Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: G03WsmI3PToYb6AMy2vMhSpAMmQZiCP4tE65Xwk0sbE=
Subject key identifier: 96:0E:D4:B4:87:68:4D:73:D0:66:D4:D1:E7:0D:67:61:95:6C:4A:2D
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019F0F2E05E8739FEDE181CB84ACB544053E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1639
Signing time: Sun 28 Jun 2026 17:01:42 +0000
Manifest this update: Sun 28 Jun 2026 17:01:42 +0000
Manifest next update: Mon 29 Jun 2026 17:01:42 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: VWZEYi4dXMU5d+jFVkikgIWmqhyltUTJqsxRhsDvOco=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:2e:05:e8:73:9f:ed:e1:81:cb:84:ac:b5:44:05:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jun 28 17:01:42 2026 GMT
Not After : Jun 29 17:01:42 2026 GMT
Subject: CN=960ed4b487684d73d066d4d1e70d6761956c4a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:db:6d:d2:61:a0:2a:b1:90:15:d5:d2:ca:
c0:1d:bb:35:97:63:8c:01:31:ff:50:2a:fd:b3:d8:
96:e0:ff:77:fd:f3:f7:f7:9c:9c:d4:f5:21:35:ab:
ae:cb:dd:50:46:d4:e1:1e:0d:68:07:3a:37:85:32:
20:19:b3:d8:c6:9a:10:d8:ad:a1:56:6b:bd:4f:ee:
d2:74:8c:ca:43:6c:8f:35:02:35:36:5a:69:24:1d:
2e:d5:4e:7f:0c:de:ba:09:b3:a8:04:9c:07:7d:82:
76:e8:cd:ab:32:d7:75:30:3b:9a:9e:12:ff:be:37:
48:43:b1:a7:af:f3:54:f2:3c:b7:ed:c3:ae:bb:0d:
a7:70:4d:ff:f1:6f:f5:ea:d8:b3:c5:ce:3b:02:a5:
ac:91:8d:e1:9c:80:62:f5:9d:d5:4e:35:37:25:33:
2f:7d:6f:15:53:1c:91:74:32:ad:e0:06:87:c7:7f:
09:c0:ef:5d:cd:fe:e8:18:14:25:d8:b0:1f:02:b7:
a6:29:e9:b4:06:35:94:18:23:11:d3:ca:96:56:b1:
b8:6f:e5:cf:32:61:c0:2e:b0:e4:fe:05:6d:73:f4:
e6:2d:5e:a1:6c:92:8d:db:a8:6d:6f:82:e6:b3:58:
ff:6c:c8:a9:90:4a:ae:9b:f8:c8:ff:4b:4e:3f:20:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:D4:B4:87:68:4D:73:D0:66:D4:D1:E7:0D:67:61:95:6C:4A:2D
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:19:c5:8e:e4:1c:4b:f7:a4:67:c3:63:ef:1f:89:f7:07:45:
64:03:4d:10:29:dd:dc:af:38:02:ba:db:39:5d:2e:cb:cb:68:
26:55:37:8d:e5:e1:16:b3:3c:54:bf:c6:7e:41:29:b3:7e:27:
b5:ab:d4:d4:d9:e0:85:bc:b7:33:db:9f:52:d5:ba:45:b5:25:
5c:d2:97:26:d8:1c:b2:76:f4:96:e1:31:57:10:42:39:be:38:
1a:fd:c8:fe:90:cd:e6:60:c6:91:5e:fd:7b:7d:03:6e:84:c6:
50:dd:ca:d3:80:84:6e:25:74:79:f0:8e:c0:57:8b:02:8f:31:
e6:6a:cf:d7:36:12:65:2c:6d:3b:f9:8a:2c:d0:1e:ed:c2:9d:
36:5c:ed:e3:4d:a9:36:86:40:99:bd:20:89:75:f7:8e:82:fb:
38:b8:39:7b:73:9c:f3:3d:38:cb:bb:9a:f8:e1:d7:30:08:0b:
1c:7f:c9:23:de:7f:5c:a7:45:34:86:19:bb:a9:16:9b:05:bc:
b4:e3:5b:f8:ff:10:76:1a:c2:4e:08:83:fd:af:59:1c:8c:a3:
33:d5:2d:cb:66:15:a6:0a:57:6e:16:be:49:22:5e:88:58:36:
4b:a1:8b:02:74:35:34:c9:65:bb:5f:bd:4d:5c:46:cd:d4:b6:
61:38:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:01:09 2026 by rpki-client