Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: jObHSxlUZLylv4Hsi7cMAoPUrIJINd6d3oxa9VsFmCg=
Subject key identifier: 29:F7:D3:EE:A7:88:DC:38:52:6D:22:B5:85:F5:93:3E:FB:05:8D:54
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019EB6C5B9A07ACF6DFCD2A89595F85C954A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 10C8
Signing time: Thu 11 Jun 2026 13:01:11 +0000
Manifest this update: Thu 11 Jun 2026 13:01:11 +0000
Manifest next update: Fri 12 Jun 2026 13:01:11 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: wyURTtBVuNJ0ehZJRELspe9WFC4cm69PFzpjwnyadrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:b9:a0:7a:cf:6d:fc:d2:a8:95:95:f8:5c:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jun 11 13:01:11 2026 GMT
Not After : Jun 12 13:01:11 2026 GMT
Subject: CN=29f7d3eea788dc38526d22b585f5933efb058d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:0a:16:a2:ff:0d:a4:66:70:f4:08:c0:62:
48:98:9d:04:56:55:ac:08:21:36:7e:18:55:a8:54:
ca:ab:ac:35:5a:20:12:e2:c2:1e:cd:8a:ca:20:b1:
bf:48:d4:72:80:99:b8:07:22:7b:73:7a:35:13:5c:
a7:4e:07:a9:65:52:90:90:3d:31:66:23:21:6a:56:
d4:5b:b4:a6:ce:ab:23:b0:9e:47:23:ee:50:f4:8c:
77:21:39:80:ff:83:89:82:27:47:8e:65:95:85:7a:
93:50:e4:2b:63:5a:fb:19:20:66:59:42:ab:ba:ad:
e7:bf:7a:0d:69:8d:cb:f6:ca:a5:03:d9:fb:a4:0f:
98:85:7b:57:a4:01:33:1f:b1:6a:a3:c9:66:47:c3:
f2:34:ff:3b:a4:1b:ff:ed:d1:35:9a:2b:d0:dd:cc:
ac:c8:85:f9:5c:58:f4:c4:a1:76:a3:76:0a:4b:1d:
63:12:b1:08:d4:ca:46:8c:11:7c:be:9c:ea:e7:28:
e0:8a:e6:9a:19:42:39:40:05:21:7f:a9:b7:b4:cf:
9d:7e:f2:a5:b4:b1:ab:f1:4e:9b:d2:d6:6a:bb:c5:
f3:37:b5:48:89:f4:85:a9:87:02:1e:4b:d4:92:d1:
e6:21:73:39:34:05:79:6c:3b:4b:ee:52:fd:44:a0:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:D3:EE:A7:88:DC:38:52:6D:22:B5:85:F5:93:3E:FB:05:8D:54
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:9c:5e:4a:46:cd:2e:88:a6:28:74:e6:68:ba:c6:93:c7:05:
35:0c:25:7c:4e:57:e9:2e:bf:01:14:0f:b3:39:67:d3:41:bf:
a7:a7:eb:07:83:09:75:21:11:14:33:21:06:f5:34:7d:ca:e2:
8f:92:71:e6:f5:7f:7a:9d:59:23:6d:7c:2f:e5:49:d7:a2:cb:
a2:c6:d5:04:3a:61:af:38:0f:b4:40:eb:7b:79:cf:33:71:d6:
6c:3e:46:28:69:62:8d:20:37:e6:8f:bd:66:0a:ca:cc:c9:e4:
51:f5:43:64:ee:15:e9:64:56:bd:5c:c1:f9:8e:e2:c8:a4:36:
8f:3c:36:dc:05:cb:c0:af:e1:b8:96:5e:61:d0:a5:a4:ef:cd:
93:4d:37:aa:b5:0d:ee:66:2c:ef:d7:16:64:b2:34:76:b7:3f:
f2:26:6b:4f:5a:b5:62:9a:bb:9e:e4:10:25:02:48:d7:49:ab:
bb:4e:1f:09:c8:12:fd:b4:0e:04:80:f3:5a:f1:73:76:fe:c9:
ff:52:a9:25:b7:03:1f:15:74:88:7a:43:ca:c2:41:fb:91:04:
92:d2:98:87:f0:ba:3c:08:64:b5:d0:55:63:d0:ec:c4:d7:3e:
29:6b:62:2a:99:6d:59:fb:1a:d3:5d:35:92:40:70:51:03:70:
75:69:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:05 2026 by rpki-client