Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: HREBMSVDzUZOuo9RhWUnSQX1aHR4M3CEF6y9eH08JZE=
Subject key identifier: 1A:07:DC:65:DF:B9:26:D9:0E:19:B4:74:0C:8F:4E:F9:54:59:D0:78
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019EB76A383F1155104DAC9B1CAAC4F5C546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 16:00:52 +0000
Manifest this update: Thu 11 Jun 2026 16:00:52 +0000
Manifest next update: Fri 12 Jun 2026 16:00:52 +0000
Files and hashes: 1: D3nq83ikd9c0pXlVtbBwEPlHb0A.roa (hash: PQZpr7vE2U7ktPVrNV3Vo+4+rpfhAqmJVO4cr9eT0HI=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: xR7I8jnWBoXGKRzarV4XH66i4jJxZwdh9NZdkDIoElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:38:3f:11:55:10:4d:ac:9b:1c:aa:c4:f5:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Jun 11 16:00:52 2026 GMT
Not After : Jun 12 16:00:52 2026 GMT
Subject: CN=1a07dc65dfb926d90e19b4740c8f4ef95459d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:a8:e1:ca:58:ef:cf:3e:da:34:0d:bf:60:
00:5f:ee:6d:a4:6a:aa:1a:ba:8b:cb:43:b4:17:cc:
41:fa:48:76:e3:8c:55:43:2b:94:aa:3c:49:a0:5d:
c2:c4:00:df:ee:84:35:85:52:e5:a8:ce:6f:dc:f6:
ae:9d:07:0e:1b:d6:6c:a8:a2:87:ec:71:26:cb:4e:
31:14:23:e9:6e:e7:b3:0b:b7:26:64:95:a7:5c:28:
da:fa:71:a9:0a:ed:22:30:57:60:0c:4e:11:13:2f:
f0:cf:81:ab:a4:70:b4:44:05:23:37:f9:91:76:0e:
6e:99:f6:40:f4:1d:b8:bb:30:57:3a:53:24:f6:eb:
26:7b:07:a7:bc:e3:d0:d2:70:ea:1b:b6:01:6f:ad:
63:83:06:8e:25:d5:a2:12:fa:ed:a1:25:55:84:aa:
76:91:2d:52:83:cd:3a:2b:df:09:cc:ec:c2:02:29:
84:16:09:d2:39:1f:5a:3d:28:01:e4:20:02:40:6d:
0d:55:db:26:2d:cb:85:37:23:90:25:03:ca:38:ec:
ce:53:f9:a3:05:1b:a0:d4:4c:52:00:80:02:f4:f6:
67:ca:ef:f8:79:2f:9b:a2:71:46:a0:98:b7:02:02:
10:6c:64:54:6b:f3:2a:33:e9:d4:39:42:a8:c6:5d:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:DC:65:DF:B9:26:D9:0E:19:B4:74:0C:8F:4E:F9:54:59:D0:78
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4a:d5:de:ef:a8:f8:2e:b9:d7:5b:36:56:de:5e:60:0c:c7:
f6:c4:11:02:7e:18:b5:1e:25:9e:92:1d:71:6b:61:1b:ef:2f:
84:d0:1c:bb:cd:09:1c:cf:cb:9b:68:04:8a:33:ba:83:cd:05:
75:1b:bf:d0:7e:e1:97:91:80:af:63:4f:08:d9:a5:ae:0d:be:
c1:29:35:8f:60:72:ab:0e:54:f9:39:a8:b4:ed:ac:5d:c2:4c:
7c:3b:3a:b8:a0:cb:f5:c6:79:ba:0c:81:6e:96:3e:e9:2d:ad:
b9:8b:13:57:8b:45:db:78:68:44:75:85:03:cb:21:83:3e:3c:
fd:e2:72:2b:2e:90:38:07:d7:94:6b:bf:b6:21:d0:3b:0f:83:
12:09:40:fd:04:e4:9a:8e:ef:40:bf:bd:84:5b:d0:ed:66:2d:
db:94:ca:5b:12:b0:5c:79:8a:f3:21:d6:d0:72:7e:d5:91:16:
88:b3:a0:9e:ae:67:87:0f:33:5a:d7:b3:bc:78:98:2f:39:96:
db:b0:38:a4:de:c8:63:33:37:b6:15:b3:02:09:fc:f3:0d:72:
a3:fa:89:08:e6:10:e4:f4:d3:80:cd:04:18:c9:d2:46:eb:ad:
7f:90:73:07:84:77:18:70:72:f0:65:4d:c9:d6:d0:ea:05:fa:
b3:5b:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:37 2026 by rpki-client