Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: 589kmXdNAkYPZnjfg6h2AVZNezDqXh38xk0b21XJ1O0=
Subject key identifier: 22:7A:37:31:A5:8A:2E:20:C7:F4:14:9C:23:17:02:36:81:7A:F2:5B
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019EB9218E2DA5F492FAA931827A1AA3C546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 196A
Signing time: Fri 12 Jun 2026 00:00:44 +0000
Manifest this update: Fri 12 Jun 2026 00:00:44 +0000
Manifest next update: Sat 13 Jun 2026 00:00:44 +0000
Files and hashes: 1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: +AxTnCFlOVWmlBLBZ3AZkwJUxozx9ezz/Q+rElvEZ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:8e:2d:a5:f4:92:fa:a9:31:82:7a:1a:a3:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jun 12 00:00:44 2026 GMT
Not After : Jun 13 00:00:44 2026 GMT
Subject: CN=227a3731a58a2e20c7f4149c23170236817af25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:00:38:74:de:df:79:77:63:e8:78:26:6f:
3a:2a:7b:6d:95:51:27:5e:a5:28:2b:8b:7b:b1:22:
6e:c4:9f:49:d8:ce:e5:b0:1a:33:78:ee:2c:0c:53:
a6:2c:ca:2e:12:a7:2e:70:4b:d7:0d:78:b1:3e:31:
66:23:18:60:91:ae:dd:c0:37:54:58:d7:9a:8e:66:
f2:27:f4:c4:8d:c1:7f:b7:21:e1:69:73:a7:12:aa:
80:3b:c1:7d:a0:f8:ee:88:75:e8:f7:35:eb:b7:a4:
40:f1:fb:fe:36:31:4e:8a:af:05:b1:70:5f:70:79:
be:98:08:82:00:4e:84:27:51:3c:2d:f5:83:91:74:
ed:d7:37:a1:25:3f:f8:71:a1:52:20:0f:6d:9a:79:
3d:5b:5f:c5:dd:8a:79:1f:76:1f:c9:c7:a9:f8:50:
a3:69:95:b5:ea:23:1e:6b:80:a6:32:d8:a6:15:94:
c1:2b:fd:1c:50:d6:9c:cd:04:b0:b2:04:ab:3d:db:
15:be:76:b3:1e:f0:a8:05:43:79:25:f7:c9:9f:28:
4e:cb:c1:30:aa:99:fa:39:ea:bb:50:46:be:28:f6:
a5:b4:3a:e7:4d:eb:aa:f3:71:8e:fe:d3:6c:ab:c4:
77:56:07:40:25:a4:19:75:dc:55:fb:2e:81:74:44:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:37:31:A5:8A:2E:20:C7:F4:14:9C:23:17:02:36:81:7A:F2:5B
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4a:90:13:d5:75:5f:51:7c:a2:2a:4c:01:a9:8e:f5:a2:0e:
54:d3:61:8d:38:6d:56:fa:ea:03:8c:c9:49:18:13:17:7f:9a:
5a:cb:51:b8:e1:92:6f:d8:fc:ab:76:42:e1:51:ba:34:f2:5f:
9e:86:5d:b2:a5:72:54:11:a8:88:53:76:52:89:c0:f5:7e:45:
89:98:42:12:12:3d:6c:b8:c2:43:20:ca:0f:62:c1:e6:75:a8:
61:92:1f:2a:4b:aa:d9:25:70:63:9d:59:a3:83:36:ba:13:01:
70:d5:e1:f9:c2:32:9a:dd:7b:5b:30:c7:df:7e:f3:a3:63:12:
af:12:c0:57:c5:5c:ca:63:87:e1:59:3c:78:e8:48:7a:f0:0d:
d9:5c:de:ca:01:73:2c:cb:21:d9:95:ca:63:7b:7a:20:bd:f0:
a1:45:66:30:f7:ed:2e:67:d7:c3:53:65:ca:09:f5:80:77:29:
f2:7c:d8:1f:90:2b:2c:fb:7b:59:4f:ae:57:53:9f:be:98:88:
c9:b6:53:f1:3f:47:24:76:29:f4:7a:a0:fb:d1:0e:f3:84:75:
61:89:67:c2:17:b0:0a:7c:b0:fc:9a:2e:45:c3:01:3b:4e:f3:
df:22:91:ea:02:77:4a:85:2a:85:71:6c:c1:2e:4d:4a:b5:39:
42:44:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:36 2026 by rpki-client