Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: 5nT6zhb4bJHRVOAaOvzsIbC5e3U3bNntSuM6X6gbFwE=
Subject key identifier: 2E:89:CE:48:CA:8F:25:B8:38:DC:8D:E9:2D:CC:E6:81:CF:7C:0E:BB
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019F13E5A9BFDAA6A767CB9B4C3570F4F0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 08F4
Signing time: Mon 29 Jun 2026 15:00:45 +0000
Manifest this update: Mon 29 Jun 2026 15:00:45 +0000
Manifest next update: Tue 30 Jun 2026 15:00:45 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: sRTkeNY+QG8Bpl406Fz/icTMK5FYfpXIGLzWZLjgqtw=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e5:a9:bf:da:a6:a7:67:cb:9b:4c:35:70:f4:f0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Jun 29 15:00:45 2026 GMT
Not After : Jun 30 15:00:45 2026 GMT
Subject: CN=2e89ce48ca8f25b838dc8de92dcce681cf7c0ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:60:77:9a:07:15:6f:39:ce:46:9b:f1:d0:
26:df:a9:2c:57:92:c3:0e:8b:91:3a:7e:08:de:f0:
0b:3f:cb:bc:71:17:34:18:8c:77:67:37:fc:fb:1c:
28:57:b1:79:65:6f:6b:59:6f:d4:ca:ae:d4:cf:2d:
bc:c6:81:3d:30:e8:02:e2:52:a0:55:60:be:45:35:
d4:dd:94:e8:c3:e5:fc:cd:27:4d:ce:65:77:0e:f3:
d0:91:75:02:29:32:51:ed:ab:67:9b:15:bb:fc:44:
ce:2d:00:7f:a3:7c:6d:28:35:39:f9:c1:83:29:50:
71:68:b6:3c:4d:ee:90:b1:96:60:ca:91:db:23:3c:
05:95:b4:67:f3:2c:9a:9f:54:fb:32:92:9c:bd:fa:
2d:8e:e8:4e:be:38:86:c7:b9:01:ca:a4:ab:10:6a:
0a:15:14:b0:79:1c:bc:5a:59:99:a1:81:35:b8:a5:
19:3c:e2:12:ca:0a:47:21:13:bc:28:d5:65:ac:e7:
f8:f8:24:ef:ba:bd:70:3e:87:ea:e4:db:a8:fb:2e:
19:c4:a4:5e:93:81:e3:3d:94:14:68:c5:79:7e:83:
a5:0d:d2:10:91:7b:de:0a:14:1c:e3:62:3f:0d:0e:
f4:36:b2:f4:46:19:9d:b6:c2:29:fc:36:54:e1:35:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:CE:48:CA:8F:25:B8:38:DC:8D:E9:2D:CC:E6:81:CF:7C:0E:BB
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:67:b2:a2:7e:ad:25:b2:5f:00:99:9e:02:be:20:9a:a9:
09:45:09:67:03:b1:56:01:41:a1:fc:25:23:32:0a:5c:90:58:
cd:f3:e5:c3:d4:83:a0:54:b5:13:35:c7:18:8e:7a:e7:ef:3a:
4d:e7:4c:88:14:24:96:3e:4d:46:99:ca:0c:30:5f:14:ab:27:
10:a8:17:6f:ff:4a:d0:b7:91:2f:eb:fd:20:f0:a8:6f:3b:16:
f4:e4:34:44:22:03:7a:cf:80:64:7d:34:d0:6e:18:77:14:52:
c8:86:c9:43:6e:62:20:90:b4:5d:f1:c4:bc:ea:02:1e:1c:95:
ba:16:64:7b:1a:43:c6:c2:68:60:8a:e8:03:b2:c4:f2:0d:70:
95:0f:97:3e:fb:b5:f2:05:45:ff:19:2e:8a:89:65:26:71:7f:
d4:9c:42:a9:ab:27:5e:ce:ae:fe:f7:9c:e7:79:0b:f3:4d:12:
96:74:d8:e2:8e:a5:ff:85:02:d8:ee:cb:be:4f:59:01:21:e5:
bc:e8:9e:02:1c:b2:35:1e:99:a2:01:4b:ea:a1:81:66:7a:cf:
75:e3:11:d8:93:66:a0:3d:2f:5e:12:fa:13:7b:76:c7:ea:af:
30:72:41:bf:27:47:e8:d8:0a:0a:4f:51:c5:b6:3c:78:74:0e:
ac:6d:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:48:56 2026 by rpki-client