Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: s44foi01mqDA3kiTg+sCqddKN8qVagE2MujOBh3Rn10=
Subject key identifier: 97:DE:93:34:C3:7D:93:6A:5E:B5:35:DB:53:0C:AF:2A:80:F9:D6:E0
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019E90CA79DD7A3B1DC64668E4FDCBCC98C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1943
Signing time: Thu 04 Jun 2026 04:00:48 +0000
Manifest this update: Thu 04 Jun 2026 04:00:48 +0000
Manifest next update: Fri 05 Jun 2026 04:00:48 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: WkT8D/xA6PjgmS8WTjxeW353AgsuDYlsPLzOmzQWA0E=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:79:dd:7a:3b:1d:c6:46:68:e4:fd:cb:cc:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jun 4 04:00:48 2026 GMT
Not After : Jun 5 04:00:48 2026 GMT
Subject: CN=97de9334c37d936a5eb535db530caf2a80f9d6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:3e:ed:70:9a:f0:98:99:23:4a:06:a6:f2:
75:80:1e:82:c2:9e:4b:47:22:b5:b5:43:fb:5d:56:
28:fd:0e:1d:65:2e:e0:8c:20:6a:86:e7:11:bf:6b:
1c:5e:c4:40:c4:b7:78:f7:34:9b:96:3c:92:17:77:
71:07:79:f7:08:4b:52:72:7a:65:3c:a2:b2:9c:58:
bb:7a:60:cf:3a:61:7c:58:42:32:23:d5:b2:a4:97:
a8:30:73:c6:6f:4b:60:3c:2f:7d:4d:06:89:d7:39:
63:6f:5d:3f:91:c9:59:89:d3:6f:2f:6b:dd:b3:f0:
ab:6c:f0:fc:03:db:73:71:be:e5:62:c3:d7:40:57:
22:fc:08:d6:90:2f:b2:22:46:06:f4:e1:5d:a8:0c:
d0:53:b4:38:d9:ec:09:76:5c:9d:84:5c:48:88:5c:
97:20:76:8b:4a:8d:09:f7:8d:a9:6c:8b:68:88:c0:
fe:42:04:d7:4a:84:5a:94:4d:9f:d7:01:07:79:aa:
6a:9f:34:aa:40:2e:56:70:72:93:69:cd:e4:ba:43:
4a:dc:4d:48:ea:0b:51:f1:7f:51:f5:48:86:ba:d7:
78:a7:4b:1e:f2:ab:46:c8:93:10:a9:19:57:1c:35:
7a:ac:00:f4:93:69:f1:cc:a0:71:30:8a:1f:4a:70:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:93:34:C3:7D:93:6A:5E:B5:35:DB:53:0C:AF:2A:80:F9:D6:E0
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:ab:a9:82:cd:e3:e6:7f:be:9f:d5:53:06:c4:d4:21:68:
00:d3:fe:75:8e:14:1c:3d:fc:7c:fd:78:e2:7f:1d:d0:4b:29:
47:26:df:c0:84:2c:b3:cc:a6:60:97:b4:d3:1d:a9:4b:9f:4a:
dd:56:23:df:58:cd:62:96:a3:5f:39:f6:5e:8d:00:c0:b0:12:
9c:34:2a:27:ac:56:95:4a:5b:57:79:8e:7a:ba:86:b6:a4:d5:
02:b6:1a:f8:15:d5:11:ac:67:63:15:26:ae:d3:f7:c6:a6:84:
5d:72:9b:cb:a1:c7:1c:18:9c:f8:c7:44:e6:8b:43:0f:b0:5c:
e1:d2:4f:c2:1b:4e:cc:68:e0:e3:12:ff:a5:71:b8:64:0a:29:
74:eb:97:28:e5:dc:a8:8c:90:e5:41:0e:e3:13:29:53:72:5f:
75:d6:4e:00:cc:35:c0:c1:10:bf:12:b7:8d:a6:18:1f:32:96:
92:44:db:9d:7c:83:4c:42:02:3d:1b:47:83:63:38:0f:e2:65:
ae:d9:b1:e3:f7:e5:02:0b:86:3a:57:d6:7f:4c:03:0d:2c:38:
b9:20:e5:8d:e4:d6:f0:51:26:b0:22:a3:bf:67:ac:33:96:a1:
dd:d9:82:e8:4a:77:12:21:72:1c:10:50:ef:c7:2f:e1:68:fa:
7c:1b:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:07:48 2026 by rpki-client