Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: M1+lsB6rBoSqKAzRVjOKLgY89+m777beWWs6XTyk0kY=
Subject key identifier: 70:CD:A1:12:B9:2B:19:80:F0:CE:BE:DB:6A:D3:B7:48:4F:B8:4B:D0
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019EB57C1351F0E16B0831501E92F6203BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0DBF
Signing time: Thu 11 Jun 2026 07:01:07 +0000
Manifest this update: Thu 11 Jun 2026 07:01:07 +0000
Manifest next update: Fri 12 Jun 2026 07:01:07 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: WOOQsJVBGZVfzmVi92ASdCnMaSpL5hEStIS8m6XqzLo=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:7c:13:51:f0:e1:6b:08:31:50:1e:92:f6:20:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jun 11 07:01:07 2026 GMT
Not After : Jun 12 07:01:07 2026 GMT
Subject: CN=70cda112b92b1980f0cebedb6ad3b7484fb84bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:47:73:b4:52:6c:cc:13:52:bf:f6:64:ca:
44:ac:da:e9:9d:de:4c:db:1a:68:e4:5e:7b:a1:3f:
fe:96:a4:ca:6e:de:29:c5:ae:90:4d:b4:61:d7:0d:
97:95:a4:9d:32:d0:37:95:e7:98:43:ab:a4:ee:7a:
57:ac:0a:e8:18:a8:f2:dd:cd:53:e9:e8:f5:13:66:
a1:88:8a:62:51:d2:98:e4:c8:f6:44:39:e7:7f:d1:
f7:35:48:60:5e:1b:9e:11:79:0c:d2:be:66:0d:d5:
ec:ba:9e:88:2b:18:5c:da:9b:00:4d:c1:7b:7b:78:
6b:71:bd:51:e0:36:6d:5e:8c:91:2b:61:5c:0b:bc:
cc:1d:54:04:b9:14:cc:02:38:69:09:79:fc:e0:57:
fb:28:12:91:90:88:50:94:5e:ec:21:b5:dc:73:00:
87:1c:86:1f:bb:2b:6d:81:77:40:3d:88:93:a0:25:
c2:0c:7e:d8:41:00:1a:31:5a:cd:0a:3d:4e:03:99:
95:14:0a:02:f3:bd:f6:9c:6f:6b:58:98:94:b1:e4:
2c:5a:77:bf:d6:65:f7:69:cb:c5:71:ce:50:47:cc:
3b:95:2b:c1:96:a7:c6:d8:fc:82:76:a4:c6:bf:e1:
86:fd:32:57:96:8f:6c:ad:0b:55:4a:74:77:c7:cd:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:A1:12:B9:2B:19:80:F0:CE:BE:DB:6A:D3:B7:48:4F:B8:4B:D0
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:aa:e4:b4:d3:4c:d7:c0:d1:57:02:d5:94:ab:e5:d6:8a:4e:
66:75:15:81:75:d2:c5:2d:02:40:d9:b3:97:ae:6e:90:1d:dd:
a7:54:af:07:ed:3b:3d:c3:ff:01:ba:ed:c8:9d:61:b3:f8:c2:
b1:91:a4:ae:a7:bf:80:25:a7:ce:db:1b:de:ee:1d:aa:78:bd:
ef:fa:09:ea:1e:39:63:1d:77:06:16:fa:d3:4d:e9:5a:c9:76:
71:83:c5:19:6e:d9:cf:61:4c:2a:d1:66:b1:2b:96:9e:d7:74:
c5:91:bc:0a:7f:59:49:a7:3d:0a:e1:57:c7:c9:f3:18:be:ea:
2a:d0:b5:1f:78:06:66:58:30:5b:28:89:2d:b8:4b:4d:41:d2:
a5:fd:10:19:2a:e2:bf:70:e1:73:30:a1:db:43:17:68:3c:70:
24:20:de:a4:e8:a5:3c:65:ab:66:68:d1:cd:42:d7:58:e6:b8:
a5:33:71:77:07:bd:b8:5e:a7:85:f0:12:f5:dd:0e:34:14:85:
b2:5a:fb:62:5e:d5:a3:55:02:c1:a3:f0:72:98:eb:0c:6b:6a:
7f:1c:3f:a8:1e:7e:32:79:75:32:23:b8:80:aa:6a:27:04:38:
4a:dc:eb:15:ae:12:8a:6f:a4:80:90:ac:1d:dc:e1:e9:27:28:
cb:24:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:08:14 2026 by rpki-client