Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: qAYxyD+pZEs6JtXbYUQcQ87J4qkMwST4E0w9XUukE5Y=
Subject key identifier: DA:B8:BD:6B:17:56:46:12:60:95:B3:DE:7C:21:1D:C4:7A:BE:AE:5C
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019E9A3B229EE5D284AEFEA449BE58142700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1948
Signing time: Sat 06 Jun 2026 00:00:27 +0000
Manifest this update: Sat 06 Jun 2026 00:00:27 +0000
Manifest next update: Sun 07 Jun 2026 00:00:27 +0000
Files and hashes: 1: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: AXrkV7PNyz+l4RioWDL7Xynwu2VqlcGo9+cgsoHY7Fw=)
3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:3b:22:9e:e5:d2:84:ae:fe:a4:49:be:58:14:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Jun 6 00:00:27 2026 GMT
Not After : Jun 7 00:00:27 2026 GMT
Subject: CN=dab8bd6b175646126095b3de7c211dc47abeae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:ce:4c:59:59:fa:09:99:90:c3:ef:37:e1:
e0:7f:e2:9c:f1:c7:10:65:fb:bc:28:3a:2e:72:51:
50:95:27:9f:f2:19:3f:d1:a5:a6:43:4e:45:5a:8a:
96:5c:bc:51:25:59:bb:4d:84:88:06:db:7b:4b:08:
59:b2:fe:d4:d8:0e:1d:ba:4d:b8:75:e9:80:72:74:
b2:6e:2d:9f:d1:3a:da:5e:7d:d3:6c:e5:dc:d5:23:
de:98:1f:9d:ed:36:3e:12:fd:15:18:48:df:f2:6c:
0f:e9:8d:83:6b:a1:45:c3:64:03:47:bd:85:a3:e8:
5a:95:b3:b3:29:6f:af:7d:a3:ae:80:67:e8:57:a7:
38:9c:e7:7c:2f:96:4b:90:61:0b:ff:b1:9d:85:30:
91:a8:ca:fa:8e:23:50:49:c5:53:49:da:23:63:5a:
8c:d1:a4:dc:64:3a:49:3b:b0:74:f3:a9:82:c5:47:
d1:1f:b0:6d:d9:49:75:8e:01:1f:4d:c9:fa:26:b3:
f9:9b:58:0a:9f:36:10:87:e9:7c:c8:63:49:7a:c8:
77:dc:49:dd:70:e9:31:3a:6c:31:4a:02:bc:b7:b8:
5a:9c:4d:f4:52:4c:1b:6b:99:5e:1b:f7:51:7b:d8:
1e:df:9f:be:95:33:28:66:d2:56:09:fb:fd:c4:31:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B8:BD:6B:17:56:46:12:60:95:B3:DE:7C:21:1D:C4:7A:BE:AE:5C
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:c6:5b:d3:c9:46:4e:44:93:d2:ea:97:13:04:8f:cd:e2:
78:72:c5:65:73:92:43:71:41:30:3a:84:c3:be:d8:b1:05:3f:
b4:3c:7b:be:d3:6c:c5:c3:ab:d4:90:7a:4e:12:5f:32:26:45:
e2:b3:a1:90:dd:4f:f0:80:ed:59:e6:a7:15:47:b6:50:d5:58:
f9:b9:7e:72:dd:f6:c6:14:79:de:93:7e:92:71:b1:b5:ca:6e:
1d:55:6e:ea:d2:12:db:32:17:d4:d9:dd:ec:21:94:6a:59:2d:
c9:2c:e2:be:12:d1:36:0b:96:d7:e9:39:71:e8:de:db:21:f6:
9c:ea:c2:7b:22:54:91:a7:72:ef:57:7f:ba:8b:c1:19:1b:b9:
6c:61:00:14:0b:74:9a:ab:dd:fa:60:a3:46:68:95:a5:22:2e:
12:cd:20:3f:5d:5e:55:ff:3a:90:d4:1b:8b:2d:f3:28:26:70:
d5:11:25:5b:43:85:9a:e3:b9:14:b2:db:0c:77:37:51:d5:d8:
7a:e0:38:a6:49:c5:cc:3b:e7:40:03:4e:08:15:2b:91:2d:4c:
e3:a8:17:57:5a:b9:03:26:08:97:f4:c1:af:f2:a2:69:e5:b4:
21:d4:eb:e9:0a:9c:3d:48:f5:2e:39:3f:1c:c6:01:a2:13:cf:
a0:69:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:09 2026 by rpki-client