Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: UNlPnHR3ME5Dl5DkXY6gzBBGv3xx03NMFZneAWCSGd8=
Subject key identifier: 79:B3:29:C2:3E:0C:ED:29:A2:41:C3:8B:F6:61:6E:48:8A:E2:A3:DB
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019F129CAC2EEB17B8760D17717FC6480439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1680
Signing time: Mon 29 Jun 2026 09:01:25 +0000
Manifest this update: Mon 29 Jun 2026 09:01:25 +0000
Manifest next update: Tue 30 Jun 2026 09:01:25 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: uKxJX4XaDmW4tlFZjlAY8NB+anFLGiJhDkSXlFFKVN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:ac:2e:eb:17:b8:76:0d:17:71:7f:c6:48:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jun 29 09:01:25 2026 GMT
Not After : Jun 30 09:01:25 2026 GMT
Subject: CN=79b329c23e0ced29a241c38bf6616e488ae2a3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:1f:dc:8f:6a:4d:25:52:34:b5:40:3d:75:
c8:39:99:5b:ad:cb:59:a2:08:8e:8a:b4:02:81:15:
fd:91:f3:fa:59:13:22:7d:38:6b:64:6d:0a:92:40:
73:b5:ea:ef:a0:dc:d7:a0:16:1e:35:2b:76:9d:bb:
9e:f5:6c:62:54:7d:02:d0:ef:34:61:ad:d4:5d:fc:
da:63:a1:42:21:1b:a7:da:1e:6d:88:b4:f8:02:37:
f9:71:6c:b4:fa:bd:a9:eb:e9:ee:42:b8:1b:0e:13:
08:74:fa:65:ac:a2:d3:4b:9c:f9:f1:1c:0b:7f:d9:
b0:cd:fb:c7:42:f3:ff:40:bb:29:f5:e3:45:95:0e:
d6:8e:21:7d:32:db:06:0f:ce:49:aa:d3:e2:b9:de:
d1:78:e8:3f:91:04:f6:91:3d:1b:ef:79:a7:83:c3:
b9:49:dc:eb:88:58:93:c8:11:80:41:13:f4:5c:8f:
8c:1c:c3:67:13:fc:c8:5f:19:93:e7:12:a7:36:92:
a1:aa:f1:ec:8b:c1:6f:c0:2d:85:74:14:8e:20:d8:
28:fe:b1:9d:75:54:ee:4c:39:93:14:e3:53:ae:cf:
d5:d9:34:ba:28:e7:6b:c4:fc:a5:63:3d:c2:92:81:
ec:d0:1b:39:7f:e3:39:7b:11:4a:36:63:41:f6:9a:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:29:C2:3E:0C:ED:29:A2:41:C3:8B:F6:61:6E:48:8A:E2:A3:DB
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:44:9e:6a:32:8b:2b:d2:db:1f:5e:22:7b:cd:01:ff:a4:27:
62:a9:ef:ed:1b:80:55:4c:9b:79:39:e3:9e:39:b7:d6:fc:64:
06:71:43:c9:c4:85:3a:46:3f:28:d8:3a:40:6b:fd:e6:93:47:
5c:d1:d6:d8:6a:19:3c:52:a8:3d:f4:03:68:39:46:44:b6:ea:
86:71:67:01:7c:88:3a:43:bb:19:7c:fc:48:ca:50:63:35:5b:
b4:f7:1c:56:9d:d5:20:07:79:3b:1d:38:41:36:99:b2:a0:44:
21:f1:db:ee:39:c1:0b:18:0a:d1:41:b8:9e:45:be:b8:a3:89:
f0:1a:8b:31:5a:da:a9:4c:0d:6f:92:bb:42:23:7c:a4:0a:3e:
bc:6e:50:90:c6:32:54:6c:06:9a:2b:ba:31:6c:de:9c:86:b5:
b9:2d:02:b7:3f:82:0d:5d:4e:c1:ea:bb:7a:ea:89:0f:d0:36:
e3:0b:d9:e3:d8:ee:ea:82:c7:87:91:06:11:c2:e8:f0:0f:98:
fc:72:e3:00:6c:f8:63:ff:b0:d2:cf:d2:63:f9:0c:23:65:2a:
0f:59:68:1a:2b:89:3d:a8:aa:b2:43:4f:e6:a4:0c:32:17:ba:
4c:0b:4b:1f:e4:64:29:a1:fb:63:51:67:3b:c2:3c:e7:54:57:
7c:aa:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:15 2026 by rpki-client