Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 8m5YIID/Ce5/DPnWdX3K1dLKsHQKWbo+BWNdGWkPUdA=
Subject key identifier: 1A:F8:04:AD:54:EA:42:AC:A2:34:B3:4A:B6:A0:CC:36:C9:BE:36:E6
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019DEC6D7F2E625D85E5BEB7815C3002BAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 17C6
Signing time: Sun 03 May 2026 06:01:32 +0000
Manifest this update: Sun 03 May 2026 06:01:32 +0000
Manifest next update: Mon 04 May 2026 06:01:32 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 8sqtWR0ril58XO00yiMmkP7cpE/W2ecJXfdJneSQnC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:6d:7f:2e:62:5d:85:e5:be:b7:81:5c:30:02:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: May 3 06:01:32 2026 GMT
Not After : May 4 06:01:32 2026 GMT
Subject: CN=1af804ad54ea42aca234b34ab6a0cc36c9be36e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:34:c4:1e:96:c1:30:1f:54:13:b7:70:56:
a8:cc:65:83:c1:4d:c8:79:ee:bc:68:59:19:17:01:
ac:fc:56:e6:98:c9:3a:89:86:27:63:b5:e1:64:b4:
bb:86:d2:5e:16:8c:75:b7:a8:19:b3:39:0a:59:20:
4c:b5:66:49:af:5f:cd:34:fb:0f:76:da:60:6a:71:
be:05:aa:73:c9:84:d8:55:78:c8:dc:78:15:f4:c3:
69:29:6a:cd:dd:c7:75:96:42:20:8e:ac:9b:f9:92:
2e:93:fc:93:d6:61:58:de:78:be:a8:65:c2:8b:83:
93:8f:72:c9:24:d6:5c:3b:cb:73:c7:c5:f1:3c:ce:
0d:45:c4:97:37:a1:4c:fe:da:5f:fe:cd:5e:6c:60:
3f:32:fd:87:a3:d2:39:07:46:1d:68:ed:96:1e:0e:
35:79:13:03:8f:46:07:df:16:42:59:62:d6:5e:13:
97:a0:05:18:fd:98:26:f5:e5:4c:15:b3:4f:22:23:
54:f2:39:8f:69:bb:a1:f9:ea:b9:ae:e3:25:41:b6:
ad:48:9b:62:c9:82:c8:bb:9f:1d:da:6a:a2:da:c5:
5b:c8:aa:23:13:79:b1:d7:11:ac:54:40:30:7e:94:
ad:de:95:74:14:9a:4a:22:6b:f0:ec:e1:db:cd:07:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F8:04:AD:54:EA:42:AC:A2:34:B3:4A:B6:A0:CC:36:C9:BE:36:E6
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:f4:64:91:c8:4c:db:51:c5:fe:2f:f4:dd:68:f6:12:06:
f0:93:60:0d:46:d0:14:81:cb:b0:11:39:35:17:0b:3c:22:cf:
d4:f3:47:90:ce:02:4b:87:72:82:17:5b:30:79:c2:01:a6:78:
2f:78:14:f2:8a:06:0e:68:4b:30:3a:17:54:4f:9f:6f:5e:c3:
7b:a5:65:30:d4:08:be:ec:31:e4:ec:7f:82:87:de:ed:52:e5:
4f:04:69:7d:12:72:2f:5a:0b:f4:92:4e:17:67:e3:fd:77:a6:
16:20:40:a5:9d:00:b2:19:25:c2:ff:8f:d2:75:72:c3:52:f9:
a9:56:00:f2:d3:d9:fa:fd:1a:0e:8c:b6:eb:41:70:6b:cd:1c:
51:57:95:eb:65:3f:77:99:f5:f8:70:2b:ad:08:cd:77:94:6a:
d7:78:57:00:3c:32:d0:f0:65:42:b6:e5:e9:01:0f:b4:ff:bb:
84:f5:56:6f:88:a0:14:61:35:79:f4:78:25:88:8d:60:e3:82:
46:56:42:67:57:46:af:93:36:af:b6:50:ae:d6:d1:71:17:29:
1c:a4:42:49:6b:5f:7c:18:e8:72:37:d2:07:24:d2:e8:44:b0:
72:53:17:a5:b7:7d:50:84:d9:61:fa:75:ed:ec:f4:82:9d:74:
6d:0e:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:34:39 2026 by rpki-client