Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: vPkHUu62p/IVPsuoPJ4ITkdI0WpzSBN74CCshYAiEFQ=
Subject key identifier: 61:72:26:E7:52:75:1B:A2:6A:E7:27:04:3F:05:B7:41:9B:E7:71:C9
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 019F36AAB7055A95437EFF1217A16DFF4607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:03:05 +0000
Manifest this update: Mon 06 Jul 2026 09:03:05 +0000
Manifest next update: Tue 07 Jul 2026 09:03:05 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: it/TXQKu9u3oqvKDHthnsMQfEL4pf9OGDhI1WPMxOVI=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:b7:05:5a:95:43:7e:ff:12:17:a1:6d:ff:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Jul 6 09:03:05 2026 GMT
Not After : Jul 7 09:03:05 2026 GMT
Subject: CN=617226e752751ba26ae727043f05b7419be771c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:e1:15:c9:d7:d8:6f:0a:86:77:5e:88:e7:
be:e5:87:4f:d4:4b:e5:2b:b0:ea:90:d7:15:5c:87:
be:b6:b8:85:c4:b3:d5:66:ff:e3:c8:76:b3:bc:9c:
3d:21:5d:39:8c:85:9f:1c:66:37:78:66:21:bd:1a:
41:07:67:72:05:be:af:de:d4:dc:07:47:2d:71:be:
8e:d3:0f:e8:db:e9:b1:f2:97:ac:02:ff:a5:a6:40:
3c:2c:39:d5:8f:27:a3:91:37:bb:6c:2a:f0:53:3f:
ef:f5:5f:e8:57:9f:dd:e1:8e:92:2a:33:54:c5:f5:
96:58:7e:9c:62:46:5c:bb:09:51:da:fe:c3:95:b0:
4f:3e:3e:95:2b:51:06:9f:e6:a8:0c:ff:25:05:d6:
88:ea:dd:2d:54:3e:11:52:e1:f8:42:fc:81:ae:57:
43:b0:84:b3:be:52:a4:fe:d0:20:f1:4b:02:5b:be:
17:60:a0:62:0f:9f:79:0e:65:81:b7:6d:bb:6b:f6:
f9:17:23:4f:95:b5:fe:84:dd:f2:ba:fb:82:c0:b1:
0c:59:5f:13:52:56:33:a0:f1:a4:93:7f:30:38:96:
36:5f:2e:d8:c3:2b:78:aa:2a:44:3a:f6:bc:02:b6:
f6:47:0e:1c:f0:b0:11:97:f4:c8:4e:a7:25:bf:81:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:26:E7:52:75:1B:A2:6A:E7:27:04:3F:05:B7:41:9B:E7:71:C9
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:7c:a5:fc:6c:f3:6f:ee:d0:f1:b6:d2:1e:25:58:f8:5d:
6f:ba:97:14:b3:ad:9a:f6:d6:19:f5:ea:83:57:5d:0b:6a:0d:
cd:63:ec:00:c6:5a:24:69:58:fd:bc:d1:01:41:9c:ce:2b:ef:
f9:d3:c2:d0:38:13:e6:d5:fa:c4:1c:b8:42:bb:a1:9a:ff:d8:
68:09:fd:78:9c:e8:e7:c9:c5:cd:36:df:31:1b:05:be:16:08:
a2:2c:69:f8:7b:85:e4:d0:53:e4:6d:0c:f6:87:6f:8d:e1:1f:
5f:38:49:62:dd:6a:70:75:54:d7:ac:6c:60:7b:06:63:d9:10:
d9:57:fc:16:a4:03:66:c8:1d:bb:b3:19:88:56:b7:9f:75:d8:
c4:1e:67:9f:ed:21:68:b8:06:f1:7d:e6:de:77:bc:a4:d2:47:
65:3c:25:67:eb:fd:e6:b3:ec:cf:b7:f9:d4:b3:25:ce:64:87:
8d:50:d3:c0:f4:04:53:01:03:8f:10:4d:1a:c5:3c:15:c3:7d:
36:ea:f5:cd:a1:ae:2e:e9:f1:05:c2:c0:df:30:db:31:a3:99:
15:c5:04:8f:6b:f5:15:76:82:cd:4b:3f:f6:81:4d:56:6e:6b:
bb:5a:0f:65:14:b2:d0:f2:50:07:65:e9:bc:e8:4e:24:7b:c5:
bd:35:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:38 2026 by rpki-client