Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File: d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier: jJ0eF8C2WLz33Mk98Hp8xgLw6WHFp5FQEzg1DyOZXQM=
Subject key identifier: DF:B9:17:4C:22:57:28:DF:43:90:DC:58:D4:56:BA:AA:1E:47:71:5E
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 019EB620F863D5404F6D7B8576B53B49D274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number: 85
Signing time: Thu 11 Jun 2026 10:01:14 +0000
Manifest this update: Thu 11 Jun 2026 10:01:14 +0000
Manifest next update: Fri 12 Jun 2026 10:01:14 +0000
Files and hashes: 1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: 0H3oR4GMBnrrhUHI6FdUxuImCvlI9M5Lez6vJWzuNLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:f8:63:d5:40:4f:6d:7b:85:76:b5:3b:49:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Jun 11 10:01:14 2026 GMT
Not After : Jun 12 10:01:14 2026 GMT
Subject: CN=dfb9174c225728df4390dc58d456baaa1e47715e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:8c:38:71:ac:fc:79:3a:68:ef:e0:36:ad:
c8:c8:6a:0a:d8:82:b6:d8:ed:69:f6:52:1b:51:0e:
ca:6e:c8:39:68:3b:02:f4:ae:f0:03:c5:33:b2:52:
ff:d2:42:0b:d7:c5:05:86:9a:b9:ab:27:11:f6:60:
af:9b:8e:86:ca:9c:e4:14:14:ca:71:b1:da:96:57:
f7:f7:79:ee:46:b2:e2:3c:4c:42:95:aa:c0:46:23:
38:d7:1b:75:28:27:3a:e0:0b:68:01:fd:f2:cd:b9:
47:d2:c6:7c:e2:b0:d0:20:1a:1d:3f:e2:3d:ca:67:
dc:eb:cf:e2:b5:9c:2a:15:83:37:90:ec:a6:80:e5:
46:95:e0:01:3c:25:39:3f:9c:87:b0:45:ae:ee:32:
cc:66:5d:ac:dc:80:11:04:38:3b:16:a7:75:19:0e:
fe:93:f6:81:a9:53:d3:b8:38:2c:a4:a9:67:68:e4:
3b:48:16:78:63:27:f2:b3:76:32:d5:7e:f5:42:fc:
17:00:e8:45:d0:06:4f:b5:a5:01:86:7a:d6:e2:c3:
75:b4:59:54:83:f4:cf:85:76:6d:1c:c9:24:21:4f:
da:71:61:7e:57:10:a3:d0:ce:4b:7b:51:99:91:db:
c2:36:c4:00:7f:20:08:f2:54:78:12:ae:ba:6d:11:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:17:4C:22:57:28:DF:43:90:DC:58:D4:56:BA:AA:1E:47:71:5E
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:70:f3:e7:b0:cc:33:5c:e6:0d:38:d1:ff:f9:17:e2:de:39:
0e:aa:87:af:d7:f3:f7:41:31:00:f4:a6:ba:b7:83:08:0a:8c:
1b:97:c7:17:b1:7c:88:5d:f6:18:32:b1:ed:4a:f1:68:04:3e:
c4:32:52:d0:77:f3:f3:6e:b6:95:be:03:5a:ee:57:ea:6d:ce:
30:94:c4:9a:96:4f:6e:0d:a0:ca:73:52:65:1a:2d:d2:e6:87:
79:96:da:79:9e:bb:1f:50:14:f4:24:8a:15:a4:82:2a:95:59:
7f:37:b2:0a:0c:75:58:25:f2:ea:b9:aa:09:e7:2a:e1:d5:26:
75:27:91:ec:b8:26:50:cc:4f:0b:3f:3f:e3:94:75:f9:11:e7:
0d:21:35:15:76:b2:f4:30:d5:d5:73:d6:ed:4a:96:91:97:17:
5c:a0:aa:74:bf:b8:d1:77:67:71:f9:47:db:f7:b9:0e:87:e3:
d1:1f:d1:f0:e7:d4:32:4d:eb:72:8a:8c:e4:50:d7:89:91:61:
a5:24:57:27:b0:18:64:7e:59:dc:4c:19:d7:58:96:5f:c6:50:
f0:66:b4:ad:ce:d8:4e:34:b8:99:f0:9a:21:03:77:ed:8f:ec:
e2:9b:74:95:d3:6e:ff:94:07:a0:8a:e8:3e:44:dd:45:5a:ae:
88:c4:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:41 2026 by rpki-client