Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: 2rvQimeImJDPoxTWO05vnCmAI0IZZRzkRk2pp3Z/WTk=
Subject key identifier: 43:26:FE:54:CB:3E:DA:DD:45:B2:E3:B3:77:11:85:9F:5C:12:3C:47
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019E8F80C4AE5FD6AC9AD01667DF49560547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1944
Signing time: Wed 03 Jun 2026 22:00:41 +0000
Manifest this update: Wed 03 Jun 2026 22:00:41 +0000
Manifest next update: Thu 04 Jun 2026 22:00:41 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: N0RIJsTxlswt3eI0w5HGJVozGz6ncQ4rwOMe2X7jIQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:80:c4:ae:5f:d6:ac:9a:d0:16:67:df:49:56:05:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jun 3 22:00:41 2026 GMT
Not After : Jun 4 22:00:41 2026 GMT
Subject: CN=4326fe54cb3edadd45b2e3b37711859f5c123c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:25:d5:0c:ab:67:cb:35:bb:fb:09:5c:87:
fd:0f:2d:8a:5f:60:c2:eb:94:64:71:c1:67:af:ea:
ee:de:77:a1:00:e1:c0:cc:06:97:e7:a0:4c:ab:42:
4c:de:11:12:22:06:18:27:b1:2b:b9:09:9f:25:cf:
5e:a6:48:fa:b3:01:24:d3:db:e1:37:98:48:4a:7a:
3a:f0:04:07:28:1f:72:1d:90:c6:38:87:d0:ad:cf:
e7:90:8f:d4:50:d6:cd:f2:7a:2d:4e:93:52:de:68:
e5:ae:a5:a0:4b:2f:35:08:3e:a3:7f:f7:06:8d:3a:
69:61:d5:66:87:6e:77:f7:4a:1c:07:21:99:d7:fe:
e1:30:d5:3a:10:d7:fc:6c:59:70:5c:81:bf:1e:3c:
0b:7a:06:fb:3f:a4:08:8c:db:6a:dc:7c:a6:6f:37:
d4:63:f2:e3:89:02:3b:72:ed:75:dc:40:68:ed:5b:
20:e4:1e:15:19:c3:11:ca:3b:43:f1:fb:7d:ce:76:
29:ca:ca:c0:42:38:44:02:36:b1:95:87:8f:85:03:
c8:7f:b5:67:30:d2:cf:43:ab:85:bb:a9:81:e0:2c:
44:fc:3c:b4:73:99:a2:b7:2b:03:cf:b1:19:e9:61:
0d:bf:d7:50:91:33:94:c3:a4:8b:9f:45:6c:2f:71:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:FE:54:CB:3E:DA:DD:45:B2:E3:B3:77:11:85:9F:5C:12:3C:47
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2f:00:62:1e:63:34:a9:4a:77:b0:9a:4e:63:2c:30:67:9f:
eb:47:a7:e7:51:61:36:53:fe:e4:1b:7a:72:1c:83:7a:6b:b1:
f3:4c:67:fc:ec:96:18:5f:c6:27:c0:b7:66:77:86:ae:a0:c9:
85:9c:dc:b4:39:0d:57:58:ea:76:ed:b9:0c:11:05:8b:00:90:
e9:0c:a6:4c:bb:0a:a7:5f:59:88:33:67:fe:1a:7d:fa:ee:b0:
eb:a4:bf:3a:44:cc:6b:f3:f7:c5:37:f9:d4:52:2c:de:88:24:
a2:ce:57:a1:8c:25:a1:e7:b0:61:de:ea:31:4e:cb:e9:ce:bd:
78:69:c2:87:24:2f:06:ce:93:1e:ab:22:8e:56:3d:ef:bf:7c:
87:e1:b5:f5:c1:34:6c:ad:62:92:c8:51:aa:5a:d0:4b:a0:ca:
3f:1a:4d:8f:b1:46:ba:00:1e:a5:4d:c4:29:23:97:f4:2d:17:
8a:5d:98:0d:01:37:12:69:50:81:aa:95:cc:f1:d7:1b:53:70:
54:67:e3:b6:a2:c4:80:29:23:c5:04:ac:1b:3e:4b:1e:62:2c:
81:6b:9a:15:38:9d:41:22:38:48:26:28:84:90:18:5d:93:13:
ad:9d:6f:80:e9:96:c1:ac:81:6d:85:89:16:e2:cd:35:dc:a4:
eb:9a:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:01:39 2026 by rpki-client