Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: KvMm6CDyHOxwGVqMV3Mlkwp4E27jbdLmtU2uzcDAFyk=
Subject key identifier: D3:12:0A:5B:48:92:AC:2F:80:95:98:05:EC:6F:82:BC:E2:CB:17:16
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 019EB80ECD9CF27A5D98860160B4B2B4DDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 19:00:38 +0000
Manifest this update: Thu 11 Jun 2026 19:00:38 +0000
Manifest next update: Fri 12 Jun 2026 19:00:38 +0000
Files and hashes: 1: Av5bsVoq8UQGaosqV8V6-3ucUR4.roa (hash: QEALuD9emwTtaKDjepBpTR7X0rF/uZcvg9fbjrjCtSw=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: O4YEVAEb/QtkAjACz0OuZUEuQkqJS0+LmuQmxn3pcLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:cd:9c:f2:7a:5d:98:86:01:60:b4:b2:b4:dd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Jun 11 19:00:38 2026 GMT
Not After : Jun 12 19:00:38 2026 GMT
Subject: CN=d3120a5b4892ac2f80959805ec6f82bce2cb1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:d0:4d:87:1c:8b:05:89:44:83:be:4f:55:
dd:1f:a9:37:27:03:92:3d:fa:ae:85:6c:e9:d1:30:
e2:4d:8b:11:d5:2b:bb:11:6e:7e:ac:f9:b9:24:86:
1f:9a:0b:6e:87:0f:ca:8a:1d:65:10:b9:16:0e:3e:
17:bb:1f:23:be:99:96:4b:9c:a4:17:38:ef:aa:05:
e2:fd:60:09:4d:b5:a5:5d:07:fa:5a:71:1c:12:d7:
69:9b:c7:d2:1b:24:93:6e:84:56:aa:1b:44:5d:5f:
91:e2:19:12:44:b4:fd:b3:4b:44:5c:0b:04:c3:aa:
77:04:b1:0b:44:67:5a:d2:31:ef:5c:11:75:52:f3:
e5:4e:8c:ac:b0:92:12:5f:34:40:ce:63:66:74:b3:
12:e3:99:85:ad:97:d4:93:9f:4a:91:1b:a3:99:8c:
0a:fc:c3:a1:98:1c:2d:ad:ce:be:73:a4:b6:c9:3c:
67:e3:8f:8c:15:94:63:4d:c4:74:99:13:e4:76:85:
f1:11:14:4e:41:eb:0c:67:c2:9d:03:15:c1:8c:d0:
f0:2e:dd:24:12:93:e2:3e:bd:7b:6c:e8:e3:6c:71:
3d:b6:9e:8a:e4:55:32:0e:e2:6c:3f:53:49:99:20:
60:f1:23:e1:ec:bc:60:ad:33:3a:2a:dc:6e:34:1b:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:0A:5B:48:92:AC:2F:80:95:98:05:EC:6F:82:BC:E2:CB:17:16
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:8f:06:e4:d0:4a:0e:3e:11:56:44:ce:dd:74:da:b4:03:
d0:b6:d4:d7:4b:ae:1b:6c:79:f4:46:59:48:89:72:de:b2:b2:
53:06:ca:bc:89:12:db:d6:c9:ae:60:a2:19:56:c8:52:e2:5a:
e3:49:9f:43:ad:c7:73:4e:6d:99:85:62:14:b3:5c:cf:94:cd:
83:c2:7c:92:4b:36:3f:36:95:54:67:22:a7:63:2c:26:35:12:
98:a3:56:04:99:f3:7a:46:79:af:25:3a:1b:7b:8d:0b:75:af:
4c:2e:8b:b4:72:3b:63:fc:79:b7:f9:16:3e:7a:b8:8a:4e:1a:
81:58:9e:e3:35:b0:74:bf:c2:62:fb:af:dc:fb:39:20:d4:dd:
6a:5e:53:d7:1b:40:68:b2:85:5c:f3:21:99:f4:63:2f:ca:c5:
f9:ae:50:72:af:8c:5d:66:21:67:0f:74:f1:f2:19:b4:73:74:
95:7c:57:0e:28:07:1d:c9:d1:23:85:a5:86:76:08:5e:a9:57:
e0:67:21:5d:48:48:92:79:7a:d6:8e:3c:e1:d1:0e:a7:83:a8:
c0:f2:30:de:21:bc:1f:94:4e:29:ee:c3:0e:1a:7a:4a:ef:ee:
16:53:a9:6c:c2:8c:54:82:e9:45:07:48:bf:e5:e6:7f:cd:e4:
0e:0d:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:21 2026 by rpki-client