Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: rUoXBxEzEjKcCDfykvF8G13GVkuEw1EWP+vEgHKcpOM=
Subject key identifier: 25:A3:3A:F5:5D:47:63:B6:E0:4B:F4:8B:11:C7:99:53:13:B1:ED:4D
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019F122E6BD51603BCAF678BF6B6A86A7749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 07:00:59 +0000
Manifest this update: Mon 29 Jun 2026 07:00:59 +0000
Manifest next update: Tue 30 Jun 2026 07:00:59 +0000
Files and hashes: 1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: gES4FpOFxDLhdwORStqB7uL1Q6r7kyB2hZPfB8MUa+Y=)
5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:6b:d5:16:03:bc:af:67:8b:f6:b6:a8:6a:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jun 29 07:00:59 2026 GMT
Not After : Jun 30 07:00:59 2026 GMT
Subject: CN=25a33af55d4763b6e04bf48b11c7995313b1ed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:49:97:c9:64:62:32:6f:a1:af:a6:a3:c4:
65:e0:e4:2f:77:4d:a5:2e:5e:35:dc:3e:22:79:1f:
e4:b0:5c:64:b2:d4:6c:ae:7c:fe:5e:2f:74:56:64:
dc:bb:92:dd:13:0a:3a:86:bc:c7:dc:19:c9:3f:80:
f2:ea:14:a8:ee:cc:34:c1:3f:42:92:81:45:37:22:
ad:19:de:ed:46:b7:80:22:08:4f:e4:32:8a:35:65:
9c:62:34:de:28:6f:81:5f:e6:fa:5e:58:88:ad:85:
b4:62:2e:65:69:e6:ee:7a:85:83:6e:79:33:9a:b3:
e3:99:ef:d5:de:9d:ed:ed:1f:53:8d:cd:79:89:07:
50:c7:e0:99:3c:f7:83:8d:2a:f7:cb:ad:56:c3:05:
3e:ce:6f:a4:0a:d2:b8:f5:4e:c0:9c:52:a3:7c:b8:
54:fe:d0:d9:34:58:ee:bf:9b:38:f6:d6:c3:63:fe:
f4:b3:28:12:74:db:32:7c:4f:3c:06:2e:42:76:38:
5f:5e:98:75:f1:63:72:29:8e:c4:41:6c:bf:0e:85:
02:98:b3:3a:ee:ef:5f:06:28:9b:88:7e:e3:46:e4:
08:c9:70:78:ef:b4:d6:e1:fb:17:31:53:da:a8:f7:
1d:07:22:2f:3a:53:42:87:5b:09:1b:be:b6:66:af:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:3A:F5:5D:47:63:B6:E0:4B:F4:8B:11:C7:99:53:13:B1:ED:4D
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:bb:69:ae:49:58:1c:94:6f:95:66:69:47:ae:2f:e7:de:
10:e6:2e:9c:2f:2f:81:3c:bf:84:14:14:43:f4:8c:03:04:fa:
a8:49:21:9b:d3:4c:5f:39:e9:32:89:28:8c:9c:6b:46:84:57:
2b:95:9c:3f:d7:a8:07:ee:30:02:86:74:ea:ae:9f:98:f7:a4:
42:01:46:8a:05:1b:c7:ef:e8:45:ae:e9:4b:d7:b3:f6:c4:b3:
11:1d:45:40:50:ac:de:bb:cd:fd:df:c3:61:9c:98:49:f8:02:
e9:0e:d4:a9:a6:5f:7a:ee:52:e1:e0:56:65:83:40:d8:3b:10:
4b:88:fd:08:74:15:e2:0f:73:71:44:b8:a0:7f:fc:cc:3a:1c:
6f:67:9e:1a:08:eb:5e:c7:45:2f:88:d6:ce:9d:6b:2e:99:eb:
e3:9d:0e:b9:1c:b4:96:59:47:bb:e3:04:52:ab:e6:79:a1:23:
a3:c1:84:8b:63:70:a9:6a:4e:f2:dc:b0:7d:d6:f0:ed:de:f2:
18:32:e9:c9:10:c5:d3:5f:74:cc:be:de:0c:21:61:56:07:5d:
23:02:6e:17:7f:ec:9f:1d:d3:da:f8:b8:1a:2c:b1:f6:61:f6:
9b:3a:21:05:08:db:df:9e:6c:d5:a4:96:de:b3:2d:cd:e3:3d:
f8:e9:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:45:40 2026 by rpki-client