Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: N8EaMgE6v7Zs4sUmAhQ5ZhXWFPRpiwZ0Kkl+J2BzO2w=
Subject key identifier: 1E:F3:85:18:35:A4:6E:B7:F6:D7:D8:41:BD:DA:E6:90:64:38:15:D0
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019EBDDA9F944B9DB852BAA26FC0188E1E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 18EA
Signing time: Fri 12 Jun 2026 22:01:21 +0000
Manifest this update: Fri 12 Jun 2026 22:01:21 +0000
Manifest next update: Sat 13 Jun 2026 22:01:21 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: jscul0G/ZgyDTOXmjNOk/wf+bDApTFYRuM00C3tj/fk=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:9f:94:4b:9d:b8:52:ba:a2:6f:c0:18:8e:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jun 12 22:01:21 2026 GMT
Not After : Jun 13 22:01:21 2026 GMT
Subject: CN=1ef3851835a46eb7f6d7d841bddae690643815d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:e6:6b:bc:1a:fa:fb:e0:cb:08:b1:c0:cb:
ac:a7:46:23:b9:41:f6:62:ee:0a:d8:0e:ea:02:4d:
87:03:5f:98:ee:7e:3c:88:03:ec:dd:2b:63:2f:3b:
1a:a5:a1:b3:35:cb:e1:30:fb:cc:f9:af:ed:17:3e:
e0:04:be:8d:b1:35:e1:f1:e6:6b:fc:77:a8:a2:2f:
14:68:e3:24:35:33:41:60:ac:5c:b0:37:30:3e:81:
0c:c2:fb:74:aa:b7:b9:fe:20:09:7d:7d:43:37:f4:
a7:c2:6d:a2:49:cb:45:65:69:bc:4d:3b:67:72:3b:
14:8d:ce:53:f7:75:20:08:36:50:ca:38:7e:8a:e4:
fb:9a:c3:cd:cd:90:26:8f:81:3f:7c:10:60:2c:44:
60:ef:b3:a3:74:4c:77:0c:1b:b7:ef:e2:31:c7:47:
19:99:f0:59:08:dc:cc:49:a1:f0:b8:a0:67:a5:7b:
2e:de:f0:e2:01:3b:f6:77:06:cf:02:1a:6d:2e:b4:
d6:ce:a6:4f:22:9d:4f:80:1f:44:f2:b4:76:97:a2:
4f:db:f9:29:31:47:2b:38:0b:3d:21:04:e0:b4:de:
0e:8d:aa:60:21:3e:66:36:a1:75:2d:b8:52:dc:02:
b9:2e:19:1c:65:9d:6f:db:c8:bf:a6:2a:f0:f1:2e:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:85:18:35:A4:6E:B7:F6:D7:D8:41:BD:DA:E6:90:64:38:15:D0
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:46:56:ac:dd:04:5a:74:79:68:cf:27:37:bc:85:64:a5:
5f:02:00:1d:41:d0:11:a5:9f:d6:c1:65:77:36:e2:64:c3:7e:
cf:c9:17:06:e3:fa:d1:d3:6a:85:9c:4d:59:b6:72:17:3c:c8:
5b:95:13:61:9b:d5:69:3d:d9:a8:79:01:11:00:4f:c4:e4:0a:
cb:a3:f1:59:ea:b9:45:32:3b:9b:4a:c5:de:db:67:16:0a:90:
fa:66:76:78:7d:b8:f0:78:cc:f3:7c:eb:84:29:80:98:a7:35:
9a:16:89:02:95:ba:eb:4e:0e:62:35:36:59:42:d7:03:08:3d:
a5:2b:57:6d:9f:9f:ca:75:8a:d8:5d:42:81:f8:6a:30:6b:35:
23:27:a1:70:1a:b6:4e:1b:27:af:26:11:1d:da:c4:18:20:e1:
dd:48:5d:af:c0:49:44:a2:76:9a:ec:a5:7a:a3:fa:2c:fe:44:
37:d3:da:76:b8:aa:0f:4e:1e:90:a2:22:82:18:83:5b:9e:f2:
24:f8:6a:e5:bf:71:1e:47:fa:0c:b9:da:c9:2c:ab:90:31:f6:
d4:3d:bc:94:4f:79:34:e6:c9:85:b5:9f:25:c2:96:37:1f:78:
a2:25:41:e7:3c:f9:39:f1:6a:43:a2:3c:01:6f:66:ab:13:a7:
65:13:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:37 2026 by rpki-client