Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: IVr8mC702CDb1dMHq4GO23b3Nl33BGl7Kp/sp+e45zg=
Subject key identifier: AF:6B:1A:CE:6B:89:61:48:5F:C3:D9:B8:76:BA:27:D4:1C:E9:A3:59
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 019EB8B459A7A7981FEC1569630D8CCA9530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0A6D
Signing time: Thu 11 Jun 2026 22:01:27 +0000
Manifest this update: Thu 11 Jun 2026 22:01:27 +0000
Manifest next update: Fri 12 Jun 2026 22:01:27 +0000
Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: E3DJbbrNaJ1egYFc6AiuZ4dGKIFMLJkvRb5ef4v2hoE=)
3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:59:a7:a7:98:1f:ec:15:69:63:0d:8c:ca:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Jun 11 22:01:27 2026 GMT
Not After : Jun 12 22:01:27 2026 GMT
Subject: CN=af6b1ace6b8961485fc3d9b876ba27d41ce9a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:96:22:ee:a6:bf:3f:6c:49:4f:ac:74:73:
f2:c6:13:18:e1:9a:f6:58:ba:da:10:c0:6e:db:22:
7c:d8:e2:83:91:76:6f:e7:3d:89:f0:a9:64:77:d2:
77:f1:de:c7:9c:35:5e:a2:b0:f1:71:7a:07:5d:2b:
cd:a6:8f:77:c9:a0:8a:6c:98:90:77:7f:98:21:f4:
71:cb:eb:e2:cf:22:a5:13:e2:41:30:0e:80:f4:f8:
7a:d6:59:8e:0b:cd:8e:16:97:b2:5d:12:87:c0:55:
d7:24:23:5f:3e:77:0c:4a:11:b7:d9:e4:6f:f8:24:
ec:de:65:dc:af:d0:22:29:24:14:f0:f0:ed:78:97:
57:89:df:49:cf:ab:db:09:47:20:fb:8b:d8:66:ca:
2f:37:40:a4:79:a6:3a:cf:34:8e:19:e4:0b:35:1a:
b9:97:de:9c:6e:c6:51:1f:ae:5d:da:e8:71:5c:60:
b9:9e:11:b8:44:8f:53:7e:3b:85:f2:3a:fc:1b:86:
38:10:f7:eb:c2:8a:14:ff:5f:c9:a1:45:db:33:2e:
c0:57:e7:cd:08:90:fb:63:35:7f:e6:bd:30:40:84:
80:ce:66:8c:ca:8b:4c:5f:b9:14:61:99:48:29:8e:
db:22:bb:1d:1b:83:dd:ab:a1:8a:4b:9d:35:b3:37:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:1A:CE:6B:89:61:48:5F:C3:D9:B8:76:BA:27:D4:1C:E9:A3:59
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:7f:14:33:c6:71:63:57:ef:6f:f0:13:de:79:e7:6e:74:
09:70:4c:c1:00:51:6e:f3:af:ea:cf:6e:b9:dd:72:79:23:72:
30:63:ed:85:35:8d:86:43:25:6a:42:eb:72:40:84:3c:09:01:
4e:ce:b7:b5:b6:83:77:c6:69:0d:20:df:bd:23:ad:20:57:b8:
34:ff:ba:ae:2a:4e:1d:f2:45:db:2e:1a:f7:87:ae:a8:0f:b2:
f3:8e:5c:6d:7d:1c:9e:a3:cf:eb:9e:90:06:00:f7:28:3e:21:
c3:fb:78:c8:7b:7a:3b:49:e6:12:3a:76:0e:ad:7a:d4:1e:31:
e6:8b:8c:f4:b7:a9:6f:3e:56:18:c7:1d:ea:09:bc:0b:2e:dd:
0d:c6:37:d2:c6:a8:45:fb:95:52:2d:7b:b2:ca:b9:04:93:b7:
90:f9:0b:11:f4:97:fd:13:ac:9b:64:90:32:d4:4a:bd:ec:88:
e4:e1:81:f7:f7:7b:1c:f8:a8:00:f7:8b:f3:9e:53:4b:b5:27:
e1:de:7c:3b:b9:de:aa:96:f0:a4:dd:4e:82:4c:33:f3:62:60:
e7:5b:e6:06:82:1c:b7:fd:04:f1:3e:bd:d2:6d:bb:a7:88:1e:
e5:ae:f0:db:11:56:6b:44:fb:d5:1d:21:0d:39:52:78:77:ed:
b1:a6:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:16:57 2026 by rpki-client