Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: HJWaaGsN5uTqzZurJkFBQtwiQKT9GX9u7LQJIxu7kdw=
Subject key identifier: 09:5F:7F:F8:BD:AC:ED:F6:A5:33:73:C1:59:7F:94:96:9D:A2:1C:66
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019F9247F2B77A12FE3338DE170D0FDAA510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 06F6
Signing time: Fri 24 Jul 2026 04:00:16 +0000
Manifest this update: Fri 24 Jul 2026 04:00:16 +0000
Manifest next update: Sat 25 Jul 2026 04:00:16 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: L3sksKM2+FiCiotUxzptbm3iojyVEYRAXRihtgrwRBE=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f2:b7:7a:12:fe:33:38:de:17:0d:0f:da:a5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jul 24 04:00:16 2026 GMT
Not After : Jul 25 04:00:16 2026 GMT
Subject: CN=095f7ff8bdacedf6a53373c1597f94969da21c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:17:e2:38:49:58:db:f5:9e:1f:a6:c3:28:
3b:ec:31:ec:fa:0b:1e:94:a1:a8:90:86:13:b0:63:
e6:be:3c:6e:90:ee:de:00:ab:14:e7:bf:d4:50:b6:
83:61:0f:64:47:4f:86:e8:e9:54:f1:77:f1:e8:6e:
b1:c9:d9:60:a9:b1:ba:ba:83:b9:09:f2:c2:a0:e9:
be:a7:ea:47:dd:c8:a8:d7:18:08:a6:ca:f6:18:c1:
c7:6c:30:f6:df:56:69:89:ac:3b:82:ab:4e:f6:70:
e3:4e:0b:94:4b:6d:f0:ef:fc:56:f7:76:cc:9e:80:
73:e6:62:0f:42:4a:a9:8c:b6:49:82:5b:5b:fc:c1:
5a:a4:d1:b4:b2:06:b3:54:9f:1e:39:a9:da:ab:8a:
79:5d:cf:72:c5:55:4b:38:ef:b5:f3:ec:22:ee:b0:
08:8a:1d:8c:ed:d5:09:d6:6a:41:65:13:a8:db:d0:
2c:df:e7:b0:f4:8b:b5:a5:3c:97:82:1b:1a:3e:98:
dd:15:5e:9e:9e:d7:d3:9e:2a:2b:64:95:16:e4:9d:
42:b9:6a:de:75:a3:70:9d:65:4a:9c:75:06:01:37:
77:17:99:22:74:0c:0b:b2:af:4e:71:80:d0:79:42:
22:8f:eb:ba:c1:9e:7e:90:ff:0f:c4:83:ee:77:54:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:7F:F8:BD:AC:ED:F6:A5:33:73:C1:59:7F:94:96:9D:A2:1C:66
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:19:f2:36:ae:ca:20:20:26:ca:d2:6f:a8:e2:36:ce:e8:0a:
9f:1f:d1:6a:4a:45:d9:52:8a:e6:a4:00:5f:bf:b8:27:cc:9c:
e7:5b:34:37:9c:04:74:27:a0:04:91:63:ad:5f:21:38:c1:78:
ed:43:ef:4c:69:66:98:ce:7d:fc:ad:c1:f7:83:b7:95:7e:4e:
65:ab:42:a9:3d:b1:34:7f:f1:2f:cb:c9:cd:08:e2:27:b8:99:
2c:7f:bd:88:6a:aa:cf:d6:e9:63:80:11:12:62:8c:3d:b1:94:
b6:6a:dd:bd:ac:bc:b9:70:2f:86:b6:9b:6a:d5:49:2d:bb:00:
64:13:e1:c4:a9:00:c4:26:ee:d0:fd:2c:4a:ea:09:86:49:78:
16:c1:32:c8:f8:f1:20:2e:73:b4:fc:15:82:71:d1:8c:e2:9b:
84:84:0d:38:2e:46:07:5a:63:5b:de:8f:63:49:60:00:d1:32:
3b:f3:6d:55:bd:01:7c:fc:49:9c:21:73:09:e1:e7:4a:3e:e2:
c4:69:81:95:b8:92:cb:2a:bb:e6:c4:d6:2c:b3:ed:bb:03:23:
88:d0:bd:5f:da:bd:b2:08:16:af:10:a4:c4:76:8a:11:15:f1:
75:a3:f3:5d:fb:3b:fb:39:8e:c6:35:7b:6b:5f:26:6f:5c:1a:
08:66:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:17 2026 by rpki-client