Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: dqYEqbFMAkLAdKCvV9vlUur0Q8XPKjQ66oGpK4Pydug=
Subject key identifier: 72:DF:FB:BA:ED:4D:5F:58:3E:95:C6:F7:0A:94:EA:AC:B9:E0:A2:27
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019EBA3431BBD5A06124C36B54777545B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0C9F
Signing time: Fri 12 Jun 2026 05:00:43 +0000
Manifest this update: Fri 12 Jun 2026 05:00:43 +0000
Manifest next update: Sat 13 Jun 2026 05:00:43 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 8vbdvfnG52PKtiMWsEZ0oOEt7rbcncgCM4v5SCOZRYg=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:31:bb:d5:a0:61:24:c3:6b:54:77:75:45:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jun 12 05:00:43 2026 GMT
Not After : Jun 13 05:00:43 2026 GMT
Subject: CN=72dffbbaed4d5f583e95c6f70a94eaacb9e0a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:ae:2f:64:22:d9:61:25:d5:a3:ee:e7:19:
91:a5:14:68:ed:ad:d5:2c:83:58:26:d7:03:48:ab:
a3:d7:99:57:31:0c:2e:b9:56:9e:02:66:12:35:42:
c1:c6:85:af:96:67:3a:0c:11:5a:bd:27:d5:3f:f2:
fd:89:a5:b1:c5:c9:e8:c3:49:61:4b:9d:17:04:0e:
f3:61:ea:63:28:61:04:da:bd:5d:5c:d3:d1:73:58:
91:03:87:c5:0f:0d:62:3b:af:6a:51:47:5d:be:89:
a6:89:90:2f:03:03:cf:27:93:13:55:b7:b9:88:90:
a8:5a:27:78:e4:b7:35:19:01:64:96:99:46:4d:1d:
0a:06:be:3b:3f:7d:6a:18:25:d2:3f:54:11:96:d2:
03:70:10:b3:f1:06:0a:0b:38:f2:2f:a6:d9:fc:02:
4f:c0:d2:19:e9:4c:f2:6e:f7:e9:18:54:e2:a2:b7:
1f:50:05:90:09:ec:8e:c2:05:3a:b1:f8:35:c9:5c:
52:bf:1e:63:2b:9d:4a:ef:09:93:f8:e8:7c:2b:62:
d7:b9:69:69:ec:05:c1:2a:dc:17:dd:88:bb:ee:ff:
8a:86:4f:b3:3e:a8:2f:3c:4c:b6:bd:ca:33:42:b5:
05:9e:b2:50:bd:5b:e2:32:a4:e0:12:60:e0:7f:f3:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:FB:BA:ED:4D:5F:58:3E:95:C6:F7:0A:94:EA:AC:B9:E0:A2:27
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f5:6d:6c:b7:b2:cb:ec:cf:b5:7f:0a:bf:72:a7:4d:50:01:
aa:ac:f9:73:77:c9:b9:a0:35:73:bb:40:8a:8a:f6:8e:1c:33:
6d:1c:f4:b5:1a:9c:1e:a5:eb:a6:31:95:fc:76:6a:f8:7f:18:
b4:b8:2d:cb:18:30:07:b9:18:d1:47:23:d0:a9:62:c0:44:93:
58:be:9a:fc:62:b2:5c:91:ee:2b:bf:71:fe:47:59:f4:fb:39:
e5:11:38:d4:75:9b:ad:75:f9:d8:e5:09:c7:4c:0a:3b:bc:a3:
53:b9:67:37:c3:f6:14:75:70:be:2a:44:37:71:38:f8:10:24:
dc:67:4a:fb:cb:41:60:6c:c0:41:c9:4c:91:32:c8:d7:38:12:
eb:28:be:a9:7b:a5:7c:16:9c:b4:ce:75:26:26:9b:a1:82:8c:
a3:a1:fb:61:2d:30:e1:ee:de:12:ef:78:41:0e:a6:9e:40:21:
6b:7c:27:ee:fe:8c:9c:b4:cd:fa:69:d1:7e:4e:48:7e:23:9e:
05:27:a5:1e:15:dc:a0:34:13:b1:a8:f3:e8:97:a7:68:6d:f8:
ec:96:2d:65:18:34:03:c3:8e:da:be:6c:a5:0e:c1:cc:08:b4:
8c:3c:17:f6:26:48:1e:d6:e6:88:c6:7c:be:c7:72:4f:04:37:
70:49:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:28:42 2026 by rpki-client