Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: UN26ajqoO29T7BlLYQY98/A9OSgsMTyo/gg6bLxpZFg=
Subject key identifier: 61:9C:D4:EE:27:51:6A:40:5B:05:C2:E1:2D:2C:7F:E2:09:03:32:82
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019EBFC819A4D72141DFE4C0C5455FECCD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 07:00:22 +0000
Manifest this update: Sat 13 Jun 2026 07:00:22 +0000
Manifest next update: Sun 14 Jun 2026 07:00:22 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: agws2EycOzRtwMCojU3SsrCdD0sF3jTLdv4DHbyVkbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:19:a4:d7:21:41:df:e4:c0:c5:45:5f:ec:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Jun 13 07:00:22 2026 GMT
Not After : Jun 14 07:00:22 2026 GMT
Subject: CN=619cd4ee27516a405b05c2e12d2c7fe209033282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:3c:88:c3:42:80:0a:c0:68:f8:16:e2:b6:
e8:25:27:5f:d4:ba:6a:5a:6c:13:30:96:6b:b4:9b:
49:14:82:b2:ea:a2:ce:1b:cf:55:24:01:80:73:19:
c2:ae:35:6a:f7:64:a0:6c:cc:81:d2:e5:38:38:87:
87:65:b3:b8:e7:91:f4:fc:6b:55:b4:c2:83:c4:5e:
c3:8c:a7:6b:c6:e6:af:aa:47:71:11:30:2f:f7:5d:
2f:e6:6a:67:e8:7a:dd:61:fa:74:cb:e7:05:eb:b0:
4b:f7:77:a5:d5:9a:8e:5c:48:3f:52:81:b1:67:af:
21:98:c9:a8:4e:35:68:cd:8f:5f:94:20:0b:69:87:
21:f8:38:db:77:f3:81:cc:55:58:0e:62:60:d9:24:
f3:e3:6d:23:60:a0:06:30:58:04:3f:59:88:e2:99:
c2:04:14:48:9f:d9:fe:6f:66:1d:5d:08:69:ed:68:
58:ce:ff:7e:46:09:04:2f:24:14:84:7b:11:23:32:
81:46:05:38:f1:5b:f1:49:83:2c:73:f2:a8:4d:90:
2b:4b:46:4a:42:01:9c:fb:18:1c:ba:a3:5f:cb:59:
a7:15:39:53:3a:1e:9a:c6:4c:15:eb:cb:b5:7d:2b:
d6:72:70:e0:1f:a6:f1:42:5c:ab:c4:c2:4c:96:c5:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:D4:EE:27:51:6A:40:5B:05:C2:E1:2D:2C:7F:E2:09:03:32:82
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:85:c5:38:1f:b9:70:06:ee:7c:2a:66:e1:8a:cb:38:72:
d1:b4:50:e1:ad:cf:4a:ef:53:51:7a:a8:ce:ac:5e:42:05:d7:
df:2f:93:a0:88:d3:8a:63:70:5f:ff:84:57:78:db:7a:bf:c5:
a3:58:77:dc:d8:7b:e1:5c:78:2d:98:54:c3:32:eb:30:7e:b0:
bb:cc:69:fb:0f:77:6d:06:cc:89:18:11:0e:4f:89:0b:4a:bf:
60:9d:32:b8:cb:c6:e5:b9:cc:8c:cf:8f:ac:2b:fd:43:2b:c4:
db:50:5a:fd:12:66:bf:24:3a:e1:a6:a0:d0:59:d0:f9:8e:4c:
2a:28:f6:5f:94:15:24:fc:14:5b:2a:75:ff:c8:5d:b9:34:a4:
c9:f9:fa:42:da:b4:bf:ec:8e:f5:e7:48:5f:f2:fb:a0:fb:38:
88:17:15:b5:47:e0:17:74:f7:bd:49:2d:84:b2:6d:9d:f8:ce:
48:54:4d:c7:04:d4:b4:c2:ae:22:45:8f:68:2d:ac:e9:4b:33:
fe:e7:64:8d:83:06:d4:7f:d9:18:b6:42:ee:de:62:ea:44:ec:
28:f7:40:94:6e:ab:bd:f4:0e:71:06:68:97:c1:79:f8:ea:ee:
de:89:d2:b2:82:78:5f:be:36:80:e7:0b:d4:dd:55:f1:4d:b6:
bd:ac:20:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yBmk1yFB3+TAxUVf7M0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk
ZGI1YWQwHhcNMjYwNjEzMDcwMDIyWhcNMjYwNjE0MDcwMDIyWjAzMTEwLwYDVQQD
Eyg2MTljZDRlZTI3NTE2YTQwNWIwNWMyZTEyZDJjN2ZlMjA5MDMzMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilU8iMNCgArAaPgW4rboJSdf1Lpq
WmwTMJZrtJtJFIKy6qLOG89VJAGAcxnCrjVq92SgbMyB0uU4OIeHZbO455H0/GtV
tMKDxF7DjKdrxuavqkdxETAv910v5mpn6HrdYfp0y+cF67BL93el1ZqOXEg/UoGx
Z68hmMmoTjVozY9flCALaYch+Djbd/OBzFVYDmJg2STz420jYKAGMFgEP1mI4pnC
BBRIn9n+b2YdXQhp7WhYzv9+RgkELyQUhHsRIzKBRgU48VvxSYMsc/KoTZArS0ZK
QgGc+xgcuqNfy1mnFTlTOh6axkwV68u1fSvWcnDgH6bxQlyrxMJMlsVv8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGc1O4nUWpAWwXC4S0sf+IJAzKCMB8GA1UdIwQY
MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt
ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4
LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk6FxTgf
uXAG7nwqZuGKyzhy0bRQ4a3PSu9TUXqozqxeQgXX3y+ToIjTimNwX/+EV3jber/F
o1h33Nh74Vx4LZhUwzLrMH6wu8xp+w93bQbMiRgRDk+JC0q/YJ0yuMvG5bnMjM+P
rCv9QyvE21Ba/RJmvyQ64aag0FnQ+Y5MKij2X5QVJPwUWyp1/8hduTSkyfn6Qtq0
v+yO9edIX/L7oPs4iBcVtUfgF3T3vUkthLJtnfjOSFRNxwTUtMKuIkWPaC2s6Usz
/udkjYMG1H/ZGLZC7t5i6kTsKPdAlG6rvfQOcQZol8F5+Oru3onSsoJ4X742gOcL
1N1V8U22vawgYg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:29 2026 by rpki-client