Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: 2Jad3YxuiVoo3JAEdEhrFs5aYLOZH0Tl++K/oG2v++M=
Subject key identifier: 20:23:2E:56:AA:F5:E0:E2:E4:96:66:FF:8D:49:94:C3:90:27:04:30
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019EB87C750472F99C0563B7808ECEF51982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 1348
Signing time: Thu 11 Jun 2026 21:00:24 +0000
Manifest this update: Thu 11 Jun 2026 21:00:24 +0000
Manifest next update: Fri 12 Jun 2026 21:00:24 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: 9FTlb5ZHO8UYKaX1OEAtHbGkPHN4jTB/0Tl7Ls96h38=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:75:04:72:f9:9c:05:63:b7:80:8e:ce:f5:19:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jun 11 21:00:24 2026 GMT
Not After : Jun 12 21:00:24 2026 GMT
Subject: CN=20232e56aaf5e0e2e49666ff8d4994c390270430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:cd:12:d7:35:c9:cd:15:81:cc:ba:c8:c7:
1e:52:21:bc:f0:5d:b1:cb:59:23:87:98:78:8a:94:
37:12:48:96:8e:8a:83:b4:d1:c1:cc:c3:37:07:c6:
09:08:b3:31:73:b2:d3:71:13:36:b0:1f:7f:26:e2:
1e:30:46:01:b1:99:09:44:f8:02:31:f5:a1:cd:98:
32:ba:1f:24:00:ff:26:6f:ac:3b:8c:bf:38:72:47:
81:c5:40:52:3d:8e:ff:ad:22:53:0f:97:34:e0:58:
3f:4a:8e:64:26:43:04:23:46:84:56:b9:49:3e:fa:
e8:c6:89:2d:73:dc:8e:36:c5:4a:31:94:35:61:c3:
de:a7:fa:90:be:ee:45:b2:dd:68:c8:eb:80:46:e5:
bb:11:36:ee:24:ba:5c:6e:8f:9c:16:f9:ea:2c:d6:
02:be:08:52:e1:bb:3f:99:09:a1:28:fc:f9:98:6d:
3a:50:4a:a9:1c:13:db:18:9e:30:c5:61:a3:8a:90:
22:a5:5d:e3:51:e4:23:ad:ea:e2:22:bc:27:bc:89:
0b:81:6a:76:c7:83:1f:29:c4:1f:12:61:95:b8:7f:
55:c8:6e:f4:27:25:d6:b1:21:76:1f:46:5a:44:89:
e9:28:3f:c0:7b:70:24:61:e5:f0:59:c6:17:2b:d7:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:2E:56:AA:F5:E0:E2:E4:96:66:FF:8D:49:94:C3:90:27:04:30
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2e:cf:6a:ef:2d:28:b7:68:53:67:33:1e:b8:3c:0c:1b:5b:
73:47:86:2a:9f:a7:af:7b:30:94:b6:09:c2:15:d3:81:13:81:
02:b0:6b:8a:78:50:6b:7c:51:39:53:9f:72:5d:34:50:a3:5b:
c0:d3:50:3d:7d:8a:b2:8b:e6:5c:92:e6:fc:58:83:55:d8:e6:
63:55:14:32:bb:ea:43:3f:2d:79:7f:d0:bf:f1:1b:66:cc:e7:
8f:cf:17:3a:5b:2e:ee:cf:c5:9d:e4:02:bb:09:4d:8f:2e:1d:
d4:db:22:d2:da:26:c5:01:f7:5d:c7:65:38:5a:c1:31:a0:6a:
cb:06:16:ed:e4:be:2c:b4:2b:dd:56:9b:87:43:6b:6b:3c:28:
c5:37:c3:4c:52:50:aa:36:43:03:90:0a:a3:27:43:23:88:57:
df:76:55:89:87:db:b6:a5:33:80:27:f0:65:6e:42:c5:fb:d6:
93:ee:3b:84:77:d7:b1:1d:45:7e:b4:3d:63:e2:1f:3b:f9:67:
47:d6:88:57:fc:f8:68:d9:ef:89:2c:ed:20:e7:89:61:75:4b:
64:23:7a:72:75:75:36:f0:0b:fa:6f:cc:56:a1:ad:6f:6d:b6:
98:3c:dd:21:67:d4:67:4c:6c:ac:3b:0c:c2:9b:2e:db:c0:84:
a5:47:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:34 2026 by rpki-client