Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
File: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft (raw, json)
Hash identifier: BGqVC0Uk/tojiLtzhfKPiAiDXlsmozIiXJTwbzN7qe0=
Subject key identifier: A6:AD:A2:24:0A:D9:8B:3F:4A:4D:AD:69:99:97:D8:27:72:B9:15:62
Authority key identifier: 70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
Certificate issuer: /CN=70857756acf339fac229a1c9e9c57c4895efa91f
Certificate serial: 019EB9C65639AF4FD622BD798DDD6E49AF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
Manifest number: 29
Signing time: Fri 12 Jun 2026 03:00:43 +0000
Manifest this update: Fri 12 Jun 2026 03:00:43 +0000
Manifest next update: Sat 13 Jun 2026 03:00:43 +0000
Files and hashes: 1: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl (hash: HwyNM+D0WOkIQ8NTFPOAJhGocbJPDgwIN2dQjM35hiU=)
2: vV6KIbjbHUkMbwKENIBHTTXDdrU.roa (hash: EOt5kopYpNaYTBOsxtYCd3AAd6VIO4EI/DljsaKcEE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:56:39:af:4f:d6:22:bd:79:8d:dd:6e:49:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70857756acf339fac229a1c9e9c57c4895efa91f
Validity
Not Before: Jun 12 03:00:43 2026 GMT
Not After : Jun 13 03:00:43 2026 GMT
Subject: CN=a6ada2240ad98b3f4a4dad699997d82772b91562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:83:6b:91:88:e5:24:68:6b:fa:04:43:b9:
9d:00:c7:86:04:c5:6c:92:b7:a3:a0:82:88:f9:6e:
c4:fa:f8:3f:26:ce:f0:71:01:09:a1:10:0f:02:32:
f4:ba:c5:70:c0:cc:0b:d6:c4:a0:0a:1e:26:45:51:
ba:0d:2d:16:00:ef:d0:9a:ef:63:30:1d:6c:dc:ba:
ce:e2:9c:a7:75:3b:d1:12:d3:61:01:77:c6:02:0f:
45:87:6c:5f:4e:c6:ab:79:fa:bd:c2:67:06:fd:d7:
5c:00:ea:ac:63:79:f9:f6:6b:74:39:ae:c2:ea:fb:
50:e7:1d:05:1a:c2:ca:57:e0:80:8b:b1:93:2f:b2:
96:a5:a9:21:5d:3f:f5:36:9d:1b:79:df:7e:89:e7:
6b:81:3e:94:70:a4:74:f7:ae:16:68:13:ea:97:e9:
1a:fe:5e:1c:bc:c6:ab:a5:63:5c:30:e8:c1:d8:36:
ea:03:88:c6:f9:a7:90:1c:0f:a2:6a:01:7e:80:3b:
8e:0d:6a:2d:91:8b:5d:fb:85:49:ea:c2:98:cf:8f:
30:b7:5d:14:25:0b:e8:91:4b:01:7b:ce:81:6e:a5:
90:ae:38:a8:84:2c:19:6f:87:8b:48:54:67:1d:a2:
9e:d1:57:5d:15:ea:82:08:15:5a:2c:c5:a7:12:c5:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:A2:24:0A:D9:8B:3F:4A:4D:AD:69:99:97:D8:27:72:B9:15:62
X509v3 Authority Key Identifier:
keyid:70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:52:92:1b:be:a9:97:cc:5c:96:63:79:74:f0:3d:1e:63:
2c:ce:2f:95:25:f1:02:ef:c7:b1:73:d7:c2:93:11:f2:7f:e9:
12:97:37:c8:90:9a:0d:75:ae:86:86:fc:0e:14:9e:6a:f3:2b:
1e:b0:35:8c:18:62:0b:fa:14:36:1c:e5:21:90:9a:d9:00:72:
6b:77:f5:9a:b9:ef:7f:33:dc:82:2b:4f:02:70:0e:a0:7b:b6:
df:35:b8:b8:ed:78:2d:48:64:cc:b9:f2:26:69:04:08:d8:8e:
a8:b7:ec:fb:f4:70:54:dc:1f:c2:18:87:39:5c:77:4a:af:ce:
e3:83:c6:32:e9:71:5b:0c:0b:a9:a3:40:7e:e3:d2:41:96:4f:
aa:b5:98:80:1f:e9:b6:64:3f:12:95:5d:d9:4d:46:a8:39:ec:
df:4e:7e:ff:1d:4a:60:ad:ed:98:89:9d:dc:65:88:06:43:aa:
a0:1a:21:d2:8e:9a:68:c4:77:25:42:63:83:5a:a9:a9:b1:41:
26:ca:10:5e:96:91:e2:ba:26:19:ae:b3:c3:c0:c5:c3:3b:58:
43:ab:b5:26:e5:25:b1:d9:6b:bc:30:6f:0e:9a:13:3e:bc:90:
08:dd:86:33:2d:2c:63:96:9e:07:2d:b7:c4:fd:23:14:25:1b:
1a:dd:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:15:00 2026 by rpki-client