Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: 0LVDGHacl35/O7IcX618wzVu9uZNA1Kev3Jf087hqtM=
Subject key identifier: 91:DE:E1:F2:A1:8E:FB:D9:90:F3:9F:C9:AA:CF:D3:46:08:1F:D6:D3
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 019EB7A15FE66DAF81B035265934D0808910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 0BC0
Signing time: Thu 11 Jun 2026 17:01:06 +0000
Manifest this update: Thu 11 Jun 2026 17:01:06 +0000
Manifest next update: Fri 12 Jun 2026 17:01:06 +0000
Files and hashes: 1: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: DXAaKmE1BBVOYiNdgjrXd5MhZ8D8/jjBxdMRXhGKrIc=)
2: fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa (hash: v0PmtJ3pzpVot2Wloq98GRl87XDpPUF7bbjfx1/ffng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:5f:e6:6d:af:81:b0:35:26:59:34:d0:80:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Jun 11 17:01:06 2026 GMT
Not After : Jun 12 17:01:06 2026 GMT
Subject: CN=91dee1f2a18efbd990f39fc9aacfd346081fd6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:79:5f:65:03:d3:af:aa:00:6d:d8:91:65:
db:1e:8d:9f:8e:5e:3b:cc:17:e9:61:cd:5f:f0:ae:
46:d6:5d:7e:5d:f6:2d:6a:27:ab:a2:ef:a6:ec:5c:
36:9d:5f:7e:ca:aa:e3:a6:1c:f5:9d:e3:04:ff:48:
f1:00:37:3c:6b:4b:0e:61:41:3e:4a:37:df:a2:b7:
c9:c3:e4:f3:05:a4:fd:47:cb:6f:e4:04:38:81:36:
48:57:3f:dc:6c:ff:0e:9d:f7:d5:67:df:79:20:32:
9f:ba:1a:ef:44:6d:dd:17:a7:03:de:88:f9:d9:33:
1c:06:08:10:29:75:02:9e:22:6e:2e:7c:53:a4:fb:
2e:a5:05:01:d5:b3:8d:2f:60:5a:eb:1a:b9:41:3d:
89:d7:3e:51:44:c8:88:7c:4e:d6:c5:07:e0:fd:7e:
48:6f:22:8e:73:db:06:19:97:40:bb:3c:3d:be:f0:
82:36:a3:64:bc:4e:0f:6b:5a:25:bb:d6:24:f6:a2:
89:be:d6:41:c2:45:0a:f9:14:04:9c:b2:bc:82:3e:
65:06:69:ef:a8:6c:03:03:70:d9:e4:2c:40:36:c1:
ea:2e:f0:e5:2d:2f:cf:b3:2e:26:f4:1e:c2:fa:64:
ad:90:2e:f5:99:47:55:93:c5:5e:cd:b1:94:03:de:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:E1:F2:A1:8E:FB:D9:90:F3:9F:C9:AA:CF:D3:46:08:1F:D6:D3
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3a:47:8b:0b:59:ed:a6:04:4b:d7:d2:4b:09:d4:2d:78:cb:
db:c8:fa:6b:68:f2:ae:52:b6:e1:d8:7b:ae:40:98:45:cd:e4:
ad:3d:9a:a5:ac:a7:4f:21:19:36:c9:19:3e:2d:05:aa:54:66:
5d:c2:08:22:d1:e5:09:46:44:41:1d:a5:a1:96:15:ea:1e:e4:
1a:b1:39:2b:5f:30:94:b0:6e:ef:67:bf:7b:37:84:80:82:f0:
bb:87:3d:fd:9d:69:ac:ba:c7:a6:0e:e4:a6:5b:9e:06:d1:6b:
4f:ed:aa:02:cf:fd:81:a9:f8:3f:53:82:fb:0f:49:f0:63:dc:
10:42:c4:25:71:13:2f:4b:4c:1a:ae:db:7b:30:91:5f:cd:73:
07:a4:3d:8c:e7:e9:4d:76:48:b5:4a:5a:fd:3c:0e:90:4a:ab:
cd:07:33:73:03:c6:3b:63:50:49:63:be:ac:84:be:df:93:b3:
7a:d1:e4:89:ad:b1:c4:a5:5d:18:cb:7f:82:92:ba:6f:41:4f:
90:ff:d4:cc:92:09:b0:5c:c2:65:d9:bf:84:08:d0:fc:c7:41:
e5:d1:71:a5:e1:4d:9a:3e:8c:c0:47:b6:69:fb:04:19:21:bd:
29:5e:55:84:f9:55:65:51:0f:35:27:1e:ee:74:df:0d:51:d4:
95:32:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:58 2026 by rpki-client