Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: hBb9dYpMWmsc7HaeOjTRXbq0z97pgWjs2fCGL8cmqRU=
Subject key identifier: CD:F1:9E:6B:FC:8C:86:84:FD:C4:ED:C4:E2:9A:E6:8C:59:7E:2F:A2
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019EBA3436F5CF376E30BAE94E138D89E39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0F06
Signing time: Fri 12 Jun 2026 05:00:44 +0000
Manifest this update: Fri 12 Jun 2026 05:00:44 +0000
Manifest next update: Sat 13 Jun 2026 05:00:44 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: TgdC7SOTr8j6dRB2CRAxI6CBlis2sKJD3eZL1swZNwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:36:f5:cf:37:6e:30:ba:e9:4e:13:8d:89:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jun 12 05:00:44 2026 GMT
Not After : Jun 13 05:00:44 2026 GMT
Subject: CN=cdf19e6bfc8c8684fdc4edc4e29ae68c597e2fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:84:06:8a:59:ae:ea:2b:6a:47:e0:80:50:
98:db:70:af:79:2c:61:f1:d9:97:a8:a3:6d:eb:d6:
ba:a4:a5:a6:8d:96:03:1b:9f:c1:cd:23:ec:d4:0d:
d4:30:11:44:6f:dc:ec:bb:c0:2f:97:62:45:c5:0e:
93:03:1b:de:0c:99:bf:24:91:f6:8c:47:36:ec:bd:
27:85:da:71:d9:c0:22:fd:1d:21:c2:07:30:ca:d2:
28:cb:24:7a:d5:dc:b6:67:83:c1:b5:49:70:fe:6a:
c3:be:85:8f:54:0a:3d:44:1f:c7:9e:8c:52:04:f7:
eb:7e:73:2d:55:77:7b:af:d2:73:b8:a6:86:5d:8f:
48:9a:87:70:a2:09:b1:d5:5a:cf:fe:0b:73:8f:e9:
6c:2d:c6:a3:a3:a1:8e:60:ff:28:33:a3:09:1a:27:
0b:8c:b0:b6:61:10:be:2b:4f:b6:10:4a:aa:38:99:
80:f2:da:75:f1:ef:20:10:d9:19:d2:c3:04:20:df:
c5:17:f0:ae:6c:0a:cd:05:9d:c5:70:96:56:13:7a:
86:f3:8b:35:84:c8:50:5f:98:72:52:2e:e0:e3:f6:
0d:97:eb:2a:de:21:10:91:8b:5f:a6:a4:bb:d1:ba:
3e:5a:c3:2a:29:4b:49:04:4d:ad:85:47:c5:a4:17:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:9E:6B:FC:8C:86:84:FD:C4:ED:C4:E2:9A:E6:8C:59:7E:2F:A2
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:b3:89:af:14:3a:2d:92:9e:b2:5b:bb:66:42:3b:00:95:
37:41:de:c9:e3:76:e3:69:b9:d3:7c:50:8e:1f:ad:cc:4e:03:
c6:6e:19:ab:de:4c:67:d7:dc:8f:d8:97:1a:36:49:2a:ee:5d:
7b:37:b6:a0:0a:16:5c:04:22:6e:0c:2a:47:8d:f0:b8:77:01:
98:62:a7:4f:6b:28:35:d4:16:49:68:05:3c:41:b7:6b:31:c7:
67:89:2a:cb:c3:79:e8:8b:93:aa:a5:fe:56:4c:6e:5e:c5:88:
1f:d8:48:37:c8:98:0d:fa:63:3f:fb:d4:71:1a:11:50:23:e4:
0c:cd:36:ad:37:fb:9d:3d:78:b2:76:fb:bb:7f:b6:6e:61:52:
59:87:94:0c:5a:c6:92:5b:8d:d8:f7:72:b2:bf:0e:9b:9e:46:
1c:59:83:80:6d:c0:ac:d4:f0:6a:fe:36:93:81:4c:74:cb:82:
e1:44:5a:f0:0c:1b:0e:46:ab:60:36:83:88:9b:fd:6b:33:bc:
0b:8e:47:c1:dc:95:cd:af:47:78:9b:b6:15:9b:98:0c:29:a9:
66:46:06:da:90:8b:cf:74:15:42:39:01:8a:54:5f:10:91:a0:
13:57:0f:73:76:58:f2:54:cb:37:13:27:95:91:0b:c8:48:2d:
7d:0d:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:06:54 2026 by rpki-client