Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: v2iJJnyd6spdSf8tdhLwD6DKnLPLNm0y1eCNOPggp3k=
Subject key identifier: 19:31:70:C7:A3:A5:13:F4:94:66:DE:5B:97:1C:97:0C:31:0F:01:06
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 019EB8B401850AE806541BE83623CED75CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1967
Signing time: Thu 11 Jun 2026 22:01:04 +0000
Manifest this update: Thu 11 Jun 2026 22:01:04 +0000
Manifest next update: Fri 12 Jun 2026 22:01:04 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: 45B64ZWW6vgrxLISiyz2gpHruAg3xwlDejc3uZBpPfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:01:85:0a:e8:06:54:1b:e8:36:23:ce:d7:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jun 11 22:01:04 2026 GMT
Not After : Jun 12 22:01:04 2026 GMT
Subject: CN=193170c7a3a513f49466de5b971c970c310f0106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:1e:d9:cd:06:96:58:e4:f2:dc:e7:99:fa:
f2:ec:a3:de:47:aa:94:04:62:b2:a7:48:a3:2d:91:
cc:a5:66:29:b5:03:45:4e:72:f9:a0:20:39:6d:8d:
0d:67:85:c3:96:29:aa:d4:65:31:4b:b2:db:74:8d:
98:a1:c4:d0:fb:e2:5d:57:14:5a:1e:07:df:62:9e:
33:9f:71:ee:35:77:41:82:3c:21:18:26:85:e7:fa:
c9:d2:28:0c:b0:6b:3d:ef:5b:fb:6c:ca:c7:1d:2a:
44:9a:31:60:01:49:a6:bd:65:3e:32:e1:8b:ab:12:
3a:52:e8:7f:d1:dd:16:a7:66:95:58:b0:df:dd:4f:
26:3c:9f:96:89:c0:8c:ad:98:75:47:2f:67:98:79:
5f:61:55:df:fe:ac:55:5c:0a:a0:86:ce:7d:85:f0:
87:31:be:6f:5c:87:72:85:7c:ac:f6:29:3b:80:04:
e1:bb:d5:ed:4b:dc:77:91:41:24:ff:14:bc:43:dc:
3d:89:66:7e:56:91:71:32:ac:3e:6f:85:4b:47:e3:
22:41:df:8f:b9:4c:93:97:2f:af:14:db:03:d7:62:
93:8a:86:0f:11:fc:f3:94:a2:13:52:17:2c:9e:76:
4e:47:73:17:3a:39:ad:c7:57:a4:02:54:a6:aa:34:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:70:C7:A3:A5:13:F4:94:66:DE:5B:97:1C:97:0C:31:0F:01:06
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d7:c1:ee:55:88:ea:e4:9f:2e:07:8c:a2:93:93:79:c4:94:
bf:0a:c7:35:69:68:cd:61:33:56:6b:37:0d:44:93:11:8f:f6:
e1:94:37:e9:b6:a5:bb:4c:f8:7a:9a:fb:14:a8:16:7e:fd:71:
93:5e:ac:7d:6d:3e:2b:4c:a7:5c:aa:5a:fe:c9:42:2a:60:1c:
5f:ce:5b:4e:f6:75:89:7f:73:e1:36:fe:54:9b:97:c9:e5:04:
16:13:f0:2e:82:cd:73:4d:c0:3f:c1:ff:6e:33:c3:c7:43:17:
7f:6c:45:79:4a:14:33:a5:df:5c:01:ff:d9:f0:6e:0e:25:4e:
70:fc:3f:c1:ec:49:e7:eb:a4:81:cc:4d:a6:d4:a3:d8:fe:b6:
a2:c7:3e:2e:b0:43:30:f8:f2:0d:05:65:9d:14:26:ce:72:26:
58:3a:41:24:9e:8c:ba:d5:69:90:46:ba:03:1b:83:4d:e9:7f:
5e:2b:2b:3d:ff:ec:32:80:cf:3c:e6:60:d3:43:a8:ec:61:07:
68:da:52:17:a3:b5:c4:5f:f5:71:1a:4a:b5:11:bd:6e:b4:93:
0d:ee:1b:81:f6:fd:ce:ab:39:4b:5f:21:8e:fe:9b:f8:99:a4:
6c:31:cf:a6:2f:cf:ef:3a:5d:b3:f5:7f:43:0a:d6:eb:ac:ac:
5d:dc:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:58 2026 by rpki-client