Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
File: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft (raw, json)
Hash identifier: aV42cIRAWlkk6JdARsASbuOK4KZAByb4QWeW3mtsOC0=
Subject key identifier: 8B:6C:36:CF:B2:21:49:2C:15:13:76:EE:35:C6:C4:BF:48:A2:66:E9
Authority key identifier: AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
Certificate issuer: /CN=ad5ce553006070fe080370adfb944ed29b7d9411
Certificate serial: 019EB87CFE09F385D3E4E761A6DD11115ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
Manifest number: 41
Signing time: Thu 11 Jun 2026 21:00:59 +0000
Manifest this update: Thu 11 Jun 2026 21:00:59 +0000
Manifest next update: Fri 12 Jun 2026 21:00:59 +0000
Files and hashes: 1: Di2m4-5_QDl5Rldoh59q9lj5dCY.roa (hash: GNTOuw95a8w2YtoMmrRI/JIWU21DxcdrGmYPu8oxIao=)
2: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl (hash: Nr/fPn9ywTY5wMMkPeNssJmI5Fnj+0RSeqiwaigaN4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:fe:09:f3:85:d3:e4:e7:61:a6:dd:11:11:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5ce553006070fe080370adfb944ed29b7d9411
Validity
Not Before: Jun 11 21:00:59 2026 GMT
Not After : Jun 12 21:00:59 2026 GMT
Subject: CN=8b6c36cfb221492c151376ee35c6c4bf48a266e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:59:42:13:99:12:d5:3d:b7:56:e9:c1:1a:
05:0b:0b:8c:9f:94:51:6b:a7:73:43:42:80:38:7a:
55:45:3e:9e:8b:cb:bb:c9:64:36:60:55:63:7c:fb:
c6:07:ff:64:22:0e:fa:4c:e8:2a:b6:42:7d:eb:55:
c3:bc:dc:81:11:34:47:f9:cd:de:d1:30:8d:ec:ca:
79:71:2d:9b:c6:68:5d:4d:dd:f9:5c:f6:79:5b:f7:
88:8c:06:1e:ac:a3:af:0c:86:75:82:01:e3:e0:24:
c7:57:45:0b:47:43:72:48:15:bb:bb:8b:77:13:c7:
43:7f:21:e8:16:ac:a7:cf:19:c2:93:3b:9f:ab:b5:
37:e0:f2:80:86:03:71:89:16:5c:c3:fa:56:21:39:
30:cd:ff:e5:9d:9f:97:91:69:b2:bf:15:98:3f:27:
08:f1:24:c7:ca:0a:8a:8a:18:60:74:db:b5:eb:79:
d2:60:dd:e7:02:e5:77:e7:56:fd:b2:fa:97:16:e9:
a5:d0:b0:bc:a3:93:cf:b4:ee:a3:5c:de:13:71:3f:
4f:c3:a5:3f:5f:6a:4d:42:cb:88:b9:8c:1e:2b:76:
fa:18:fa:ce:44:fd:51:f8:e7:a8:c2:f5:ac:2d:38:
d9:f9:25:21:7d:91:cf:ee:2b:94:a5:ff:8b:c5:2f:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:36:CF:B2:21:49:2C:15:13:76:EE:35:C6:C4:BF:48:A2:66:E9
X509v3 Authority Key Identifier:
keyid:AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:55:da:c0:3a:fa:0a:88:1d:4c:ff:c0:3c:15:18:7b:2a:58:
48:96:79:0d:b3:8b:de:c4:e6:ad:a0:54:dc:7b:6f:be:3f:6a:
a1:bb:49:19:f8:be:99:6e:60:9b:93:a9:25:26:98:d2:6b:23:
87:2f:e0:21:ce:1d:dc:e9:84:60:61:66:f8:95:f3:5e:55:ff:
54:14:5d:2f:c9:2d:3c:09:58:a8:41:f2:52:c9:46:4c:5a:d5:
6c:70:40:ee:95:c5:9a:98:ca:9a:45:04:b7:7d:60:42:8f:54:
58:8c:80:40:88:2c:f2:c0:6b:1c:65:65:b3:49:f4:12:39:e6:
f4:2a:14:df:06:8e:2f:44:4f:89:77:d9:2f:f1:e3:52:af:f3:
2f:44:3f:74:81:9d:c1:1e:d1:35:60:c5:c8:7d:de:21:15:15:
cb:2a:5f:32:ef:6a:32:eb:48:b1:6b:05:45:55:76:d2:dc:3b:
f6:35:5e:82:f6:5c:b2:c3:fb:82:9c:ba:32:f5:fe:0d:70:8e:
b4:86:73:a6:29:58:fd:55:1a:05:20:d1:02:0e:09:09:c8:ed:
de:84:14:e9:8a:5f:84:7c:92:6d:35:85:40:9d:ad:60:53:18:
1a:28:b4:04:7a:8d:c9:b4:6e:8e:69:15:e4:49:a8:28:e7:3e:
a0:79:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:28 2026 by rpki-client