Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: x9xhlzXuqm6o+32OU9xfUSBU3l3zlI1uNPIGDzLaQYg=
Subject key identifier: 23:EB:65:3F:7C:EA:9C:72:66:38:BA:1C:C2:0B:1E:13:5F:17:D4:E1
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019EB80F8894C1EBCB9FCEBDF0FF2715D0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0C4F
Signing time: Thu 11 Jun 2026 19:01:26 +0000
Manifest this update: Thu 11 Jun 2026 19:01:26 +0000
Manifest next update: Fri 12 Jun 2026 19:01:26 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: h5B3yP/SDgn61Ctd+YjafFQNehlxAy1hb1Iksw+GMaQ=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:88:94:c1:eb:cb:9f:ce:bd:f0:ff:27:15:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jun 11 19:01:26 2026 GMT
Not After : Jun 12 19:01:26 2026 GMT
Subject: CN=23eb653f7cea9c726638ba1cc20b1e135f17d4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:24:4d:5a:36:9a:88:d8:2e:b5:cc:f7:3a:
bd:e3:1e:2b:6e:6a:53:de:75:cc:1b:c9:f5:0f:60:
cd:5d:74:84:f5:b9:e7:f8:ae:c6:a0:d5:6c:ab:8c:
ed:77:0f:7e:fe:9d:b8:c9:ca:1e:cd:e2:21:50:95:
ac:73:2b:26:8f:f4:43:9c:d1:f3:75:5a:31:72:5f:
5a:67:30:ca:76:ae:db:2f:41:9a:34:31:85:e5:1e:
e1:63:21:f3:0f:30:44:73:7a:6f:9b:93:90:54:7a:
1a:7e:5c:87:14:03:df:1a:8d:81:cd:97:a0:ff:ae:
ec:e7:ea:a5:bf:9e:f0:91:14:68:5c:80:e4:c0:64:
e7:3a:4e:f9:d7:2f:77:3e:db:21:15:7f:31:86:93:
66:84:a0:c8:80:f7:85:0d:2f:df:5d:2a:ed:a8:cb:
e3:37:fe:c3:a3:94:bb:94:80:73:d2:0e:ff:1a:e9:
4a:1f:d2:26:0c:c7:96:53:6e:5c:19:6e:31:7d:ba:
96:b7:78:ef:59:0c:c4:bf:b2:22:ab:f0:f9:97:b3:
6e:d6:d1:03:88:8c:8c:7a:23:94:eb:92:66:7d:bf:
f9:7a:cd:b0:1b:2c:70:a1:30:3b:0b:c5:56:99:d2:
e8:14:7b:0a:ac:4d:ca:dc:80:0f:c4:7a:f7:a4:99:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:65:3F:7C:EA:9C:72:66:38:BA:1C:C2:0B:1E:13:5F:17:D4:E1
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:e7:50:08:16:22:60:c1:5a:93:9b:8e:46:69:2d:e4:57:
45:58:ed:19:18:84:cf:fe:14:3f:0f:b8:85:9c:4f:8c:66:c9:
7f:0f:c7:7f:da:b9:40:30:eb:d9:2a:65:4e:7e:49:f8:98:11:
16:c0:c1:80:30:3a:40:b9:c6:2e:63:23:25:f5:b1:18:6f:76:
5a:cc:8c:2c:3c:63:97:82:aa:ce:37:f1:e4:fb:b4:d1:e8:27:
d8:57:08:fe:50:50:be:5a:46:8f:27:fe:b3:8b:eb:8d:27:4b:
0c:72:83:24:e3:57:ed:43:58:ab:68:ae:0f:d0:f3:4d:cb:6f:
8a:ff:b2:82:7e:d5:5c:c1:46:a7:07:ec:89:80:98:55:ab:59:
fe:6f:93:9f:e4:f2:e1:74:85:a6:a6:72:d9:28:fc:32:64:c9:
d2:63:53:ee:ab:5b:97:c6:23:10:5f:d3:7f:05:76:79:1c:12:
5e:e2:fa:9b:25:28:4d:03:91:08:0c:47:fa:b1:d3:89:89:a2:
69:c6:ad:8d:c2:12:e0:cf:ab:e1:32:cc:c1:b1:36:72:2d:19:
b4:36:8f:ce:bc:36:e0:30:5f:ec:88:0f:fa:db:cc:09:f7:1b:
89:29:f6:f0:16:1a:6f:26:29:f0:e0:d6:50:75:dd:8f:64:7b:
67:9f:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:21 2026 by rpki-client