
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: DU4UnMrryJbov6EYxehCDKHlyhdDx3u2Mykte+346UE=
Subject key identifier: 6C:D9:B6:CC:A4:7E:18:E1:69:D1:A8:73:5B:11:9D:3C:F5:CE:E2:17
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019F19B1BF2F1054469FB14797793B7558A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 13B0
Signing time: Tue 30 Jun 2026 18:01:46 +0000
Manifest this update: Tue 30 Jun 2026 18:01:46 +0000
Manifest next update: Wed 01 Jul 2026 18:01:46 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: 4HwYeHGi3eKUAcSjSxolH4oV+7JeBAKBmoz+RiIwH6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:bf:2f:10:54:46:9f:b1:47:97:79:3b:75:58:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jun 30 18:01:46 2026 GMT
Not After : Jul 1 18:01:46 2026 GMT
Subject: CN=6cd9b6cca47e18e169d1a8735b119d3cf5cee217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:af:3d:c3:74:94:da:57:ee:d0:5a:e1:34:
f6:42:63:a3:66:43:ba:98:bc:11:86:5f:c9:80:18:
ee:db:16:9c:39:b4:24:2c:51:9e:21:2f:22:eb:68:
07:3a:64:41:a8:e5:a6:f9:05:be:36:97:61:be:72:
86:ac:9d:da:d9:cd:ef:f5:16:af:ed:1d:45:20:a2:
38:c1:7f:f0:04:6f:d7:50:ae:bf:58:86:c0:89:22:
7c:33:17:92:99:c6:7f:f8:3c:42:63:48:19:e1:b9:
c0:5c:30:06:7e:e4:0f:2b:12:5c:84:d4:e1:78:98:
cc:f9:ce:35:37:e9:0c:1d:17:2b:bf:8f:fd:f9:75:
a6:be:a3:4d:78:a4:72:84:20:4d:0b:40:19:e0:80:
43:0b:48:7b:54:a9:79:1f:74:5d:bd:e1:ab:68:f6:
fb:d9:1c:75:95:0f:88:1e:8e:a2:6e:22:45:b5:61:
00:57:db:65:fd:50:f8:c1:f4:5c:13:93:26:d5:54:
85:e7:c9:60:53:ac:ce:26:7f:da:98:82:f0:d5:d0:
97:d9:78:d3:2c:63:cf:4d:c2:f7:d7:22:6b:cd:e5:
f2:da:98:b1:74:16:ce:be:3a:47:9d:dc:f3:57:b1:
40:ab:37:0b:3e:05:4b:8d:80:b3:6c:54:a0:5a:4b:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:B6:CC:A4:7E:18:E1:69:D1:A8:73:5B:11:9D:3C:F5:CE:E2:17
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:26:83:a3:22:f7:c9:46:de:bb:f6:8d:67:87:e0:d3:48:
97:47:e9:f5:75:82:e2:32:10:4b:9d:07:82:12:9f:d3:85:3a:
80:bc:64:0b:63:57:04:23:48:9c:8c:c7:d3:ac:f1:a0:47:bb:
c3:3f:e5:1e:66:77:f9:4b:f7:42:b5:bf:be:16:ce:28:40:b0:
73:87:06:99:e7:a6:79:12:bb:67:e5:2b:75:a9:64:84:1e:bf:
c6:09:e5:d2:4d:db:ab:50:75:11:df:5b:df:f2:55:6d:be:ff:
ba:15:cd:fc:5a:e7:da:5b:cc:e3:c0:0d:f7:6a:97:4c:ab:2c:
4c:ab:6b:d2:65:d6:2a:57:5c:f8:0c:21:ba:e4:f6:b3:e2:3b:
43:44:92:ae:64:af:b7:ec:cb:18:51:23:4a:18:97:9b:f7:69:
bd:02:90:06:3a:11:71:2a:23:7f:97:88:f8:b7:9c:6d:60:52:
b8:a8:9b:16:45:8d:04:07:e0:70:76:b3:b8:1a:3e:55:fe:ce:
30:a1:13:50:2d:60:94:e5:34:5b:45:f5:32:3b:de:cb:06:1c:
a9:11:68:6c:45:2c:b9:e6:20:fd:6a:62:f0:59:4d:3f:b3:10:
2a:f5:4c:7c:1f:eb:20:8a:93:84:83:fa:c4:2f:8c:39:49:85:
40:e9:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:15:56 2026 by rpki-client