Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: 7vAtFrl+KbGEAOkhL8T+oGnlzE0prUMtwRApkph4EII=
Subject key identifier: E4:99:7D:7C:68:76:A8:A1:93:08:69:B7:11:C1:24:CC:9B:60:10:78
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019EB8461397DA1F050886C9483135532F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1529
Signing time: Thu 11 Jun 2026 20:01:00 +0000
Manifest this update: Thu 11 Jun 2026 20:01:00 +0000
Manifest next update: Fri 12 Jun 2026 20:01:00 +0000
Files and hashes: 1: ElwaUMINBaBKF34TpTL8haqVd_s.roa (hash: QJTxI54JV9QgQdwNg1CINH9sDRPfJfNrzCHiU/q0Bi0=)
2: PfqFO43KqwDuwV1NwMVNOIpCa7k.roa (hash: KIFfrdCVgjpBo7n8/Wm61/4Xa4EQ0RYR7+7S2nxBq8A=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: WhBeOOKrhq/jvnggTEqsBOaeWblEtlbDzqbffYlTcfU=)
4: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (hash: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:13:97:da:1f:05:08:86:c9:48:31:35:53:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jun 11 20:01:00 2026 GMT
Not After : Jun 12 20:01:00 2026 GMT
Subject: CN=e4997d7c6876a8a1930869b711c124cc9b601078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:62:1a:f4:c4:e5:a8:a2:ac:a9:a5:01:dd:
ee:5d:78:e5:bb:11:1f:f0:2b:37:a8:ad:01:b2:78:
31:e6:60:33:71:a9:54:31:85:fa:3d:c4:37:0e:d8:
db:ea:d9:17:ac:ca:45:7e:b9:e3:7b:21:f8:8b:89:
8a:51:71:af:d2:b8:82:63:99:a7:ec:36:20:73:95:
fa:ff:1b:b0:a6:85:51:17:68:db:2c:95:28:ea:5b:
5c:43:0f:d1:7b:34:2d:a3:4a:f9:39:a9:84:45:e8:
59:8f:d5:46:b7:1a:69:8a:31:71:ce:14:6d:db:9f:
42:2b:7f:94:ad:b1:b2:3e:df:4c:93:1e:fe:cd:f1:
34:11:6f:d3:8a:cc:78:6c:0e:14:0e:db:a7:1d:98:
84:d1:24:6d:76:b2:50:a4:b6:60:04:c9:06:81:36:
68:ea:f9:c2:2f:f5:29:40:54:7c:87:d4:63:39:db:
ae:d9:76:84:52:9e:c6:a3:75:a2:e1:60:e9:cf:12:
97:6e:45:b7:4c:1c:ca:01:f0:3d:9a:15:19:b6:2d:
31:95:49:d5:22:90:f7:d1:2f:91:66:51:8d:ea:b8:
6f:c0:b4:95:c7:8c:50:a4:85:c5:24:00:13:b6:f1:
2d:b9:a6:34:fa:95:be:35:86:8c:4f:09:5c:58:33:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:7D:7C:68:76:A8:A1:93:08:69:B7:11:C1:24:CC:9B:60:10:78
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6e:d1:1e:b9:8b:69:b2:93:50:8b:52:50:22:6f:37:00:f2:
86:3a:cc:09:8d:44:8f:79:3e:28:67:22:37:22:46:d1:fb:13:
05:55:c0:3a:21:d1:3c:13:c3:a6:af:23:81:e7:b1:5b:5d:e2:
25:07:02:06:96:d0:31:67:fb:b9:d6:34:d4:1f:87:87:5a:d3:
d0:db:9f:f2:01:c7:3d:2f:90:4d:cd:8f:c9:d5:5a:3b:11:de:
05:0c:73:63:59:29:c6:16:1e:86:97:92:97:66:95:4d:b7:fd:
79:31:e9:66:2a:bf:3e:94:29:54:53:80:4a:37:b1:c4:20:bd:
3b:9f:1f:9d:44:ea:66:54:c8:89:f0:ba:83:a7:28:b3:0c:64:
b2:20:a3:66:7c:74:18:e3:da:6c:d0:96:c3:2b:d9:c7:9b:1a:
6c:69:0d:3a:4c:b1:46:96:69:c1:8e:b9:24:d7:25:2b:13:64:
f4:cf:7e:5d:3c:9d:f0:87:1b:df:f7:d2:a0:1d:94:8f:9f:06:
ca:0e:d4:e1:b7:6d:2c:59:7f:d4:b8:f5:0f:37:0e:53:d9:c7:
f7:91:a7:73:83:9d:1c:de:bd:23:7e:28:59:33:1c:36:ce:67:
3b:67:a5:1e:1d:c0:cf:77:95:ed:bc:90:7d:8c:06:6c:5a:fb:
54:b6:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:01:59 2026 by rpki-client