Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: pR74K1ou7WvjvAOFNXlnejA4457snBMJ3c0nR5nV4lA=
Subject key identifier: CE:77:BE:E9:35:BF:3D:2E:6A:3F:46:DD:18:62:67:8A:A4:02:08:3C
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 019EEA0E696CCBA31DC9178DDDF40C7A9488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 04BE
Signing time: Sun 21 Jun 2026 12:01:13 +0000
Manifest this update: Sun 21 Jun 2026 12:01:13 +0000
Manifest next update: Mon 22 Jun 2026 12:01:13 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: pYoHVOQX/LhArDqhYdT+163BuhsWBrPoqP9h2pMySjs=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:0e:69:6c:cb:a3:1d:c9:17:8d:dd:f4:0c:7a:94:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Jun 21 12:01:13 2026 GMT
Not After : Jun 22 12:01:13 2026 GMT
Subject: CN=ce77bee935bf3d2e6a3f46dd1862678aa402083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:46:06:62:54:eb:42:70:e7:f4:5c:a2:97:
b3:88:14:36:15:ca:74:2e:43:23:3a:15:a0:8e:81:
82:54:3d:d6:68:c7:f0:85:40:20:9c:9c:eb:cd:02:
17:1d:c8:38:44:8a:87:50:5c:75:d6:fe:e0:6a:f9:
71:0b:58:d6:87:24:ee:64:7c:ad:6c:8f:f6:b1:bd:
83:45:92:66:7a:2f:97:ec:87:d7:76:9b:f5:87:71:
25:82:ca:d1:ef:3e:01:32:74:0f:60:b1:55:5a:ca:
c6:b4:fb:7b:50:86:05:01:9d:a7:32:9c:0c:a0:49:
53:40:6e:b8:c5:74:8d:d5:f0:2b:a0:f0:c7:23:31:
31:60:db:ea:2b:9c:a3:1b:02:96:01:cb:85:11:7a:
a5:79:ab:36:27:3c:9b:eb:04:10:b2:95:90:a9:8d:
73:4a:c2:ff:90:a3:8a:85:a3:26:b3:5e:94:a1:3e:
c3:7f:79:00:d0:cb:a1:62:56:1c:93:62:67:d1:ed:
30:f9:94:8b:fa:de:bc:4c:42:5c:bb:66:1c:58:5d:
a5:51:1c:62:ff:a7:b4:ca:1c:16:51:d0:ab:eb:8b:
af:d7:75:f6:fb:83:f1:32:be:b5:6d:42:7e:99:0e:
61:e0:bd:60:66:3f:27:f7:63:3a:08:48:0c:57:9f:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:77:BE:E9:35:BF:3D:2E:6A:3F:46:DD:18:62:67:8A:A4:02:08:3C
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:12:aa:4a:ad:d0:1e:cd:95:c4:6a:db:11:3c:bb:75:5f:c5:
ec:20:d7:ac:72:e5:5f:9d:a0:1e:6d:b0:37:62:cc:21:97:4a:
71:d7:6e:e4:ba:13:b5:74:13:9c:ed:b4:90:b3:38:7e:67:50:
e1:e3:18:4b:7f:28:05:95:73:4b:fd:aa:53:60:77:bc:ea:bc:
32:d4:b7:34:41:ef:3d:31:9a:74:d3:60:b3:41:34:61:21:83:
ad:98:07:a4:aa:db:5f:01:3e:de:a4:9c:03:88:16:2f:b1:60:
ab:e9:e6:be:bd:64:b9:26:fb:91:37:3a:21:81:4c:3b:56:9c:
12:80:1e:23:67:4e:ee:3a:9f:58:03:56:d2:24:73:e3:e1:e4:
ce:89:fd:67:3d:ae:1a:4e:1e:7c:f6:93:70:d7:7a:22:d4:32:
1c:b3:04:63:b3:d1:5f:72:f8:66:1a:87:8b:cc:95:76:c3:50:
81:7e:0e:44:18:49:e1:f6:70:2c:59:b9:fa:d2:63:e1:5e:c2:
91:85:31:81:d2:a4:27:29:8e:c6:02:16:2f:7b:d0:03:4b:f8:
87:b1:4d:66:6c:61:35:73:05:8a:ce:c9:f6:1f:9b:08:16:c5:
bb:fc:3d:d7:04:fe:c3:75:7d:4d:2a:69:54:f2:23:a2:5b:03:
fe:3b:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:45:22 2026 by rpki-client