Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: fkBYjPhbHY32S4Yj21V6TU7Vz80oZbSFROSbHd7ZW2c=
Subject key identifier: 54:E6:D0:9B:0F:14:8E:E4:FB:FB:55:65:5D:68:90:6C:18:26:4B:B6
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019F190C7D56BDCA49406FDFC027D25E749D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 15:01:16 +0000
Manifest this update: Tue 30 Jun 2026 15:01:16 +0000
Manifest next update: Wed 01 Jul 2026 15:01:16 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: lnqMQ5V+ZTkPd0RVXTKpGNLS13jSnHdyxWnzdkLL91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:7d:56:bd:ca:49:40:6f:df:c0:27:d2:5e:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jun 30 15:01:16 2026 GMT
Not After : Jul 1 15:01:16 2026 GMT
Subject: CN=54e6d09b0f148ee4fbfb55655d68906c18264bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:7e:5e:74:6e:84:e4:9e:e1:04:ac:18:6e:
c8:57:86:cb:79:a6:28:22:09:40:cc:f2:f7:65:44:
39:c1:98:ac:ea:de:d1:f4:ad:7a:c7:a0:6f:17:dc:
73:d4:73:16:2f:ef:20:e4:cc:7a:8d:77:b6:cf:6a:
44:37:d9:e7:6a:fd:74:95:ce:aa:fe:8a:fa:2e:df:
d8:5b:21:d8:43:52:07:63:f9:3d:e5:b6:94:f8:85:
61:ba:66:1a:c2:f0:da:23:3f:24:73:7d:a0:3d:4b:
aa:f5:1e:b6:f8:b2:83:67:e4:0e:6c:99:5e:3a:ed:
19:6c:19:4f:c9:3c:05:99:c6:b4:26:c8:57:df:c0:
23:ac:8a:d8:c7:65:3d:45:ec:5c:84:c6:87:35:dd:
ef:bb:fd:35:ab:fe:3d:11:7a:5b:fb:74:76:52:fd:
f2:86:7e:ca:80:b7:0b:b8:5e:be:8c:3d:86:1b:78:
61:80:e5:a0:e8:d7:17:5b:3e:aa:af:8f:1f:c6:83:
df:83:8f:2e:ce:75:8c:4c:18:a3:ef:b8:a9:31:fd:
62:80:9a:6d:69:c9:6b:7e:ad:5d:b7:b5:2d:4c:63:
9b:02:2a:88:ea:60:f0:05:ce:2b:b7:9b:93:a4:df:
74:0a:fe:4a:39:51:fe:f4:31:0c:93:9e:10:a5:60:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:D0:9B:0F:14:8E:E4:FB:FB:55:65:5D:68:90:6C:18:26:4B:B6
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d1:57:86:a6:b9:66:38:5f:c5:d3:72:61:35:de:30:c5:f9:
ca:3c:c1:38:72:48:e0:ab:f1:e9:5b:b8:50:16:ad:14:93:d7:
cf:76:c0:09:23:b8:33:76:2c:a3:0a:b2:be:3f:8c:68:b8:29:
4f:1b:ef:81:4a:8c:a8:6e:0e:7a:e3:f2:49:7c:e3:c1:1a:0b:
3d:6c:ce:b1:b2:4c:54:1b:c0:f6:97:ba:cf:77:5d:d9:77:c6:
0c:7d:be:8d:25:95:2a:a5:97:ab:cc:23:f5:5c:72:a4:7a:23:
56:29:2d:0a:04:07:97:1e:b1:41:49:26:16:f3:a9:f7:19:4b:
4b:00:d5:0a:7f:af:d7:29:6a:52:17:2e:9a:18:de:78:78:be:
d6:b8:93:e2:cd:58:8c:79:15:ee:c8:93:9d:ad:3a:5c:ec:c2:
12:00:47:42:5a:4e:6e:16:9e:ba:ff:29:af:b5:8a:f8:ba:35:
4a:06:24:79:8f:6a:1c:39:5d:df:38:b3:2a:03:60:24:54:e9:
32:85:f2:a9:16:a1:f8:75:44:37:66:5f:eb:fa:90:6b:de:3f:
33:d0:23:95:cc:7b:8f:42:8a:79:32:de:b9:24:5b:d3:31:ca:
7c:59:14:22:9a:0f:a2:b5:ad:af:8c:e0:23:fc:5d:03:2f:a5:
19:a6:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:30 2026 by rpki-client