Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: 1DHfZC5z2QMm9LIYIHN60JUTLY4QPWECOkhK7GAveoc=
Subject key identifier: DF:21:77:0B:52:B5:DE:71:4D:35:0C:0F:FD:18:48:AB:52:CA:D0:45
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019EC7B88F1486114F34FF2E667EBBF1E01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 171C
Signing time: Sun 14 Jun 2026 20:00:21 +0000
Manifest this update: Sun 14 Jun 2026 20:00:21 +0000
Manifest next update: Mon 15 Jun 2026 20:00:21 +0000
Files and hashes: 1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: JKFoNFfYGNwETCG2sEZP2fP3z5Iy2J0vQlOwhAlg0Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:b8:8f:14:86:11:4f:34:ff:2e:66:7e:bb:f1:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jun 14 20:00:21 2026 GMT
Not After : Jun 15 20:00:21 2026 GMT
Subject: CN=df21770b52b5de714d350c0ffd1848ab52cad045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:4b:42:e2:70:67:8a:1e:78:c2:1c:5f:f2:
be:6e:6d:38:e3:c0:92:41:68:8e:0e:25:85:25:ee:
3c:69:c1:19:7b:df:2a:5c:ac:ac:05:51:13:18:05:
c3:49:f9:9e:26:af:86:a5:f7:aa:36:be:7c:6c:3d:
5a:7d:ec:e9:c2:18:cd:f1:f3:d8:f4:fa:0d:63:0e:
71:1d:46:ae:fc:70:8c:81:f4:62:f6:2f:f4:27:25:
e8:73:16:ec:00:6a:b4:d9:80:e6:c4:1e:79:48:dd:
be:4b:b4:2c:dc:99:12:a9:e6:2d:48:1b:da:57:63:
7b:4c:34:9c:3f:fd:52:bf:c4:5b:51:71:ac:cc:2d:
ba:96:68:e8:c8:73:35:7a:79:21:96:0f:32:03:59:
0a:ed:aa:81:46:c4:f0:71:6a:78:c2:af:00:b7:ef:
16:8b:7c:66:93:22:ae:a3:fe:21:37:95:d0:6f:19:
00:40:9e:a7:eb:ee:da:e8:4c:e0:a4:36:f1:a9:6f:
ab:1f:62:72:c9:ea:66:72:27:b4:56:d5:b6:ca:ce:
65:59:d0:fe:2e:9a:4e:f1:ae:fe:0f:70:b8:40:18:
41:0a:24:a0:9c:9d:c6:b2:da:63:fa:b1:17:eb:9f:
0b:78:7d:2c:82:63:68:48:7f:7c:76:d2:b6:2a:6a:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:77:0B:52:B5:DE:71:4D:35:0C:0F:FD:18:48:AB:52:CA:D0:45
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:8f:b0:2d:e5:18:0a:c7:c7:a8:8f:ab:a6:9f:54:2d:21:
a5:8e:7c:71:dd:bc:8f:b9:25:56:a0:93:71:eb:25:74:e3:bd:
0e:28:b4:6b:66:27:ff:04:4b:84:fa:f4:d1:0f:f2:56:6c:2a:
d9:cf:62:4f:fc:6a:77:45:9b:bf:91:cb:73:6a:f0:42:d7:74:
74:d8:85:23:a0:03:fe:5c:15:b4:3a:6f:8c:23:c7:54:e9:87:
33:46:89:44:77:b6:87:93:ed:ba:78:32:b6:06:ed:71:af:f3:
18:82:97:54:b2:90:34:75:b1:d6:46:fc:03:92:7c:40:13:a2:
28:62:a5:69:e2:e1:a1:4e:a1:b6:7e:dc:c4:42:45:02:30:f8:
7b:55:cd:6c:67:ae:41:e1:71:c5:21:12:ce:1e:c1:87:ac:05:
50:23:b5:74:44:31:bc:5f:94:46:11:12:5b:7e:e4:c7:a4:dd:
70:c5:16:ac:4d:ab:c6:ff:8a:cb:d0:78:01:0d:eb:55:c8:ad:
1a:ef:3c:41:dd:48:95:ec:c8:c6:55:6e:09:3e:4e:34:00:d4:
38:f9:62:ed:ad:2d:20:9b:53:92:b8:36:d8:a9:9b:4c:de:b0:
c6:69:b1:e7:3e:d1:3a:40:93:32:62:22:8d:82:61:cb:1a:83:
c7:a6:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 23:54:21 2026 by rpki-client