Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: U97hZMt/BkJ2bshipJPnr/aqancNrydf3CIUAYnDn28=
Subject key identifier: 24:8D:7E:31:3A:51:C8:A4:62:78:EA:D2:FC:0D:B0:CC:93:5C:D4:92
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 019EE77AE16568FF79AF3DB68CABA8DA2AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 11E4
Signing time: Sun 21 Jun 2026 00:00:50 +0000
Manifest this update: Sun 21 Jun 2026 00:00:50 +0000
Manifest next update: Mon 22 Jun 2026 00:00:50 +0000
Files and hashes: 1: _kecmz5wOrK7gIei5HshIFKgYnk.roa (hash: oq5fC/PMeXxhdzroEzJ+3bMsZ8OSQI5v+Sc2hvXm5Tc=)
2: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: Pui/U6ZdzbzLSAryHvzP+7F2Qhoqvyj52a5R8zLl1Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:7a:e1:65:68:ff:79:af:3d:b6:8c:ab:a8:da:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Jun 21 00:00:50 2026 GMT
Not After : Jun 22 00:00:50 2026 GMT
Subject: CN=248d7e313a51c8a46278ead2fc0db0cc935cd492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:17:a0:38:8c:07:2b:31:1c:53:16:db:89:
68:f6:c9:ab:73:dc:55:29:51:54:17:48:b0:38:f3:
f6:0e:d8:90:84:44:8d:8c:0a:d6:e5:7c:d7:e6:90:
26:be:ae:f2:a5:aa:74:ca:22:04:cc:09:b7:cb:13:
52:7d:ab:35:9a:5a:48:60:f0:f4:7a:e1:34:da:0f:
e5:15:c0:c1:33:69:8a:8c:19:48:69:9c:96:ef:a4:
75:55:ef:e2:e8:7e:56:87:83:ae:ad:95:f4:dd:38:
b3:38:45:73:e1:38:08:19:64:d0:40:42:92:d9:9b:
60:a6:5c:13:44:49:95:d7:02:da:6c:af:ff:79:d1:
8d:77:8f:8d:bc:f5:b5:28:b5:51:f8:e9:20:1b:a6:
37:98:f9:c4:d1:53:93:ce:61:c7:b8:8c:8a:85:11:
5d:ef:40:a2:01:ef:32:c5:2d:9f:91:cd:88:e0:c3:
e6:4e:47:a4:12:fd:f3:40:c7:c2:f2:20:89:15:77:
c1:fc:2e:30:f6:a8:18:28:60:2a:bb:cc:49:a6:63:
09:e4:8f:a8:b9:2d:43:31:d6:19:c5:a4:c0:08:ac:
6e:88:20:3b:4c:51:25:83:48:e7:07:d2:b8:e2:35:
85:43:2c:e9:06:83:e6:39:41:5f:a8:5d:7a:fd:aa:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8D:7E:31:3A:51:C8:A4:62:78:EA:D2:FC:0D:B0:CC:93:5C:D4:92
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:cd:7f:70:ed:63:73:b8:27:34:a5:3e:89:63:31:9d:c7:
4b:8a:51:49:f2:d1:fc:e7:89:00:d3:9b:49:f9:43:1a:9e:6f:
f4:ba:ec:bb:87:be:ed:48:5b:51:03:5c:13:12:24:da:d0:49:
66:72:99:08:f3:26:f3:b1:ea:56:6b:c5:f9:78:b7:33:13:d7:
7b:fd:19:99:06:23:24:0c:2a:3b:cc:4f:c5:8c:f6:2c:d2:51:
7d:f6:cd:2f:0b:31:42:02:fc:41:3f:47:aa:da:96:b7:75:fe:
ee:19:aa:4d:9b:cd:04:94:16:fa:81:f6:e0:3b:f6:44:03:a7:
e3:dc:6c:79:f1:80:91:85:9b:b5:d8:d0:38:db:76:ac:10:5e:
6c:da:86:a1:94:6d:eb:7b:d8:94:9d:c8:dc:88:cf:49:85:72:
04:d5:21:b5:d3:0c:8d:41:a5:fa:7c:46:85:5f:71:85:86:71:
48:cb:e4:da:84:67:80:fd:af:dc:ad:4e:c5:25:f3:49:a3:a3:
13:a5:05:e1:43:65:9b:83:4c:e1:1d:6b:7c:84:f4:ac:78:00:
94:7c:1f:f8:48:16:29:9f:f4:f4:35:c1:bf:d2:6c:5f:7e:00:
7b:a6:bb:b6:7b:44:b3:e8:90:fd:90:f7:dc:f6:aa:f9:94:a0:
05:33:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:13:06 2026 by rpki-client