Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: D7+xAG6tehJQg+k+QozgDbELvw2XHQaU92xA+RIGoiY=
Subject key identifier: 2B:E7:77:4E:6D:56:91:EC:57:45:CB:EC:BC:0E:95:F6:DF:CF:4D:2D
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019F141CF0913E3F24C962A236604760F0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 05DF
Signing time: Mon 29 Jun 2026 16:01:08 +0000
Manifest this update: Mon 29 Jun 2026 16:01:08 +0000
Manifest next update: Tue 30 Jun 2026 16:01:08 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: TA//m+ZbJb37rgP7xPT5znRYHqa9FbG+nxkVqE7TiRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1c:f0:91:3e:3f:24:c9:62:a2:36:60:47:60:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jun 29 16:01:08 2026 GMT
Not After : Jun 30 16:01:08 2026 GMT
Subject: CN=2be7774e6d5691ec5745cbecbc0e95f6dfcf4d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:ca:3b:b3:6a:57:8a:bf:06:2a:3a:ba:ee:
69:c6:ed:2b:9a:83:ca:6c:9e:b9:c9:19:fb:c4:2a:
4e:57:43:e8:dc:0d:ab:e8:6e:7a:01:da:57:1c:70:
f2:43:f7:6e:fc:50:27:e5:a3:08:be:1f:8a:58:66:
d6:e5:fb:5b:94:d0:67:5a:5c:8c:73:af:9d:fb:83:
7c:52:93:8c:dd:ea:4d:d4:7c:cf:1f:be:af:72:e6:
e7:38:37:87:ff:50:a7:9f:f5:97:44:3c:f0:cf:25:
2b:84:71:d1:d3:42:76:ec:42:7f:27:42:b6:05:ca:
1c:8a:ef:36:1f:ee:38:23:7a:79:81:71:72:3f:b7:
6d:3e:92:61:c8:35:59:2d:37:5c:fd:0d:5f:fc:78:
d7:07:07:7a:29:9f:52:10:3b:18:dc:5f:e1:61:ea:
cd:93:d5:56:9f:d9:ed:f1:5f:23:e6:60:52:e8:a9:
46:d4:37:7c:f7:cf:e3:c6:ce:34:00:a4:9f:7e:81:
06:6f:f7:1c:d8:67:82:00:58:e5:93:67:5b:cb:cc:
34:c9:70:e0:d5:4f:77:c7:45:33:8d:30:ed:8f:b9:
74:df:ad:35:ae:fa:52:9a:0d:2a:fc:3b:21:76:54:
a2:4d:19:00:fd:50:04:a5:2a:4c:cc:04:c1:ad:d3:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:77:4E:6D:56:91:EC:57:45:CB:EC:BC:0E:95:F6:DF:CF:4D:2D
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:5a:70:c1:4c:24:a3:d2:7f:f0:1c:8e:09:a2:8a:87:47:
ac:6a:b2:84:b7:90:3e:9f:eb:db:0b:92:55:78:a3:ca:94:7a:
31:4a:4d:25:00:c9:18:1b:ec:57:66:cb:5c:36:bc:28:13:59:
c1:8f:71:ad:60:63:01:b8:d1:52:5b:5d:36:56:d6:b7:e8:43:
11:90:58:fc:ab:0d:65:d4:c6:4a:29:f5:d0:09:fe:4d:3d:93:
c8:bd:bb:07:a0:df:43:22:cd:1c:5d:f5:cb:66:c7:82:1f:c4:
a5:47:5e:ad:db:34:dc:3d:bb:54:5d:e0:38:eb:10:82:d8:7f:
de:5e:ef:28:4e:97:a3:44:ab:aa:05:6d:56:35:76:a4:ec:e8:
00:4c:de:e8:a0:de:a8:bb:21:2a:5b:c7:a7:0e:09:53:fa:68:
e1:28:d6:0b:3c:92:c1:2a:b1:0e:ef:23:a5:9f:cd:36:f3:b6:
ca:ba:df:43:42:3e:f8:04:81:62:26:b6:73:28:70:14:d9:3e:
cd:61:e8:88:ea:34:ad:a8:9a:82:26:52:07:75:f0:03:96:08:
57:1e:1e:a0:6e:75:5c:e4:a9:4d:bf:b5:72:72:0e:d1:ac:1c:
27:11:a0:d8:58:0b:d0:70:7b:47:56:18:8f:fc:c1:4a:b7:6f:
2b:8f:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:26:17 2026 by rpki-client