Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: mc0lsa66X06lF+YluaXJhidc0DiNi9YPRVc1kAnosdI=
Subject key identifier: 89:14:F6:87:3E:C7:FC:23:18:AF:7A:D3:6F:88:34:41:58:01:77:F2
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019EB98F082747141BA2E3265CF81BB2C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 033A
Signing time: Fri 12 Jun 2026 02:00:19 +0000
Manifest this update: Fri 12 Jun 2026 02:00:19 +0000
Manifest next update: Sat 13 Jun 2026 02:00:19 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: GLCNqXs6ZLhk1kIvLmM8Uv5hiWVFI8VhZ6yivj4H/a8=)
2: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
3: rxT-eoR75onud9U3--RgqGGLVNo.asa (hash: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:08:27:47:14:1b:a2:e3:26:5c:f8:1b:b2:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Jun 12 02:00:19 2026 GMT
Not After : Jun 13 02:00:19 2026 GMT
Subject: CN=8914f6873ec7fc2318af7ad36f883441580177f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:cb:8c:44:54:85:f3:2b:d5:f4:d9:33:7b:
f0:37:e4:0d:2f:ec:57:50:12:4b:48:2a:98:4b:b7:
5e:85:66:1c:ce:4a:7b:bd:8f:0e:c1:93:f7:96:82:
8e:87:c1:58:5e:2f:87:8f:51:3d:f7:87:9d:95:bb:
59:fe:89:78:ae:57:42:e7:10:da:c3:1f:4c:2c:41:
a1:c5:b4:1d:bf:95:81:0a:72:c7:d5:fa:05:8c:6d:
a9:72:e5:c4:51:07:a9:ae:f1:9a:cc:18:e4:59:34:
78:c8:88:67:ef:85:88:ef:32:04:11:fd:d2:d5:ca:
e6:11:55:e7:d7:19:ab:f4:c7:40:42:08:40:da:8e:
16:9d:7b:ca:92:93:e8:08:f0:3d:92:1e:18:81:07:
a9:bd:23:30:25:d9:b1:b1:44:0b:e5:8c:32:bb:75:
5b:39:c1:c5:f9:2f:50:e3:5d:1e:3a:f8:c6:ef:87:
49:e1:3f:37:fa:13:89:63:74:2e:c8:5b:ee:d5:a8:
59:9b:2b:06:f2:25:50:9f:e5:ce:48:fa:bc:38:db:
d6:a1:86:77:78:f5:9d:90:c9:21:05:11:10:e3:be:
ac:0a:72:11:2d:8c:cb:7f:59:f6:b5:07:09:5b:8b:
27:b2:4e:8a:7d:e9:c2:b0:c7:9d:50:11:86:f1:97:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:F6:87:3E:C7:FC:23:18:AF:7A:D3:6F:88:34:41:58:01:77:F2
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:c6:64:b0:8c:bf:a5:1b:67:8a:93:0e:f5:5f:85:1f:10:
b2:e4:3f:cd:bf:95:3f:f6:99:ba:66:4e:64:24:b8:a9:b4:d4:
d4:fb:3c:63:85:04:95:88:8f:32:c9:35:98:21:69:ed:1a:1f:
61:38:27:74:0b:20:6b:ff:f8:88:2e:e9:ab:3f:b3:54:4a:c1:
80:ac:45:de:68:28:f6:5b:b3:a1:ff:18:a7:a4:92:22:66:18:
cd:5f:dd:31:da:c7:b9:ec:1a:f4:4c:40:43:01:81:df:46:40:
2e:cb:5c:60:22:63:5c:30:9b:3e:54:b2:c3:bd:b3:2c:d5:67:
3e:f5:d2:4c:2d:33:ad:0c:ab:9e:61:c3:18:be:97:f2:46:a6:
8b:30:a2:41:ff:4d:73:54:02:c0:26:d7:43:84:f5:93:20:b7:
2e:17:82:e4:d8:d4:3f:60:cc:d9:d0:58:b4:ce:4e:52:b9:90:
cf:3b:78:43:8f:42:74:ad:9e:34:c8:ca:1e:ce:fa:a6:0b:3d:
84:fe:6d:dc:d2:2e:a4:5e:cd:03:49:7c:c1:07:df:06:57:9e:
35:b9:c9:47:ba:f0:f9:24:84:0b:70:f2:b6:f6:3f:ee:bf:27:
dc:fc:52:a3:f2:af:79:67:68:da:e8:fa:0f:c0:03:a1:c6:eb:
30:0c:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:27:51 2026 by rpki-client