Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: wwQNbLtNhdOOauJHOVm80fkWIRxGmdIIXf6455JYb0Y=
Subject key identifier: E3:83:02:3C:5B:CB:E8:9A:08:0A:14:B5:14:1A:91:EC:BA:E9:D2:BC
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 019E1C7D91284B4A0C4CF142D33A919B799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 068E
Signing time: Tue 12 May 2026 14:00:51 +0000
Manifest this update: Tue 12 May 2026 14:00:51 +0000
Manifest next update: Wed 13 May 2026 14:00:51 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: XHAuG3bYFVYwAaoPR4ay6Yr8RzgYZlIccslZedrmfcA=)
2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:91:28:4b:4a:0c:4c:f1:42:d3:3a:91:9b:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: May 12 14:00:51 2026 GMT
Not After : May 13 14:00:51 2026 GMT
Subject: CN=e383023c5bcbe89a080a14b5141a91ecbae9d2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:c6:b4:d8:96:95:03:91:de:d0:3f:54:1b:
c7:ac:14:91:58:0c:3e:c6:aa:47:bf:4d:3b:24:bd:
05:b6:a4:03:99:83:4b:41:39:38:fa:13:60:d4:18:
ab:2a:ad:6c:be:4d:42:2b:15:7f:eb:38:84:4e:b9:
fb:a7:8c:d5:4a:e7:73:0a:3b:24:6d:b4:6f:ac:19:
6a:49:b9:54:2c:ac:2a:93:21:ac:8b:69:c5:89:85:
86:39:15:ad:32:5b:bc:39:9f:4c:52:34:58:4c:de:
b1:1d:cd:9d:e8:94:bb:27:f1:43:85:0d:9c:f2:f3:
9d:48:fa:e8:62:78:f4:4d:04:3a:6f:60:89:3f:90:
c9:a4:ee:32:c2:96:f2:8d:4a:f2:02:b2:1c:bc:00:
19:2b:f6:93:6e:ae:59:33:1f:24:cf:ad:b9:ec:87:
ec:55:e2:10:ed:a8:9d:bd:c0:78:e5:b0:1f:cd:13:
6a:0b:e7:7d:81:be:d0:e4:a5:24:30:44:04:79:fc:
4e:bd:77:11:df:8e:ee:86:b7:fc:02:fb:fe:8c:94:
1d:7e:34:b1:c6:4f:e6:30:8b:5f:e4:16:6e:89:f0:
13:23:49:5a:4f:b4:f8:db:c2:50:24:1d:71:d0:0d:
5e:c8:91:d1:82:2a:d0:2d:70:1a:f6:5d:9d:7a:27:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:02:3C:5B:CB:E8:9A:08:0A:14:B5:14:1A:91:EC:BA:E9:D2:BC
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:02:b4:df:c9:62:a4:82:7e:cc:76:56:65:83:aa:2d:71:
36:49:da:2b:03:bd:d5:ea:ea:35:a6:7d:e8:bd:51:20:01:ab:
4c:10:b8:54:a4:70:7f:26:d7:b4:b8:9a:fe:a1:c0:e8:56:ad:
03:ed:c4:56:26:17:78:f0:f0:77:1b:84:0e:73:5e:34:46:7d:
45:50:23:83:18:a7:8c:82:ef:05:9e:80:8a:f8:24:a7:72:67:
d5:5f:e2:1b:9a:7a:e5:f4:b1:00:24:a0:40:82:5f:5b:44:08:
97:48:76:a5:b1:d0:66:b0:93:a9:6b:19:b1:94:4e:ca:c7:1b:
fd:62:7b:c9:0d:51:da:b7:90:e1:30:2e:1e:88:12:8a:36:9a:
bf:e5:25:7a:bf:dc:51:09:07:0b:63:93:59:e0:6f:6b:7a:8a:
e2:71:43:61:c6:68:54:35:e9:90:0b:7b:c2:ee:89:a6:3b:83:
ca:d8:2c:23:ae:55:32:ed:1c:d7:fc:70:44:06:e1:4e:00:f2:
43:b1:af:2c:98:54:ee:9a:6e:9b:51:6c:66:bc:1f:61:4c:f3:
dd:86:63:ea:4d:91:ff:93:75:7e:30:12:2b:5b:b8:3a:ef:d3:
ef:71:9e:33:cf:9d:72:bf:41:26:28:9e:ef:e4:d2:f9:fa:53:
ed:4a:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client