Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: +nmRdruXsR4jX/z3WNPXYoLKRNT0vxZLD3aIE2ziHgc=
Subject key identifier: 71:F8:3A:EF:7D:56:64:44:59:A8:CF:FB:47:E6:B6:04:B9:80:6F:75
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019F11F89CCCABEFEB428584D1F7CECE4337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 84
Signing time: Mon 29 Jun 2026 06:02:13 +0000
Manifest this update: Mon 29 Jun 2026 06:02:13 +0000
Manifest next update: Tue 30 Jun 2026 06:02:13 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: 1EB+MMKMMnIgMwyrx+co5VQl7K9Xk77DoGAY0yxJI7A=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:9c:cc:ab:ef:eb:42:85:84:d1:f7:ce:ce:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Jun 29 06:02:13 2026 GMT
Not After : Jun 30 06:02:13 2026 GMT
Subject: CN=71f83aef7d56644459a8cffb47e6b604b9806f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:be:0a:a4:39:eb:c1:9a:0c:8d:99:fc:35:
98:75:fd:5e:fc:ba:91:d3:85:70:50:cc:92:c2:26:
37:d4:5d:59:be:55:2c:c3:5b:ff:38:0b:00:c9:6b:
86:fe:65:f3:f4:37:bc:d8:0f:6a:68:b5:17:5b:64:
d6:fc:4a:b1:ab:91:a2:fc:cf:5f:54:a2:f5:30:f2:
43:1b:65:48:d8:67:b6:c5:db:54:36:f4:5e:8e:fa:
ad:ca:1d:90:0c:e4:87:77:f0:77:d8:96:82:48:33:
35:7c:c0:b6:18:a4:d0:21:ae:1a:a7:95:2e:c2:71:
a4:0a:3d:8e:b0:f2:1e:0b:fa:84:c9:78:b2:28:cd:
3d:53:0d:63:f3:a1:d5:16:7d:bb:15:19:74:48:c3:
d5:29:41:18:09:7e:fe:a0:ca:9b:52:b6:dc:4e:9b:
4d:75:f5:91:ad:6d:bb:66:4e:3c:cc:ee:e1:27:7f:
2d:ec:99:b0:72:f1:23:f2:51:c6:28:61:b9:96:01:
9f:a6:58:91:23:80:27:bd:f1:32:b9:cc:8f:74:89:
dc:d9:1e:a8:ee:20:19:68:24:f1:b4:35:b0:44:13:
2b:60:33:b9:6b:f9:7d:ba:0a:82:51:c1:fe:90:68:
5a:c7:00:d6:3a:a3:0b:fc:df:53:fd:ee:a9:91:f1:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:3A:EF:7D:56:64:44:59:A8:CF:FB:47:E6:B6:04:B9:80:6F:75
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ef:f1:f8:19:34:4c:fa:24:0f:9c:eb:cc:a8:61:77:bd:64:
fa:bc:a5:8b:af:7f:9e:42:95:0d:bb:78:e1:d8:6d:f4:bb:d8:
19:60:a2:16:3d:c2:ee:3f:ce:bc:9a:62:69:96:35:ec:02:4b:
83:93:9b:81:c3:f4:68:29:16:bc:98:dd:e4:f2:a7:1f:c7:71:
87:5f:4a:b8:48:74:17:b1:aa:25:38:28:87:89:fb:f8:a0:f8:
34:fc:a1:85:49:c9:ca:55:11:28:55:33:23:ef:a5:0a:97:9a:
26:de:1c:83:2b:74:ea:53:f8:b4:2e:c3:c1:c6:48:d7:b7:d2:
b8:5e:d0:33:4d:f1:9b:44:13:eb:70:99:f2:97:37:86:1a:a6:
2f:e5:85:a2:76:1a:89:a9:83:14:2b:74:10:99:70:31:19:b0:
55:c8:5a:e4:72:2a:49:b6:12:db:ba:5b:b9:ef:7f:b0:f2:f8:
c8:a7:01:7a:c7:1d:a3:ec:9e:2c:52:72:6d:be:6a:9a:60:31:
f2:36:aa:75:57:13:4a:b0:84:28:44:a7:90:2a:88:80:fd:93:
eb:03:02:39:00:ea:b6:31:e6:30:8c:ed:5d:cd:4a:42:ad:2d:
89:09:b7:45:7b:e9:44:98:bc:f9:4e:62:7c:28:a6:0c:10:e1:
90:d0:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:01 2026 by rpki-client