Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: Ab8cFnUgiUWU4H+aTExQLDtVief39eBXGnyFtyBj6Nk=
Subject key identifier: FC:3F:84:78:F2:9E:2C:8F:DA:41:20:A9:05:A2:B7:CF:04:7D:5B:E0
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019F1AC541646DC5EF142C808417ABBBD125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 169A
Signing time: Tue 30 Jun 2026 23:02:42 +0000
Manifest this update: Tue 30 Jun 2026 23:02:42 +0000
Manifest next update: Wed 01 Jul 2026 23:02:42 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: HZMxHODu05wrDewIESTd3zDL5W2LvWpuTrWilOmJyig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c5:41:64:6d:c5:ef:14:2c:80:84:17:ab:bb:d1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jun 30 23:02:42 2026 GMT
Not After : Jul 1 23:02:42 2026 GMT
Subject: CN=fc3f8478f29e2c8fda4120a905a2b7cf047d5be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:5f:a1:28:52:f5:52:e9:d7:81:7f:95:4a:
91:44:e6:63:8e:77:5a:98:fe:a5:ff:9d:5d:64:73:
80:2f:e3:87:6d:f1:d8:23:88:97:07:72:dc:be:48:
72:c5:15:5a:b6:65:2f:d5:c8:80:b7:0c:05:0b:53:
1c:8f:e0:f0:c4:3d:6e:c4:ec:4b:c4:cb:7b:da:9d:
3f:57:77:ea:a7:00:2d:1f:91:5f:48:4d:12:28:58:
35:a6:16:64:12:bc:bd:d2:da:16:45:9c:a3:41:97:
a6:e0:14:9d:8c:04:5b:bd:99:15:53:95:0d:95:ae:
9c:57:b4:c0:bb:8b:21:b8:ee:a9:e7:ec:f7:a0:3f:
22:ba:f2:82:27:ea:cb:66:e6:21:8b:e6:c7:3b:1f:
e5:f6:e4:9b:04:7a:9d:88:a3:cb:09:af:5b:29:18:
c8:be:77:90:bf:2c:88:72:ec:1e:71:33:25:ef:36:
54:76:12:0b:07:ef:46:1d:b9:2a:b8:79:ac:de:38:
8d:27:4c:1c:9f:16:bf:20:72:c8:7e:6c:f0:45:24:
99:76:c4:41:21:54:2d:82:a6:3b:92:02:64:f5:57:
60:6f:4b:f1:9e:79:8b:57:1b:9a:d8:43:b1:8e:b7:
1d:9b:15:ca:1d:3f:c2:a8:52:f1:e2:bd:96:75:bc:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:84:78:F2:9E:2C:8F:DA:41:20:A9:05:A2:B7:CF:04:7D:5B:E0
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:79:89:43:e6:db:75:79:4d:9e:2c:d3:a3:4b:80:40:ce:3a:
c3:9d:5e:d9:e0:9c:8f:8b:bd:7b:df:b9:31:cd:47:d3:8b:44:
a9:70:92:da:47:5f:ed:a5:92:26:ee:ed:6b:4f:38:63:2d:b0:
48:5c:48:61:d7:40:3c:61:07:5e:fc:54:87:e3:b6:40:2d:a2:
9f:94:f9:db:7f:03:f7:bc:11:f0:b4:de:cb:56:74:f2:ce:c1:
3c:e4:fa:d8:da:2a:e6:49:24:05:ff:b8:f2:4b:d0:75:80:84:
20:a9:aa:75:1e:cf:52:c5:fc:8a:7e:e0:59:85:88:5c:a1:4e:
69:2e:be:cc:1e:39:fe:84:34:b0:cf:0b:3e:e0:10:19:21:4c:
2c:28:49:de:1b:3d:74:19:fc:5c:0d:1c:b9:57:56:e4:3c:74:
50:93:92:60:42:dc:6d:cd:30:37:fd:10:ec:31:eb:0e:e5:38:
75:bd:a1:49:02:de:d6:d1:49:e9:04:da:ce:de:db:91:3c:6e:
07:64:d9:82:54:94:8d:dc:d6:65:9a:d9:f2:9b:8c:9e:32:8a:
94:76:14:a5:a1:cf:cc:1f:9c:50:5a:8a:80:58:44:52:f0:02:
09:05:51:20:67:7c:91:b6:00:e0:2c:e8:7f:f9:69:e2:f3:7b:
6c:de:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:35:52 2026 by rpki-client