Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: c2RgF2KPivKxoduUXusHPsLifw+XH6V58fzYDKnlH0M=
Subject key identifier: 2C:2E:EA:60:83:BD:67:C3:39:AE:A5:FC:33:8B:DF:47:C7:69:54:35
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019EB6FC13B2963766D8A98FCEDD8A8362A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0B9E
Signing time: Thu 11 Jun 2026 14:00:33 +0000
Manifest this update: Thu 11 Jun 2026 14:00:33 +0000
Manifest next update: Fri 12 Jun 2026 14:00:33 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: H6EUoWm9EBXHNQ9fbLFefaceUJgjTDEkf5deb5wj8G0=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:13:b2:96:37:66:d8:a9:8f:ce:dd:8a:83:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jun 11 14:00:33 2026 GMT
Not After : Jun 12 14:00:33 2026 GMT
Subject: CN=2c2eea6083bd67c339aea5fc338bdf47c7695435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:44:22:9c:d8:d2:a2:ec:a3:5a:58:72:8c:
dc:a5:15:2c:f6:d2:bb:7a:2a:87:bd:26:3e:0b:0a:
62:29:d1:3d:ac:08:c3:c8:28:68:51:52:c1:20:e9:
b2:10:b5:d6:55:64:8c:2c:dd:ae:8d:bd:26:9a:fa:
c5:49:3d:23:c1:8f:e7:16:34:1a:d5:e7:06:9e:bb:
02:46:d2:6a:ac:b4:be:da:c7:57:fd:a4:99:eb:69:
b6:d6:ca:12:5c:1b:a0:42:bd:de:85:94:e9:cf:f2:
28:b3:01:a2:17:91:e6:e3:85:71:f1:f9:9f:60:e4:
fa:f1:d6:cc:70:e9:84:26:06:44:c8:65:72:1f:21:
8e:c6:03:ce:d9:56:f9:fb:f4:c1:8c:c5:7a:e7:35:
6d:fd:9d:56:d8:f5:4a:cd:19:3a:f7:1d:26:44:53:
ed:35:74:07:a8:41:fc:e9:9b:89:49:1e:8f:78:f0:
5e:10:11:53:9d:31:77:88:72:fb:44:7d:a6:ce:8c:
c2:9c:dd:1d:5e:cb:9d:0e:d2:51:ba:52:8c:3e:6a:
37:56:d6:6b:ae:0e:99:0b:f1:7b:de:6a:2f:4f:1c:
2e:c9:49:71:1a:cd:d9:25:90:fe:ed:38:be:e6:4d:
3d:4e:c8:ab:e2:64:71:2a:92:0c:18:fe:97:3b:98:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:EA:60:83:BD:67:C3:39:AE:A5:FC:33:8B:DF:47:C7:69:54:35
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:8e:0d:76:ee:d9:52:cd:28:97:df:74:68:d8:cc:c4:28:
95:e2:d6:9a:6e:22:05:c5:de:54:35:c1:3f:0b:c1:81:4b:ef:
08:ce:0a:e5:5e:2d:d7:b0:93:ae:aa:87:e4:31:57:b0:3e:95:
cc:5b:c0:cd:19:fd:59:71:1d:32:bc:9b:5b:86:5c:7c:b2:af:
50:a4:a4:02:c8:ff:20:75:c3:3e:80:c0:08:5a:6a:56:0b:50:
e9:08:ac:78:76:eb:ba:64:50:fe:c8:e4:a3:99:e7:1c:ba:bd:
54:b6:85:32:8e:1c:2c:e2:db:95:ed:30:16:cf:ac:2d:a9:25:
6e:74:64:16:a6:96:d5:ce:21:47:bd:13:18:6e:82:a1:91:90:
9d:31:a6:f8:d4:2a:93:0e:bd:9a:79:83:52:18:a8:30:2f:97:
ce:e0:b4:f3:72:e2:9b:59:36:4e:e9:ec:25:eb:8d:70:67:18:
8e:2d:43:99:59:2b:23:05:7b:97:b4:19:b0:42:13:be:42:b2:
15:30:31:67:50:02:d6:b2:2c:48:cf:e8:8f:e0:79:a2:7d:89:
08:67:9a:05:5b:63:bf:21:42:2e:2a:48:d5:96:5c:a8:ce:81:
d3:3f:92:a4:8b:a8:15:89:00:1f:e7:bf:04:6c:6c:8d:97:d0:
e3:df:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:24 2026 by rpki-client