Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: G42yK4qobsOuYdTuDqJ6OHneHwXJOufNvHUaFRXhh20=
Subject key identifier: 70:71:19:32:D4:61:9D:6D:F6:E8:31:03:57:4D:79:90:82:BC:A8:CE
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019EB6579631B276472BFA95358B8E872E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 11:00:53 +0000
Manifest this update: Thu 11 Jun 2026 11:00:53 +0000
Manifest next update: Fri 12 Jun 2026 11:00:53 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: dhAk96hr52mxUKI8c1xAXakzWH8J7MGyS5Hkm5UWi2g=)
2: LxJaOC-2KIpwwVVZABAlIWlsIp0.roa (hash: 7ma0hwDbVZMGk4nMz3JXDWUYVRt/2Dj4M9Onwnqp5u4=)
3: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (hash: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:96:31:b2:76:47:2b:fa:95:35:8b:8e:87:2e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jun 11 11:00:53 2026 GMT
Not After : Jun 12 11:00:53 2026 GMT
Subject: CN=70711932d4619d6df6e83103574d799082bca8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:c7:33:f3:24:b3:4c:78:97:4d:1a:bb:aa:
3e:0d:e3:c4:ce:ed:7c:25:b9:67:13:cb:43:11:79:
94:7c:6b:00:f2:27:e5:39:f6:75:a2:d2:df:a6:ba:
2c:ae:66:ba:c7:07:33:ed:77:f7:8e:78:80:21:fd:
f4:35:a7:e4:44:6a:2c:cd:68:ec:c9:d7:0b:36:f0:
0f:03:8b:02:95:70:7f:f0:82:b5:35:24:55:36:da:
cd:83:1f:f4:d3:4e:ee:b7:7e:82:08:7f:fc:f8:0d:
c5:52:36:d6:fa:d2:8a:ed:5b:d3:98:2c:91:3f:9a:
11:e8:db:79:24:b9:14:de:70:cd:62:28:0a:41:0b:
df:7d:2d:1d:dd:f8:60:e3:8a:74:56:34:d8:b4:6d:
11:ce:26:dd:10:83:ce:f2:55:61:75:fd:ef:bb:f8:
93:2b:be:24:83:dc:b8:73:5f:a7:94:b8:69:ef:76:
0e:1c:fd:b4:41:95:20:9a:f2:67:01:87:f7:b1:c9:
0e:72:d1:3b:b1:9b:7f:c6:be:71:df:6b:79:b6:7c:
fd:59:3d:42:8b:89:cc:f1:75:56:25:44:18:71:1a:
b3:52:df:69:75:a0:bc:82:85:3b:ae:6d:70:67:2b:
3b:60:be:f4:a2:f5:fb:7e:48:ec:84:c5:97:fa:f0:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:19:32:D4:61:9D:6D:F6:E8:31:03:57:4D:79:90:82:BC:A8:CE
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:68:2b:1e:1a:b3:4f:06:1d:73:9d:be:67:4d:45:a4:7b:
fc:2c:d3:4c:7b:59:69:3c:c3:da:4b:83:93:b1:dd:08:40:91:
52:97:52:06:cb:19:63:02:86:da:fc:6c:13:54:a1:3d:bd:6f:
a5:9a:56:17:42:bb:34:8d:7b:3a:92:75:a4:4a:5f:55:ae:7b:
32:08:c8:b7:80:ec:0d:0f:b2:05:6e:b0:53:af:d9:40:58:59:
e3:5f:fb:38:5a:e1:e0:eb:9c:09:76:6a:67:1f:34:da:67:37:
84:7c:14:96:ae:23:d7:59:8d:9a:ed:d7:d8:43:cf:34:91:9f:
32:1b:29:9e:92:e6:9a:09:51:85:2e:37:a2:61:22:6a:9e:56:
7b:f7:56:ee:a8:f7:25:ad:c6:44:55:f4:21:07:f1:bb:36:60:
e9:b9:bc:36:d2:05:bc:2e:83:a9:48:c1:31:a2:23:3d:d2:45:
4c:4f:7f:c1:fc:50:e1:2d:2b:b3:04:22:fe:e4:0d:28:b4:32:
40:7d:58:b6:3f:57:00:5d:79:12:e0:1c:15:35:ca:f9:df:96:
f8:9c:8c:22:9d:9a:bf:9a:36:71:fe:17:9a:0c:f3:9d:7f:3e:
f4:f5:7b:4b:12:c3:4b:bf:6a:34:56:7e:4c:49:7e:a9:c5:c0:
5c:e0:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:09:26 2026 by rpki-client