Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: GwbXal788+9SEbEgNZ425AcMeck2OUIQHrl/7K/PQv8=
Subject key identifier: A0:0E:64:3B:39:46:C2:ED:19:3B:2C:51:64:4B:94:4D:29:31:FE:07
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019F0A074C0A4C5AB64129A882628E9FEF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1981
Signing time: Sat 27 Jun 2026 17:01:18 +0000
Manifest this update: Sat 27 Jun 2026 17:01:18 +0000
Manifest next update: Sun 28 Jun 2026 17:01:18 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: S12A3mSZkgRNHTnusOC+9aWq3XeHfu/EEPG23wbEYFc=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:07:4c:0a:4c:5a:b6:41:29:a8:82:62:8e:9f:ef:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jun 27 17:01:18 2026 GMT
Not After : Jun 28 17:01:18 2026 GMT
Subject: CN=a00e643b3946c2ed193b2c51644b944d2931fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:f5:15:5e:41:5f:87:c3:dc:db:58:a2:87:
f2:c9:93:63:4c:ca:02:aa:09:2c:03:5d:c4:6f:b9:
f6:cd:79:8a:88:a7:89:76:6e:7b:ef:e4:54:96:21:
94:f3:38:6e:26:f2:85:d8:3d:a3:c4:c5:99:40:f6:
9d:a2:98:6e:31:c5:90:e7:b7:19:cc:53:d3:3d:18:
f0:c0:29:f8:e7:75:03:6f:ff:d0:29:08:eb:95:dc:
2f:13:ab:3c:99:5c:27:a8:7c:d8:25:23:4e:14:07:
46:8c:a5:9d:9f:d2:a0:fc:db:18:77:02:33:50:25:
69:f3:e3:da:32:01:b5:de:a8:62:83:2f:62:c7:4e:
1a:e6:b3:f3:e2:1e:15:15:e2:7d:63:a1:8e:e7:0f:
fe:0f:68:d2:b5:37:6c:95:80:7e:b5:9b:48:aa:da:
f7:48:3c:3b:23:44:1d:39:81:20:11:e5:ff:d9:78:
13:0c:8a:7e:d1:3a:9e:a2:6f:1f:13:4a:31:4d:c0:
5f:57:36:70:00:cd:54:d9:b5:85:1a:85:fe:be:80:
b1:dc:89:77:44:d3:54:0f:aa:ba:ef:99:a9:a1:25:
9a:87:50:cb:1c:96:e9:8d:a1:9e:4f:97:74:91:61:
a0:50:1a:77:53:50:2d:1a:85:b4:67:7a:33:af:bf:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:64:3B:39:46:C2:ED:19:3B:2C:51:64:4B:94:4D:29:31:FE:07
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a3:0d:d0:e3:35:23:ba:4d:85:7f:0c:c8:b0:b4:ee:ec:26:
00:22:da:a8:4b:24:58:bc:31:21:1d:40:4d:83:9d:c3:80:e0:
a7:4c:ae:24:38:f9:ff:7a:c4:7a:16:f5:8d:36:8e:a9:a5:2b:
c5:f0:5b:cf:a4:38:0b:fa:76:29:e8:ac:28:46:11:86:ca:10:
d4:15:89:bd:c4:ad:e3:57:99:e4:89:49:23:46:2c:30:6a:a6:
42:89:88:85:11:31:73:09:a3:1d:20:92:c0:8c:9d:b7:1c:7e:
e7:2d:54:73:35:a3:f3:34:63:bd:a3:d4:9d:c3:b8:70:13:dd:
f8:22:6a:9d:26:49:a3:5c:c3:c3:5f:c6:03:27:b3:f1:5b:1a:
83:72:ca:37:3a:10:8b:a6:ee:f5:a5:83:38:1a:cf:a8:fd:13:
8a:09:4c:bc:1b:7b:1f:f8:f8:d6:61:86:e0:bd:f0:57:40:64:
4a:57:0e:07:33:16:03:5f:9c:20:d1:17:4e:51:9b:71:99:0b:
e7:32:74:3e:bf:b4:f7:6b:75:37:60:25:d1:52:f4:27:3f:63:
39:8d:f9:ee:bc:b7:fa:ff:02:fb:c5:22:1e:04:05:90:db:a2:
65:f5:d4:f2:68:d9:b4:bb:05:9b:b6:9f:c9:b1:d3:b4:d9:c5:
47:4b:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:50:23 2026 by rpki-client