31:73:f2:50:ea:
04:66:9d:58:41:63:61:fb:06:69:21:ce:eb:84:16:c2:00:55:
74:02:72:e0:5f:7d:fa:7f:0d:43:3d:de:a2:e4:22:3e:5b:f9:
47:ca:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:08 2026 by rpki-client