Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: UuGty6cLOXVHTmMyEz7JECgJRbw4T+HLcflujSw1STE=
Subject key identifier: C4:C3:17:3E:94:CD:C6:1F:07:4F:29:52:D9:FB:07:06:3E:08:82:EA
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019EB87CA37C51881127337E43634999A27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 0327
Signing time: Thu 11 Jun 2026 21:00:36 +0000
Manifest this update: Thu 11 Jun 2026 21:00:36 +0000
Manifest next update: Fri 12 Jun 2026 21:00:36 +0000
Files and hashes: 1: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: muFekcfX0AQLi2Qahdy02Qw3QgndrgJQNqFTgJlPRrU=)
2: qMO76GFUq-hY40YmP_a09TsI33Y.roa (hash: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:a3:7c:51:88:11:27:33:7e:43:63:49:99:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Jun 11 21:00:36 2026 GMT
Not After : Jun 12 21:00:36 2026 GMT
Subject: CN=c4c3173e94cdc61f074f2952d9fb07063e0882ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:21:92:b7:e7:3e:b4:72:74:f9:55:4e:87:
19:4f:0f:d1:df:60:51:3a:34:ac:6f:a2:d0:c4:8e:
64:05:f9:94:ee:91:0d:46:b2:1b:05:8f:fb:bf:20:
49:5f:b0:b9:aa:b9:d9:16:ae:63:fd:4e:1f:ee:76:
93:79:17:73:c5:15:c4:c9:66:2c:d4:dd:86:e4:41:
94:f9:07:f8:d9:06:56:58:ff:5c:f5:63:0d:11:db:
f0:9e:2c:5d:77:c7:ae:74:6b:8e:f7:65:97:18:3c:
19:4d:99:23:0e:e5:6e:e3:ce:5d:a8:eb:4d:8b:2a:
13:8b:b1:26:3e:77:9b:48:0f:30:4b:a7:2f:04:4c:
23:9e:0d:6e:e4:f3:93:1c:58:4f:0c:eb:59:7b:bb:
ca:ec:34:2e:93:e1:94:8e:7f:10:9c:ca:6d:69:eb:
7a:9d:9e:f6:d2:fd:f2:33:a6:40:0b:de:3b:7b:b1:
e6:45:48:d1:56:de:71:04:37:4b:4c:88:fd:75:9e:
38:66:18:e4:56:7b:2a:e2:05:6f:f1:7c:c8:0e:24:
a1:9c:46:ba:4c:fa:b3:f8:09:b9:52:14:26:15:71:
5b:61:09:b7:3d:a4:e3:ef:2d:59:10:74:97:c5:57:
e3:53:0b:ad:28:81:bb:91:a3:38:74:fa:f9:6e:d7:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:17:3E:94:CD:C6:1F:07:4F:29:52:D9:FB:07:06:3E:08:82:EA
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:24:78:1d:ed:88:05:9a:4f:f3:0b:80:79:31:75:68:1d:
2a:49:bb:25:84:36:6c:ad:52:cf:e5:5f:fd:dd:c7:83:ee:20:
1e:d7:83:c3:01:cf:1d:ec:f4:52:ec:3e:ad:3c:a0:4c:10:1a:
e8:82:2a:a0:8f:ea:dc:86:47:68:77:ca:7a:17:e8:40:2d:3a:
15:0f:6b:b7:10:e8:5f:44:ed:5c:89:25:da:ec:e6:ba:8a:5b:
c6:da:fa:48:f7:75:4b:c1:87:d7:fd:19:e6:fc:f5:a0:d1:31:
f5:bb:69:c2:35:78:b7:a7:86:b2:7d:12:2c:3f:e5:ed:51:df:
c1:dd:e8:f9:21:46:b9:dc:b7:3f:5f:52:3f:f7:31:0e:e2:6c:
44:44:fa:01:0d:52:f4:67:13:18:07:57:c1:b9:25:13:9f:65:
d9:fa:51:34:db:d7:37:7a:9f:bc:9c:79:56:38:35:93:b2:c9:
9b:af:4a:32:63:d0:46:38:1e:df:b7:c9:97:fd:b8:b3:8b:9e:
b1:d7:4c:b2:13:99:0e:34:f1:15:a5:e0:90:56:1f:0f:f7:b0:
ff:33:47:24:61:ae:d0:26:59:66:3b:e2:57:fa:03:7f:cb:d7:
1f:1d:ef:c7:80:2f:ce:e5:bb:85:8d:e6:3f:7e:5a:05:eb:01:
4a:97:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:51 2026 by rpki-client