Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier: la9HMC43ldMkWIkMTDHfl9rVmifgS4pd9y89RpM9Wo0=
Subject key identifier: 03:94:A8:C1:8F:DA:AA:E5:35:5E:DB:E6:06:11:96:01:3B:CF:E7:70
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 019EB7D7D018E74E8424B5B4C44194C2F32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 18:00:34 +0000
Manifest this update: Thu 11 Jun 2026 18:00:34 +0000
Manifest next update: Fri 12 Jun 2026 18:00:34 +0000
Files and hashes: 1: H-yVjLNehbZXND4w0DdBNVdmOOw.roa (hash: ICTmsvotmJK1iUZ3KxS7gNW3cwr6Lx/dr2uhczVnraM=)
2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: yS/QYslaPLVu5A+GGcjWLGWEL1tApXvUzPOaYnwTPwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:d0:18:e7:4e:84:24:b5:b4:c4:41:94:c2:f3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: Jun 11 18:00:34 2026 GMT
Not After : Jun 12 18:00:34 2026 GMT
Subject: CN=0394a8c18fdaaae5355edbe6061196013bcfe770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:dd:41:22:52:7a:b9:95:af:04:32:5f:b6:
46:ad:7f:fa:c9:f5:48:2a:7c:90:17:d8:2b:b0:47:
4a:17:b4:23:9e:10:af:14:8d:16:53:5f:79:98:45:
ed:33:f0:cc:c2:cf:86:0d:d2:e5:d5:1f:99:86:33:
12:ee:fc:42:55:d9:9d:1c:04:ef:10:d9:51:48:c1:
8d:c8:c4:b4:16:75:e6:61:89:d6:77:88:bd:31:c7:
6c:f8:8f:7a:25:3c:53:82:c3:51:4d:61:e3:35:26:
02:fd:10:91:8c:1a:8c:80:16:10:55:13:a1:28:91:
0f:5d:56:ea:1f:4e:08:c9:ee:90:99:32:b5:c3:c2:
52:b6:73:c4:e8:f6:64:f2:18:87:f2:9f:2c:82:c0:
94:e5:41:cc:d4:71:4c:47:99:6f:1e:80:9b:ee:d9:
95:7a:b5:00:a1:6b:4a:7d:78:05:d3:6e:b1:29:6a:
c5:b3:63:94:de:55:9a:d1:f8:3e:62:49:e7:4d:16:
67:a4:90:b0:f9:98:5a:49:01:b0:d7:40:5b:12:60:
24:6f:66:95:e7:13:10:e7:14:36:d9:62:69:e9:d1:
3c:14:9d:60:c6:0e:a7:cf:de:4d:44:7e:6c:78:96:
ce:c1:36:4c:01:53:0f:93:26:10:15:8a:e4:84:e3:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:A8:C1:8F:DA:AA:E5:35:5E:DB:E6:06:11:96:01:3B:CF:E7:70
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:5f:db:64:36:16:ff:fa:22:ab:ae:a2:0c:bc:6d:db:d3:
82:ee:9d:df:08:bb:ae:9b:a0:58:70:d3:ef:4c:98:00:fc:7d:
b9:bc:8a:64:75:52:e0:6d:bb:fc:08:28:a7:bb:36:cf:db:25:
34:68:9f:68:d7:11:a4:7a:60:8d:d5:2f:50:06:14:e2:9f:48:
77:05:5f:97:bd:79:3b:db:b5:aa:45:b9:10:f6:03:92:6f:83:
37:9d:55:bf:99:47:79:f0:51:4d:a6:b8:0b:c8:1a:63:d0:b1:
f3:d7:65:a1:3f:b0:16:43:ed:aa:5f:04:ef:45:b8:8b:70:a6:
ad:a3:f6:fc:a6:61:ac:d2:b0:0c:e7:b4:d9:af:bb:4b:9e:4d:
0c:6b:f5:73:83:c6:22:9d:bc:db:f4:cf:c1:b8:13:ef:87:d7:
e6:10:36:79:73:bd:b1:69:11:03:f4:9d:1c:a8:c5:05:9c:67:
62:d9:13:86:8c:49:3f:47:86:9f:94:4f:33:a2:32:b8:12:54:
bd:e5:ae:d0:1c:33:79:db:62:a7:8a:3e:50:52:0d:ee:e2:88:
2e:fe:56:c3:c1:03:5a:e6:71:24:9c:13:b9:83:3f:c7:4d:15:
01:6c:a0:03:0c:bc:6b:33:a8:ee:e1:89:ae:df:a0:62:41:56:
da:e0:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:57 2026 by rpki-client