Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: +CbwqWShcGdChQx1GituvRBknlRBSCq1k82+aajAgXM=
Subject key identifier: 35:FD:3E:69:09:56:EA:1E:56:5F:68:B9:F5:41:D6:1E:C6:C4:85:D9
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 019F178BBE9478D53920EDA215EFF8FD167C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 1924
Signing time: Tue 30 Jun 2026 08:01:01 +0000
Manifest this update: Tue 30 Jun 2026 08:01:01 +0000
Manifest next update: Wed 01 Jul 2026 08:01:01 +0000
Files and hashes: 1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: j/+Ae07MmTAEYZyuyNx32i3ovL2HLFpTRTvgUK/biUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:be:94:78:d5:39:20:ed:a2:15:ef:f8:fd:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Jun 30 08:01:01 2026 GMT
Not After : Jul 1 08:01:01 2026 GMT
Subject: CN=35fd3e690956ea1e565f68b9f541d61ec6c485d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:57:eb:e5:f9:f3:d1:8c:8d:38:e7:78:31:
ec:7b:fe:7f:18:ea:0d:f7:10:f8:78:e7:17:a7:fd:
41:1f:5f:0f:2c:b0:bd:0b:d4:73:bf:6b:b6:c2:b6:
01:2f:45:89:df:19:42:01:de:41:89:19:78:35:89:
bc:3a:db:0d:06:51:5e:2d:ab:e2:c3:e9:74:01:40:
8b:c2:81:37:c3:50:21:be:d9:62:b2:18:64:4a:c9:
a2:2e:df:cd:f4:b5:bf:95:21:fe:75:b5:4c:2a:12:
78:b2:c2:17:24:d5:f9:cb:d8:e8:99:44:e0:6b:4f:
43:e3:45:91:07:dc:be:03:e4:d7:85:8e:37:ef:ab:
a9:4d:f4:ac:c4:10:fe:f1:d9:e9:23:1a:51:b4:3c:
91:0f:1a:79:01:d9:f6:75:76:b2:aa:fe:52:cb:9a:
7e:f6:72:46:7a:d0:0d:43:20:c5:7c:0f:c5:36:e7:
3c:98:66:d2:7e:73:3b:0e:69:07:08:3c:e0:ed:c7:
48:03:42:f2:4d:19:02:ca:a4:6a:77:0f:64:b5:35:
0b:b1:7b:8d:87:c2:87:e4:19:78:4d:d1:a0:78:12:
d3:8c:b7:d2:b5:1e:39:27:a4:05:0f:f4:fd:92:4b:
98:91:dc:d4:62:39:6d:0f:13:b8:c7:8f:91:86:bf:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:3E:69:09:56:EA:1E:56:5F:68:B9:F5:41:D6:1E:C6:C4:85:D9
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:36:33:90:50:f8:a7:2f:75:a8:5b:0f:1e:8d:c1:10:ee:
12:15:4d:c7:fb:77:5c:bb:3b:b6:b6:f8:58:2f:75:b7:2e:56:
fd:84:6b:8d:4b:a3:7f:01:45:4d:f0:f3:99:4e:41:2e:0a:de:
d2:ec:c9:98:b8:71:15:b9:8f:3f:d0:e9:16:b1:67:a8:4e:20:
d8:ca:78:57:32:09:45:26:7f:67:f4:a0:82:ea:c6:a6:9b:53:
30:db:88:71:bb:7e:3f:a8:65:43:3e:69:2a:d3:58:c6:58:a8:
20:e6:72:68:d0:1b:38:50:c2:72:c2:82:64:89:86:02:12:39:
9b:39:c9:3e:75:c0:55:99:9e:c0:82:4d:f0:ee:58:e4:86:8d:
4d:52:5b:d3:52:a5:32:a4:7b:24:f2:b3:a9:61:07:c0:13:d4:
db:69:5d:2f:89:ee:92:8c:19:8e:3e:80:65:e8:96:a4:bb:c5:
b8:03:69:f3:da:8c:b5:16:80:d2:75:92:77:03:ac:e2:de:b8:
43:73:eb:de:9f:a6:e6:2b:af:a1:39:91:61:d2:a1:46:f6:23:
3b:37:84:21:57:ca:d0:42:70:46:9d:2f:d0:82:79:ba:36:51:
84:82:2f:07:7a:68:73:32:9b:a6:90:a6:9f:a2:12:b9:14:e2:
4f:f5:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 12:14:12 2026 by rpki-client