Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: G4/uVmDDJfCblzMrE3lutfPGJOUSo80sQavPl/aMmzQ=
Subject key identifier: 2A:87:B2:C8:D8:BA:F5:33:BB:A5:7B:4C:6B:8E:E8:38:83:7E:0D:BF
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 019E1D59899D00630A5C95F6C66E5F83E9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 18:01:07 +0000
Manifest this update: Tue 12 May 2026 18:01:07 +0000
Manifest next update: Wed 13 May 2026 18:01:07 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: x5y+EAJlK/73hWkpLNxqAIR272gviFsU0khQ961NeFM=)
2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=)
3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=)
4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:89:9d:00:63:0a:5c:95:f6:c6:6e:5f:83:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: May 12 18:01:07 2026 GMT
Not After : May 13 18:01:07 2026 GMT
Subject: CN=2a87b2c8d8baf533bba57b4c6b8ee838837e0dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:9b:1f:79:38:24:8a:c1:32:dc:47:4f:dc:
cc:58:15:52:53:5a:6f:4a:0e:67:95:6c:0e:1c:c6:
73:ef:4f:56:14:39:22:6e:52:47:86:76:86:d1:4f:
68:6d:78:1a:9f:74:6f:56:10:9a:37:59:ea:74:bc:
7a:98:93:73:e6:9e:3c:4b:aa:84:12:f6:b9:0c:77:
64:af:2b:90:1a:3e:50:bd:06:f3:c7:01:82:b2:6d:
0c:5f:9c:58:a0:6d:be:5b:52:08:6d:9c:f6:05:c3:
8d:75:9e:9f:03:a6:7e:b3:62:48:d6:01:e2:05:52:
e1:5b:81:94:3c:f5:a1:f2:60:11:5f:e8:73:cb:27:
3b:e7:b0:ea:26:45:a2:fb:34:b3:a5:21:0c:2a:04:
b0:1b:f4:c5:83:eb:31:f5:cd:38:9a:00:32:ca:3c:
00:ae:ac:ff:39:29:4d:ca:d0:6d:5b:e0:de:b6:2d:
1d:0e:ce:16:ef:3e:47:b2:b4:29:03:c4:23:da:d3:
44:87:80:c4:35:4f:78:79:c5:ab:f3:df:04:64:c7:
97:e2:0c:bd:49:f6:89:48:da:e4:cf:e2:28:ce:d9:
0e:5e:7d:db:84:c1:8d:32:cc:09:95:7c:b3:9f:4f:
a1:27:d2:ba:b2:d4:c7:e7:30:21:86:a4:d2:84:00:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:B2:C8:D8:BA:F5:33:BB:A5:7B:4C:6B:8E:E8:38:83:7E:0D:BF
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6f:92:9a:c5:70:a1:d6:ed:50:74:47:ac:55:83:3f:2f:20:
1f:ec:4c:42:18:5f:ce:b4:f3:8f:94:9c:d8:04:fd:be:45:19:
8c:07:ca:84:cd:b7:29:60:8c:14:f4:ab:90:57:e1:7a:38:e5:
e4:0f:da:84:f0:c8:72:0a:1f:ae:24:6b:35:98:00:88:9c:7d:
a7:21:a1:03:91:ac:fa:29:c0:39:c7:ad:7b:93:06:6c:bf:4c:
3f:59:89:5e:01:03:0c:48:42:ca:1a:63:6e:c3:bd:79:d8:fd:
c1:0b:4d:f0:cb:35:11:a1:25:86:0c:ae:e2:66:7f:0e:8a:f3:
9d:2c:12:00:72:b5:58:9d:48:82:8a:d6:00:b3:1c:80:e9:10:
90:ad:a4:fc:f1:c9:16:63:0e:0b:b3:08:3f:7c:aa:6b:b6:0c:
37:f9:a9:f8:fb:b3:d5:cd:43:d9:7e:ec:44:1e:47:34:95:12:
b0:75:ef:68:2e:c4:e5:1a:2b:8e:58:af:f3:6b:a3:92:b9:ce:
57:f3:b4:ba:4c:0d:66:c9:18:55:2e:07:8c:fd:3f:a5:b8:21:
20:00:8d:46:c9:49:74:92:62:38:2f:b1:4a:20:e2:65:62:f4:
fe:56:43:e9:8f:40:0b:fa:3d:8f:25:de:11:ae:70:db:dd:c1:
11:53:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:07 2026 by rpki-client