Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: vXvpGs43HkRrgripnzD6qGL08jwb3f+BdWvbNSnPNEs=
Subject key identifier: 79:4E:D9:86:B6:7D:40:D5:05:67:BA:53:A4:32:EE:A8:DD:3F:4A:19
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019EB733074C01C0D396AA0CA5DF96170171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 15:00:35 +0000
Manifest this update: Thu 11 Jun 2026 15:00:35 +0000
Manifest next update: Fri 12 Jun 2026 15:00:35 +0000
Files and hashes: 1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 4AAX9fbbvKGjNhhQco68lZOhBHG86IU86sgR+3b3cTc=)
3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:07:4c:01:c0:d3:96:aa:0c:a5:df:96:17:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jun 11 15:00:35 2026 GMT
Not After : Jun 12 15:00:35 2026 GMT
Subject: CN=794ed986b67d40d50567ba53a432eea8dd3f4a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:b0:ac:be:53:17:3f:b5:be:6d:83:27:b8:
b5:91:1d:56:c6:83:37:ac:5e:a3:6f:1c:a8:15:d7:
d3:10:02:fa:db:d2:aa:c5:5f:73:4f:fb:97:2c:28:
0b:02:bd:60:99:77:69:79:4a:dc:c7:ab:cb:19:25:
80:00:4f:5f:8f:c5:1a:1b:1f:35:38:b4:6c:8b:2a:
4e:7e:d9:e9:46:9f:8d:17:d4:8c:2f:36:83:22:59:
b4:3f:95:87:54:dd:69:6c:35:ee:c1:95:e5:b1:b0:
ec:19:f7:aa:74:a0:2e:0a:e3:a9:27:33:f2:02:3c:
68:29:4e:15:48:b5:0f:c5:c1:40:da:34:37:06:62:
3f:c6:b1:da:c8:0d:08:b7:1b:7b:27:f0:92:db:27:
07:ec:92:7e:0f:4d:3f:bd:95:90:79:bb:54:65:13:
33:a8:2f:ed:13:dd:3c:65:4c:9d:90:0d:1b:c7:d5:
d1:d6:42:f5:f2:74:d3:c1:76:56:cc:bf:22:de:1e:
52:fb:42:49:32:f4:b7:5e:73:0c:6c:d0:26:88:74:
d2:1d:fc:22:a0:19:7f:a4:55:28:86:d4:7c:11:b2:
6d:62:cb:da:3a:a9:7f:ce:fe:76:d3:ad:f3:33:99:
d7:17:bc:17:2a:71:af:ef:ac:12:59:4d:79:45:f6:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:D9:86:B6:7D:40:D5:05:67:BA:53:A4:32:EE:A8:DD:3F:4A:19
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:2a:8c:46:76:a1:90:a7:28:26:9d:72:24:93:a9:ba:d7:
87:f2:ac:10:44:07:13:52:a3:c5:27:c9:ce:21:b4:af:a7:0a:
23:de:d6:5f:24:bf:f5:af:24:b1:97:b1:da:7d:72:bc:24:8b:
96:60:a5:2c:74:d1:e4:49:b5:0f:14:06:f3:69:d9:bd:7b:b1:
89:4d:ae:8a:b1:1a:ec:92:23:d3:15:0e:bb:8c:31:78:6b:67:
86:36:0a:2b:1a:58:74:2f:8c:a6:62:02:13:33:ae:78:29:9f:
9a:76:fd:89:b8:21:20:d9:a8:e5:b2:a2:92:0e:be:1d:06:b8:
7b:97:c6:63:a1:e2:dd:69:c8:8d:b8:97:0f:83:cb:82:01:49:
ed:62:4d:2d:73:1a:ca:1c:2a:37:c1:1a:9b:c1:02:b4:da:22:
aa:e4:1e:b1:eb:1a:ef:62:37:bd:89:20:88:4b:95:90:cc:44:
14:0d:81:eb:b5:2f:bc:dc:42:2d:8e:d5:27:8d:35:88:3e:a8:
4a:4e:c8:9e:2e:29:21:05:37:f2:2f:5b:a3:c3:2f:56:b3:20:
fa:d3:3a:0a:00:92:6f:0b:af:15:4f:6c:7f:d0:00:c5:21:75:
54:5f:63:f1:b9:b9:96:91:6d:5b:31:bc:08:c9:cd:b3:e6:3c:
c1:69:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:34 2026 by rpki-client