Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: A8DzLTdf6OQkOWVTLoKju49dLOEx6DkdccxkxNkOyWo=
Subject key identifier: 30:2F:26:A6:C1:EF:57:D1:BF:92:B9:C7:99:CB:06:EB:DA:64:B5:E0
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019EB6C57CFF404199C9E1F059E70DDD1B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0995
Signing time: Thu 11 Jun 2026 13:00:56 +0000
Manifest this update: Thu 11 Jun 2026 13:00:56 +0000
Manifest next update: Fri 12 Jun 2026 13:00:56 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: 6vobvUAPw4zOw57dPu+j/g2IXaNZV7w0iXmkvN9iop0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:7c:ff:40:41:99:c9:e1:f0:59:e7:0d:dd:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jun 11 13:00:56 2026 GMT
Not After : Jun 12 13:00:56 2026 GMT
Subject: CN=302f26a6c1ef57d1bf92b9c799cb06ebda64b5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:1e:08:c8:41:53:21:f8:06:b7:7e:3d:59:
af:76:78:f4:3b:39:97:9d:38:7f:19:c7:93:6c:68:
d2:bd:f1:a1:ac:9e:ba:f2:d6:60:c2:7a:3f:f7:13:
99:e3:7f:0a:41:07:e2:9c:d1:57:18:e8:fb:15:a2:
af:37:64:be:25:07:3b:aa:4c:de:ba:04:bc:e0:19:
3d:6b:84:c9:0f:ea:16:98:e9:56:9e:66:08:b5:d3:
05:94:b3:a0:14:9b:6e:5c:ec:97:ac:c5:b7:dd:ce:
f2:04:1d:68:1d:6d:5a:0d:e5:b0:63:7e:d4:50:ee:
75:3d:49:f6:d6:06:db:56:35:55:be:ef:43:e8:27:
c9:c9:f9:26:6f:fd:f3:5c:7e:98:5a:03:41:90:aa:
24:39:cf:82:d3:0c:ac:45:cf:13:ec:72:7b:9a:f1:
c1:a8:9c:fe:68:18:31:0a:57:a7:40:de:7b:b8:4c:
03:5f:da:b5:80:e5:0d:ed:11:a8:94:2d:aa:67:3e:
2d:68:0c:86:8c:e4:d0:fe:60:41:df:f4:d6:5a:37:
af:c5:3a:d3:e8:2e:f0:4d:b6:04:59:52:05:4b:9b:
52:11:7d:98:c0:d5:b2:19:82:9a:29:e6:7f:6c:18:
2f:0d:e8:37:30:6d:de:6c:d1:e6:a7:73:80:f4:be:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:26:A6:C1:EF:57:D1:BF:92:B9:C7:99:CB:06:EB:DA:64:B5:E0
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8b:a1:8c:8f:cc:d9:06:2d:46:20:c8:6c:bb:ba:b5:d4:d2:
c4:1d:4a:57:23:46:74:90:4a:00:11:82:23:59:72:66:e9:0d:
c5:44:73:b7:c3:7f:bc:23:c7:fd:d5:14:b0:fe:a5:81:b7:fb:
58:03:76:dc:28:f2:33:14:93:54:b6:3c:c4:64:87:b5:c5:93:
17:df:18:4b:f8:06:c1:95:e4:a2:84:fe:03:35:eb:c0:07:95:
5f:13:e1:6d:23:64:8b:6a:92:1d:77:a8:97:ab:2a:de:cc:05:
ff:6f:b9:49:d0:7d:d5:74:be:9b:3f:90:8a:5c:b5:f6:fd:b1:
b9:d5:6a:42:5d:55:39:b4:37:77:2c:1f:24:c9:ce:d2:13:5e:
55:da:78:99:af:a0:7c:1e:9e:69:e7:8a:89:f9:57:49:3b:12:
11:ae:97:65:1b:7e:e6:47:f6:d2:1b:56:62:e4:10:bb:97:a9:
0b:ff:a9:93:d7:ea:07:c4:a5:d7:e1:e6:97:d2:92:a5:48:61:
60:e9:b8:19:3f:fb:34:93:bf:c7:8b:61:0c:4a:db:8e:fd:51:
7d:f6:fa:fe:0c:bc:79:df:8a:53:87:6b:c3:b0:68:e4:bf:58:
3b:62:84:72:0c:03:c0:9f:8b:c3:44:3a:90:5f:6f:b3:bb:4b:
c0:41:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:33:13 2026 by rpki-client