Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: sTp9+Q5XQTOoJSdGmmpaxY5IrOM2cm/lWQfVfXa+k68=
Subject key identifier: 65:2F:C4:DB:F5:35:A7:4B:00:E8:E9:68:1D:0F:DD:B9:D2:6B:A9:38
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 019EA788CDC76C5F7EAEC13C8E696BD59006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1950
Signing time: Mon 08 Jun 2026 14:00:21 +0000
Manifest this update: Mon 08 Jun 2026 14:00:21 +0000
Manifest next update: Tue 09 Jun 2026 14:00:21 +0000
Files and hashes: 1: 7Z6ojelPseFZngCaUR_CY78Fb5I.roa (hash: HGlBrDAdLj79PeTsI9ZoARQIK801VBLKm1hbPGS+ChQ=)
2: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: +Ca9DQHl6KLilnU5E9YHrlEkFiYofJ4JX9PXDKmRoIw=)
3: hE7_1eUP4ATkoyOOP-i0vzG4-1w.roa (hash: zBuduVQjj/QP+i0lFDnpUqeCE6ciPhxfEuFUyQ8aeOA=)
4: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (hash: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:88:cd:c7:6c:5f:7e:ae:c1:3c:8e:69:6b:d5:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Jun 8 14:00:21 2026 GMT
Not After : Jun 9 14:00:21 2026 GMT
Subject: CN=652fc4dbf535a74b00e8e9681d0fddb9d26ba938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:64:f6:cc:9b:bd:d8:ed:1c:3d:23:48:b2:
1e:4f:0a:e4:b8:f9:fb:20:1c:38:cc:05:18:45:bd:
5b:a6:a4:b7:96:65:b2:6e:4d:08:c8:81:84:0b:fb:
df:31:ac:fa:7e:78:1f:70:6d:53:e6:fc:4c:6a:e3:
85:7a:cb:bd:e3:cf:20:9e:c6:58:b6:7e:6f:bc:43:
0e:93:c6:3e:05:c8:a4:50:16:fa:00:58:83:4c:e7:
35:d9:18:c6:d2:b4:2b:f3:27:b7:1a:b4:86:eb:fa:
47:24:99:72:69:52:f2:51:70:7a:4e:eb:b7:3b:c7:
b0:b6:38:d3:8e:24:da:44:09:47:a8:98:f7:38:01:
32:05:d7:3a:09:97:8c:c2:e2:36:39:f0:75:c5:0e:
0c:f0:4d:dc:26:d6:95:0b:af:bb:5f:64:c2:0c:84:
47:62:41:a7:8b:cf:2a:b2:65:e0:1d:19:72:bf:be:
c0:f7:52:3b:20:46:92:f8:d8:f5:38:7b:00:f8:36:
af:b3:1a:69:77:16:07:0b:a4:93:ed:af:43:db:5a:
09:22:da:91:c0:1a:1a:33:56:5c:0d:6e:cb:a4:de:
d8:f8:f8:bf:18:ee:d9:25:ff:db:20:8f:05:e4:7e:
82:70:5e:1b:a7:01:5e:1f:dc:71:e9:44:d1:b9:24:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:C4:DB:F5:35:A7:4B:00:E8:E9:68:1D:0F:DD:B9:D2:6B:A9:38
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e5:d2:11:64:e5:98:a6:ff:90:08:44:f4:5a:3a:b7:00:03:
fe:2f:1e:e5:e5:5a:84:79:dd:66:09:59:9d:da:ec:fd:8a:ea:
f0:a3:78:27:cc:32:97:14:9c:ee:8c:87:56:84:e7:80:8d:dd:
5b:ea:1a:8d:e4:28:b7:62:ad:e5:60:69:c9:a6:5d:8e:86:3f:
29:6c:e0:3c:98:1d:f2:f2:f6:1b:fd:12:29:ac:15:23:4c:9b:
1e:21:2a:96:9d:61:72:9b:87:e5:ce:ec:af:30:70:a1:61:13:
78:ef:da:2a:1a:49:94:72:a9:e0:65:62:95:04:d7:96:14:db:
b6:ad:ba:66:c3:25:97:10:22:8f:76:4a:73:a1:e6:1e:dc:30:
e7:68:a5:0b:ec:5c:5a:6d:4b:3f:ec:5f:3a:97:b0:09:61:76:
bc:66:89:b2:10:68:0d:7b:05:f8:a0:58:24:9a:66:a9:7b:f2:
b0:5f:c3:c0:e8:18:5a:e0:28:8c:8c:3d:62:0e:1d:3e:2d:11:
39:36:a0:e1:ee:9f:e5:59:fe:27:a6:5a:2e:8e:05:32:82:aa:
3f:8c:67:80:f6:83:7e:42:a0:0e:d3:32:18:9b:80:39:06:39:
aa:c8:e6:91:4a:33:d1:26:fb:9f:05:73:ac:ab:94:fb:02:67:
06:7d:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 18:56:24 2026 by rpki-client