Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: wdiXbNUaQ2/9l4rS144MTwMm6fJiTwjILXIOBaipZ/E=
Subject key identifier: D9:94:90:C5:6F:25:0A:D0:9A:17:2E:F4:21:A2:68:FE:16:B3:46:DE
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019E807C50906528F885744F199A5078DD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0E92
Signing time: Mon 01 Jun 2026 00:01:31 +0000
Manifest this update: Mon 01 Jun 2026 00:01:31 +0000
Manifest next update: Tue 02 Jun 2026 00:01:31 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: taVNZfav9aDPFlgZD+7Uyk/hXK4HFrP7gz0Do18HVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:80:7c:50:90:65:28:f8:85:74:4f:19:9a:50:78:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jun 1 00:01:31 2026 GMT
Not After : Jun 2 00:01:31 2026 GMT
Subject: CN=d99490c56f250ad09a172ef421a268fe16b346de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9a:b0:ce:05:7a:95:7d:9a:fb:fe:bc:8a:bc:
78:09:dc:53:04:43:06:8d:bb:2c:c8:90:cc:6f:a9:
30:2e:11:29:f4:15:b4:17:d2:d0:0c:b3:d3:63:e7:
cf:8f:be:e2:a5:bc:e8:ea:bc:03:66:d3:fe:32:23:
59:42:89:8f:19:ea:49:44:4a:bc:0a:4b:b7:1c:a2:
b7:36:c3:f0:87:ce:91:30:a2:9d:db:7c:c4:d9:ed:
ee:52:d0:3c:63:dd:e5:ef:b0:3b:20:ea:cf:78:b0:
b4:bd:84:e3:6b:a3:7c:2a:b5:65:6a:3d:9f:bb:69:
43:2d:aa:10:3f:19:5f:94:52:89:f9:63:e2:54:8b:
bd:07:bc:c0:f9:6a:be:4e:c9:f5:c9:26:0b:e7:27:
89:4c:07:e7:d7:e6:b1:c9:99:67:cf:4c:fd:94:1e:
62:5b:0e:6e:56:23:ce:9a:53:8e:ee:fd:e8:1f:7c:
c9:bf:7b:26:87:ad:4b:73:29:4c:92:70:17:ed:f4:
66:db:ce:03:7b:a8:ea:23:1d:a8:27:06:59:e2:7a:
85:00:49:d9:71:ef:cf:98:66:e7:6a:68:14:ac:77:
0f:cd:eb:07:23:37:d2:a8:b6:c3:07:88:b0:df:73:
6e:65:5e:c0:cb:06:75:ed:93:16:ab:55:15:27:f0:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:90:C5:6F:25:0A:D0:9A:17:2E:F4:21:A2:68:FE:16:B3:46:DE
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3d:a2:d4:59:65:f1:6e:8b:57:bd:d5:74:42:86:5d:bf:8a:
33:61:8b:6f:bd:42:3b:8d:84:3b:0a:f6:fb:a3:72:bc:40:94:
21:09:44:ad:98:e7:cb:bc:af:84:36:40:73:08:29:1d:8c:d0:
9e:04:9c:ab:b5:24:b4:9b:cb:63:89:8b:30:24:dd:d6:a9:69:
54:8e:64:0c:3c:13:df:73:e3:03:7c:4c:16:16:ff:40:a0:ea:
12:a4:8d:63:9a:68:4a:ca:82:72:35:3d:41:6a:59:95:cf:3e:
7d:b9:09:be:d2:3b:11:64:ae:ef:12:fa:11:2a:e5:22:85:f6:
13:75:70:9e:f9:c2:c4:d3:68:37:2b:37:78:cf:0f:9b:1e:9b:
18:e6:b4:13:98:0e:6f:da:5e:26:1f:44:2f:27:74:77:d4:fc:
20:76:4b:5c:69:ee:33:6b:36:75:9c:ce:59:f1:ab:07:fc:00:
33:9a:44:5a:de:9a:e7:2a:8b:ec:ee:2a:fa:ca:25:dc:97:9f:
a7:23:04:73:5d:1c:98:9e:c9:89:14:13:f0:09:cc:56:fd:ec:
f6:7a:54:48:01:19:3c:b7:7e:62:1a:95:10:2b:1d:21:e1:ff:
94:5c:33:a7:96:9f:66:ff:b6:15:c5:3e:2d:b1:44:e8:8c:ae:
e9:a3:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 06:23:11 2026 by rpki-client