Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: odzB1EFtJJQ+KR9McjL1Jwd2JE7d3DNgkIMxNHoTg34=
Subject key identifier: 44:64:6A:2C:A8:EB:05:F2:44:6B:42:4B:6D:FC:13:A9:FF:E5:B8:72
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019EE5FB1B860F3829678B1D85F8BE150BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 12CA
Signing time: Sat 20 Jun 2026 17:01:39 +0000
Manifest this update: Sat 20 Jun 2026 17:01:39 +0000
Manifest next update: Sun 21 Jun 2026 17:01:39 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: nc6BiKI2hoJhPS2lOovBXdJLskq7WxvgDdx8Q1INs3s=)
3: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (hash: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:fb:1b:86:0f:38:29:67:8b:1d:85:f8:be:15:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jun 20 17:01:39 2026 GMT
Not After : Jun 21 17:01:39 2026 GMT
Subject: CN=44646a2ca8eb05f2446b424b6dfc13a9ffe5b872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:e6:ed:1e:fb:fb:cd:a7:fc:7f:96:42:d4:
58:ba:13:cb:97:07:24:8a:38:8f:a1:92:a5:04:3e:
c7:7c:59:83:e9:76:6c:7a:ca:2e:cf:3f:84:4f:e7:
07:9e:65:1e:b7:3b:90:85:4d:0d:20:84:29:a8:d9:
d7:45:84:ef:57:35:90:c6:fa:23:49:64:8d:3a:ff:
b1:a0:af:c7:69:65:41:f2:81:92:2e:0a:e1:91:0c:
17:fe:8f:6e:87:88:e9:22:6b:54:f1:86:60:d9:5a:
fe:e8:38:8e:16:a9:9e:a5:a6:ee:fe:85:c8:f5:15:
ee:8a:2e:a1:f9:01:97:e4:a1:68:af:d2:89:43:ab:
b9:5b:e0:58:58:d7:79:06:f8:fb:a1:4f:f2:be:de:
fd:1a:75:58:28:1e:2e:44:cf:49:a3:3b:e2:87:ed:
39:d0:c0:df:d1:4d:6f:37:6a:94:f7:13:af:eb:e0:
f0:61:17:e6:e4:d6:cc:1e:9c:dc:b8:71:8f:66:14:
e8:1a:61:6c:ed:00:1b:8b:66:53:69:b1:5c:b0:91:
b5:e1:b7:fe:45:d0:f6:24:cc:0f:e4:52:bf:ed:c2:
53:15:e4:11:78:e8:2a:56:0a:b0:86:f1:3c:30:c1:
d9:58:6f:46:7d:b2:6f:4e:ea:dc:66:a5:cf:3f:54:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:6A:2C:A8:EB:05:F2:44:6B:42:4B:6D:FC:13:A9:FF:E5:B8:72
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:76:96:6f:f6:ec:b1:ea:72:23:a9:0d:d4:b6:5e:36:6b:
92:60:af:24:85:f8:ae:4e:dc:49:24:e3:03:98:f7:85:6f:26:
e7:c5:58:f3:c3:c4:6f:18:25:10:2e:21:cb:93:97:7a:c7:b9:
5b:df:9e:e7:f7:bc:f2:f1:a8:9c:a3:2b:35:ea:59:79:08:fe:
79:0e:45:5c:6a:7f:a9:52:0f:d5:5e:aa:4a:88:0c:30:02:2f:
96:fc:ec:1c:11:3c:7e:9d:89:3a:d2:24:6a:31:21:7f:2b:26:
0d:28:0d:5d:ec:22:12:3a:b0:2d:1e:97:19:e5:2b:bf:d4:c8:
a0:69:f7:7c:0a:6b:18:8b:70:fe:2b:cb:b6:2e:9a:4a:2a:f1:
5b:3e:fc:3c:16:4e:50:6e:a5:5a:76:6d:dd:e2:af:0e:b1:27:
44:5a:4a:c3:d7:ae:94:5b:cc:be:42:e8:96:ff:2c:4a:69:c1:
8d:4a:28:24:ee:67:d9:ed:3a:3e:73:c7:6d:03:cb:ac:4a:9a:
be:bc:6b:87:56:2b:4e:2d:1a:1e:06:4f:7a:eb:be:ab:69:fa:
fe:e7:5e:93:ef:c5:41:ac:23:44:b3:5c:25:0d:db:29:8e:10:
a9:af:5e:89:40:fd:ff:e4:ab:3b:ca:45:43:19:ff:b7:ed:05:
48:5a:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:14:17 2026 by rpki-client