Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: 5+0Q0aUhHz4DeD6W8FmIRxMFXxugz26sm4M8FWARedU=
Subject key identifier: 49:A0:6B:FF:CF:14:01:A6:1C:01:79:DD:8E:32:91:F4:37:83:AF:1E
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019EB7A1A35F5DB453AEC58A0461453ECF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 17:01:24 +0000
Manifest this update: Thu 11 Jun 2026 17:01:24 +0000
Manifest next update: Fri 12 Jun 2026 17:01:24 +0000
Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: cVfYDL2efIz3ltfQRoLAQDWLlVTX0huFXBplBl+7RC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:a3:5f:5d:b4:53:ae:c5:8a:04:61:45:3e:cf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jun 11 17:01:24 2026 GMT
Not After : Jun 12 17:01:24 2026 GMT
Subject: CN=49a06bffcf1401a61c0179dd8e3291f43783af1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:44:94:f6:2f:8d:b4:61:9b:69:e7:77:4f:
50:08:19:91:b0:c6:f1:97:76:f0:97:31:2e:fb:65:
4d:b5:49:25:05:54:57:9b:fa:65:28:58:cd:90:9c:
50:cd:af:37:f8:40:1d:25:fd:91:20:92:fe:02:75:
60:f8:e5:dc:18:05:d4:3c:5d:f6:98:f9:6b:84:87:
cf:91:eb:89:b0:0e:41:35:00:f9:77:1d:33:f4:7f:
69:81:90:e6:a9:40:89:89:71:d4:be:8a:03:db:38:
6b:64:53:b1:2c:cc:f6:a1:a8:62:a3:82:83:03:bb:
64:a7:46:5e:f1:47:b4:ff:1f:68:a6:f7:12:5f:26:
e5:0b:fc:14:31:22:d5:cb:f9:27:1b:a8:31:55:3d:
e8:0c:33:e7:4f:44:77:46:ae:a9:71:f1:7e:81:8a:
fb:a0:97:24:71:d6:26:a6:12:c1:d7:2e:cf:ae:a5:
ab:53:59:69:f8:84:b1:ff:1f:1c:a9:b5:d6:d8:e3:
38:f4:d0:a4:61:c5:e7:61:bd:e4:8e:88:9d:89:d5:
d1:e1:4a:c8:80:b0:d0:7e:2d:56:cf:eb:cf:af:46:
4e:db:c9:92:8f:a2:96:2b:0f:65:ce:1e:bb:50:c8:
03:0e:5b:bd:f4:90:cd:11:3a:e0:12:6a:8a:18:5d:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:6B:FF:CF:14:01:A6:1C:01:79:DD:8E:32:91:F4:37:83:AF:1E
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8a:f6:76:9a:ee:42:1e:d0:22:5b:db:28:2f:d4:9b:31:10:
57:c5:1d:73:d9:38:1b:73:63:19:5b:84:3d:b1:8e:24:2a:2d:
d9:4e:e8:00:f9:1f:8d:0f:3a:a3:66:af:f7:b1:8b:d3:13:88:
03:4c:28:de:f6:69:80:29:34:95:90:dd:ac:e9:d0:16:3f:60:
09:08:53:65:c3:e2:f0:a0:ba:8f:bb:4d:4c:3b:e5:18:89:f0:
46:a1:4f:76:05:0b:3e:5c:d0:99:17:f2:7f:78:5d:a3:01:db:
9f:06:8b:e0:6f:e0:52:e8:16:db:3f:44:ce:bc:ae:12:ee:d3:
9d:38:36:f0:4d:d6:34:b7:d0:13:7d:56:6b:2d:56:e1:cb:4b:
ef:e3:f2:b7:96:f3:a9:47:55:fa:dd:f1:7a:6b:46:b3:1c:fc:
7d:05:f7:bd:90:54:2b:0e:98:de:58:b4:ca:b9:06:f9:cb:b6:
a5:53:3e:9a:39:ea:95:d1:c1:78:7f:8b:3b:56:5e:a5:c8:c1:
3a:1c:19:ec:9f:32:6a:68:5d:30:09:09:b3:5a:43:70:b9:fa:
67:0f:c7:e2:a1:17:ec:76:70:3f:0b:df:33:fb:4c:cf:e3:03:
7b:d1:58:90:43:28:4d:e0:9f:5e:21:99:ce:e2:53:13:89:0f:
70:79:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:11 2026 by rpki-client