Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: GjysFi0dfgmOWKDYhnzqjFBM8DuGNp42Gg3YSEYH4ek=
Subject key identifier: 38:82:79:08:E5:2F:35:74:BB:8E:80:91:F5:16:0E:B0:08:69:86:72
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019EE58DDC111B302C339D095C1981C08683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 1974
Signing time: Sat 20 Jun 2026 15:02:19 +0000
Manifest this update: Sat 20 Jun 2026 15:02:19 +0000
Manifest next update: Sun 21 Jun 2026 15:02:19 +0000
Files and hashes: 1: S011qoZgUr3TdXed9KAGGlppxpI.roa (hash: 4dkyy7vE9sYAnGtx1tZpzgZa+OvFsz74uGbm0kgHTFI=)
2: dfm4GIQ72pXLlr3TFUrPaWiwPc0.roa (hash: pMqyxJ39MoBZ9kjQh9a6LTsQmzb9E72azQNpRmWgJCk=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: 0WXbbkfgaEBWVfW8v9Png3HkJlU7WeMTccFlFhQ8Xac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 15:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:8d:dc:11:1b:30:2c:33:9d:09:5c:19:81:c0:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Jun 20 15:02:19 2026 GMT
Not After : Jun 21 15:02:19 2026 GMT
Subject: CN=38827908e52f3574bb8e8091f5160eb008698672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:1e:c6:07:63:30:c2:53:b3:bf:e2:a8:70:
bb:a8:9a:55:31:db:da:85:af:04:ca:bb:c8:46:e8:
7e:eb:93:32:2b:59:8c:4d:fa:fb:25:70:74:6f:a4:
6e:13:7f:2d:01:bc:85:54:37:93:38:0f:16:d0:68:
79:23:66:7f:f5:d1:c0:db:52:27:11:0f:86:64:f1:
c2:93:d2:e9:d2:06:c3:85:4b:94:8d:fb:cb:1f:6c:
7b:b7:a6:a2:01:3a:4f:fe:b7:9d:1b:cc:2a:cf:0c:
56:57:af:84:c2:ab:57:45:1f:11:7d:98:81:fb:8f:
6b:53:93:e5:25:5e:a4:28:ce:cb:35:d9:0c:a8:7a:
b9:b1:28:63:2f:58:59:5e:20:c6:9c:91:1a:30:c6:
39:84:1b:6b:f2:5e:37:6c:d6:71:7b:c5:71:d7:5b:
4d:ca:a5:15:9f:85:59:06:fd:35:fd:44:e4:b6:8e:
ea:66:62:12:33:6d:03:9a:f0:f0:27:2d:67:6b:28:
68:31:e7:ec:d2:9b:a8:19:1e:5f:dc:a4:a1:e5:1c:
a5:59:e5:ed:25:c1:ab:da:6e:d1:03:39:ba:50:76:
10:e6:87:22:c5:f6:46:21:7d:13:b1:bd:a9:59:d6:
21:e8:b3:83:35:e4:20:62:33:59:8e:09:f6:eb:7a:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:79:08:E5:2F:35:74:BB:8E:80:91:F5:16:0E:B0:08:69:86:72
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:55:8e:7c:8f:13:27:aa:d5:99:15:48:1c:19:98:4a:e0:e4:
a6:94:36:20:c0:5b:5c:23:5e:cc:17:08:82:d6:73:95:2c:a2:
f4:1f:04:5c:fa:d4:31:f4:e0:ca:55:12:29:d5:a4:e6:dc:69:
83:53:4d:f3:50:0e:88:1f:e0:a5:57:69:96:03:b0:f6:cf:72:
35:c1:c1:af:2a:08:02:87:7d:55:e4:e8:e1:54:30:28:14:5d:
06:e0:a9:9d:b5:4e:2d:48:8d:b6:e0:23:d4:28:ee:ee:d8:e6:
90:e4:f5:df:75:e0:9f:ce:98:8a:c5:e4:46:81:fc:27:b9:89:
79:a5:de:88:28:df:7f:e4:3f:df:66:d6:bd:68:e8:70:db:06:
c8:d2:7e:61:38:7c:be:05:26:33:e8:91:ec:cd:2f:89:f2:ff:
c5:18:0b:70:26:c6:a4:0b:e8:cb:b4:2e:d9:e5:48:3d:90:2b:
87:d4:8c:c7:48:56:2a:d0:37:12:75:71:55:db:57:72:5d:2f:
b1:78:d9:e6:e7:18:f0:6d:f2:8b:45:b8:27:9c:6c:ac:ae:7a:
79:41:9c:6f:ea:da:f2:4c:9f:ad:22:6c:35:75:d9:1a:5f:4f:
90:18:d0:f1:3c:36:07:32:43:22:b9:dd:f7:8b:7e:34:90:e0:
bc:1b:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 22:46:14 2026 by rpki-client