Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: UarxKV82vz+YCbYC0NJVcS/XzKn6OXwwWsiYvJBWnDw=
Subject key identifier: C8:79:96:94:98:A8:37:95:C3:2D:B9:1B:89:ED:37:36:CF:CD:42:C7
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019EB6C550CB25A985DCEC47CBBE0B8F7D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1968
Signing time: Thu 11 Jun 2026 13:00:44 +0000
Manifest this update: Thu 11 Jun 2026 13:00:44 +0000
Manifest next update: Fri 12 Jun 2026 13:00:44 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: r+MhxYCzOFBs0RU2W/YFfsldZ1gtZHQZqg38ov0EdLw=)
2: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (hash: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:50:cb:25:a9:85:dc:ec:47:cb:be:0b:8f:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jun 11 13:00:44 2026 GMT
Not After : Jun 12 13:00:44 2026 GMT
Subject: CN=c879969498a83795c32db91b89ed3736cfcd42c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:12:c5:ce:2a:3a:b6:d4:10:a4:0d:33:38:
e4:dc:84:db:4e:b2:b8:19:76:02:c0:c3:9b:b2:b8:
69:fc:ef:af:31:08:16:36:7c:f6:bc:ad:af:01:bd:
d7:13:fb:e2:66:ac:0d:c9:d0:5f:53:e0:ce:85:33:
db:9f:f0:7b:bb:49:ce:a9:76:17:d2:28:36:36:ae:
4b:4c:cb:bd:53:59:7f:25:aa:5f:6b:07:5b:34:4a:
df:04:03:48:e3:3e:13:b6:62:4f:14:33:99:a7:bd:
c2:4f:0b:18:7d:94:04:74:e0:20:ed:51:4c:87:85:
76:ed:54:26:9b:57:a5:7a:3c:21:df:60:9c:c2:ae:
b6:ae:2d:d9:08:53:ca:b3:e6:d4:a9:22:84:3c:55:
6d:aa:65:75:de:4c:72:67:f8:e2:ba:88:79:19:86:
b6:0a:30:85:dc:4b:83:eb:0c:70:22:07:60:84:1a:
d7:5c:00:96:50:76:e6:23:e7:1c:a3:29:76:7c:aa:
56:7d:26:9a:42:52:99:a8:25:f0:13:f8:d8:e6:64:
9e:9f:6f:7a:69:4e:6c:e6:6f:44:f6:48:dd:ed:0a:
72:04:f5:24:73:89:77:bc:9b:b3:1e:d7:b5:98:73:
da:44:8b:28:92:9f:7a:02:42:ac:f3:02:ae:4d:d1:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:96:94:98:A8:37:95:C3:2D:B9:1B:89:ED:37:36:CF:CD:42:C7
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:22:96:ec:9c:5b:74:24:cd:3a:0b:8b:0d:50:cb:8c:ce:
62:46:66:07:26:4d:3e:f4:9b:92:7c:00:03:ec:1e:be:32:de:
c8:8f:79:de:f9:4d:c6:a2:47:f6:aa:3e:2e:11:aa:c8:c6:61:
22:ab:9f:1c:ae:16:c6:cc:b9:25:fc:8e:53:de:d8:7b:6f:5b:
aa:9a:b2:81:d5:19:eb:10:2d:81:ef:b1:c6:78:09:c8:ef:5c:
ad:60:c2:82:86:a8:30:cf:53:cd:ed:7d:fb:11:b5:20:c7:e1:
d2:88:86:c0:4e:06:ff:29:81:14:ed:28:b4:d1:d1:c1:d0:13:
07:95:cb:f8:a5:5d:74:76:e0:72:fc:70:ca:9d:5f:1b:78:ef:
28:16:14:5e:46:8a:fc:38:66:f3:8d:29:c4:cb:5e:a7:f1:c7:
f6:1a:08:bd:e8:5d:eb:8b:b7:ea:ba:fc:de:59:e8:dc:3e:66:
e3:03:07:25:da:02:e2:77:69:b7:ec:b1:51:8f:f7:ae:98:10:
ff:73:34:0e:4f:80:df:c2:e5:b8:8f:0c:1f:8a:76:96:7b:06:
b8:16:63:c4:d8:bf:ff:fa:a9:03:ee:dc:f6:94:12:2f:83:f0:
79:60:75:44:64:57:ff:c4:4c:05:aa:d6:50:c2:72:33:eb:15:
4b:49:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:18:39 2026 by rpki-client