Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: Ach3gIfVS+m2Ke/W7DmrOBnj1U7Zovepx06fxppSBpo=
Subject key identifier: D6:08:2E:B3:DD:F2:51:47:8C:B2:47:DE:F6:89:36:3E:32:42:0F:E0
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 019F1867B7982D4C2F165FF8D32947E81976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:18 +0000
Manifest this update: Tue 30 Jun 2026 12:01:18 +0000
Manifest next update: Wed 01 Jul 2026 12:01:18 +0000
Files and hashes: 1: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (hash: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g=)
2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: VK27EdEx5IlYw5Mbiv4t56V4nfe9H1KWknQW6s1xX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b7:98:2d:4c:2f:16:5f:f8:d3:29:47:e8:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Jun 30 12:01:18 2026 GMT
Not After : Jul 1 12:01:18 2026 GMT
Subject: CN=d6082eb3ddf251478cb247def689363e32420fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:37:7e:cb:79:5d:a6:ca:18:87:0c:fa:75:
7d:f7:5e:a9:19:36:88:8a:9e:9e:73:62:9b:2b:78:
f8:9a:c9:13:db:7f:78:e0:4d:3f:ae:f1:5b:0c:64:
b2:41:5b:58:10:75:61:a8:d1:d6:ad:43:9e:f1:f6:
73:21:58:0d:b8:99:66:8e:1c:97:c9:ce:96:0f:92:
11:39:51:f8:21:1e:c9:7a:f2:d0:a8:44:ee:e4:86:
4d:2c:4b:2a:93:13:b0:ee:85:38:8b:45:90:a0:df:
3f:1f:ab:f7:10:36:fb:bf:11:92:bb:fd:21:68:87:
c8:5d:83:57:2c:12:83:a9:c1:37:f0:35:d2:30:f5:
95:17:a5:e9:8a:ff:30:f6:8e:88:57:5c:1a:dc:0c:
9a:bb:b4:50:f8:4f:de:1c:e8:57:82:a4:f0:c8:53:
54:29:9f:71:ac:41:5e:a2:28:3e:a8:7d:39:a7:21:
95:d8:36:38:ff:45:c8:24:12:62:75:8d:05:f0:32:
c6:30:5a:5a:e2:a1:7d:a6:6a:0c:83:c3:6b:16:40:
cc:4f:0d:08:26:1d:92:4e:15:10:90:1f:a3:ce:a8:
42:c9:b6:95:a6:1b:86:ac:8c:58:fa:81:85:82:92:
6d:92:dd:b3:d2:8c:92:3c:58:55:82:fd:04:20:34:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:08:2E:B3:DD:F2:51:47:8C:B2:47:DE:F6:89:36:3E:32:42:0F:E0
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:22:37:b3:bd:cd:c9:e1:02:6e:b7:1c:a5:e7:8f:a6:eb:
2f:4f:01:75:8a:cb:cc:b9:b7:40:54:94:75:df:e9:f8:d5:d4:
ac:ff:0c:69:b8:34:6d:8e:fd:28:d4:93:c2:60:ef:62:21:ca:
bf:96:28:fc:4e:6a:fe:df:7b:3d:27:bd:14:28:42:66:a7:b0:
37:a6:bb:96:09:ab:aa:07:3d:ab:e0:00:6c:ee:4a:7b:3a:07:
ed:90:f4:44:d9:f3:83:f6:6c:97:ad:88:7f:47:db:3f:22:e6:
15:53:e7:06:f5:84:d0:6c:98:2e:29:cb:61:a1:38:1e:08:57:
e6:e5:32:f6:d6:5d:7f:88:eb:d8:e2:e6:01:03:35:b7:a3:f9:
6a:74:fe:cc:d8:04:91:f8:62:46:04:d5:14:87:e9:b8:18:58:
48:d9:30:b3:4c:d2:9f:1f:fa:bf:fc:55:2b:69:5f:bc:aa:4d:
c2:4c:be:fe:6c:aa:09:11:0a:ef:c4:63:bd:52:92:53:33:dd:
c8:0e:6f:9d:17:39:f2:aa:73:c4:68:e1:a6:20:91:4c:62:55:
ab:fa:82:20:eb:8d:75:ce:35:37:0c:fb:b1:e7:45:27:b1:1e:
69:9b:fc:79:a6:63:44:58:e0:0e:7e:d9:83:cc:c0:56:cf:74:
b5:86:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:24:21 2026 by rpki-client