Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: U/eOs5o9V0AgvMUJJS1d0u1OEvNk4C2g6EK8YxLHMco=
Subject key identifier: BF:75:21:27:F8:43:FC:3E:70:DD:45:DC:EA:83:42:A1:8A:70:B7:39
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019F17C2355AA401C3850F7015E6FB156A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 0684
Signing time: Tue 30 Jun 2026 09:00:31 +0000
Manifest this update: Tue 30 Jun 2026 09:00:31 +0000
Manifest next update: Wed 01 Jul 2026 09:00:31 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: aGRWC0du8m8QACKnlzbh7OvGm1WqAs4ppW+dXZEe9No=)
2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:35:5a:a4:01:c3:85:0f:70:15:e6:fb:15:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Jun 30 09:00:31 2026 GMT
Not After : Jul 1 09:00:31 2026 GMT
Subject: CN=bf752127f843fc3e70dd45dcea8342a18a70b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:0c:37:c5:31:6b:a6:55:4e:db:82:00:2e:
2d:d7:a2:a2:8e:4c:e9:ce:1a:53:98:cc:c1:55:74:
2c:2d:6a:58:6d:a6:d3:52:89:1e:ea:36:2a:ff:0e:
f2:32:26:6a:39:5f:9a:4a:10:de:9e:9d:34:b7:d9:
05:81:0e:42:58:63:2c:0a:77:9f:59:d1:10:56:fb:
88:7f:24:d5:33:20:45:38:da:f2:54:f4:48:ae:16:
03:60:78:a9:4f:ce:49:d2:87:0a:73:f6:3d:a4:26:
25:3d:fb:13:e9:33:c6:ca:89:a2:97:85:6e:b7:aa:
60:b8:ca:ee:78:c7:2b:bc:7e:2b:03:bf:cd:7a:e1:
c4:ee:98:15:fc:cd:bc:f4:d2:b7:3a:a9:ff:50:e1:
12:d7:87:f6:f7:7e:9d:f9:48:bf:73:8f:c6:1b:cd:
20:7b:d7:f0:46:b5:9c:fc:f7:98:68:24:75:86:b1:
05:c6:4e:59:c3:04:f4:b4:70:d7:5c:4f:11:63:a7:
9b:d0:b9:65:d0:ba:cb:90:a6:0b:4b:78:98:e7:5d:
ff:8c:26:01:76:73:2a:61:55:8a:bc:93:df:11:30:
d3:c6:54:ae:e1:42:4e:10:2c:e0:4c:fb:b9:23:13:
7f:9e:9c:9f:b0:13:71:3e:ad:5b:f6:cf:99:b3:4b:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:21:27:F8:43:FC:3E:70:DD:45:DC:EA:83:42:A1:8A:70:B7:39
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:bd:9f:c0:1f:5d:13:23:09:60:6d:a1:22:47:56:5b:00:
72:72:e3:4d:66:01:36:d5:81:98:08:f4:b3:15:4f:db:ad:3c:
21:16:72:9c:4a:6f:61:38:23:75:16:52:22:91:da:07:51:e6:
2f:24:ba:bb:de:75:5e:1c:20:83:64:3e:44:d0:b6:fe:b1:c6:
19:74:d7:f5:b4:dc:4b:c7:09:6c:df:43:5e:72:17:df:d1:a3:
fa:69:33:16:d9:be:b8:3a:12:da:92:03:20:ae:c7:54:33:2d:
37:26:0e:0b:09:54:c7:83:b9:f0:b2:37:00:2d:3b:bd:2a:99:
47:23:37:32:c9:ab:46:d9:bb:fa:87:3b:8a:e3:7a:d1:3c:23:
33:fb:b7:6f:db:ce:17:21:02:0d:1a:28:73:f7:9e:f9:3d:a3:
c4:e8:84:74:e4:e4:cc:b7:5b:48:57:4d:c6:75:a7:ea:16:f2:
e8:bf:af:ce:d3:11:8a:f0:c0:c0:92:32:d6:4e:87:2f:2b:55:
c4:3f:e1:67:61:a6:66:b7:95:3e:cd:cc:00:51:24:57:fb:0c:
d5:57:bd:12:b0:40:4c:98:5d:d5:dd:8f:5d:c1:43:bd:4f:3f:
12:4b:e1:1b:75:8a:73:00:c9:f4:9b:32:a7:b5:e1:d9:57:dc:
04:1b:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:20 2026 by rpki-client