Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: qWVORdWz6rAfGQOnhT+GlHCYVwOntAR6y/BFQJzUyJg=
Subject key identifier: 0A:82:A2:D2:AC:CD:39:ED:76:36:A8:C3:20:1D:73:38:4C:96:F1:BB
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019F11F7A7FA0F12AD790FDD1A17A3632D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 06:01:10 +0000
Manifest this update: Mon 29 Jun 2026 06:01:10 +0000
Manifest next update: Tue 30 Jun 2026 06:01:10 +0000
Files and hashes: 1: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (hash: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=)
2: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (hash: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw=)
3: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: GsDOr9kFMMXYlg/WpJVQZVHh9yRV8wdRikV1ejSePQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:a7:fa:0f:12:ad:79:0f:dd:1a:17:a3:63:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jun 29 06:01:10 2026 GMT
Not After : Jun 30 06:01:10 2026 GMT
Subject: CN=0a82a2d2accd39ed7636a8c3201d73384c96f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:92:6f:32:77:d3:63:b6:95:6b:3a:36:be:
5f:ee:8e:16:ee:22:60:42:52:5e:22:98:e1:18:09:
6f:c2:12:01:13:d1:51:01:a3:4c:e2:aa:34:44:0f:
74:dc:57:86:5e:28:bd:f6:5f:d0:a7:49:95:56:98:
ed:1e:ad:ef:54:d6:b9:9f:ac:54:85:8c:5d:f4:62:
de:5c:ad:5d:04:4b:3c:00:d9:cf:72:d2:28:ea:c1:
6c:f5:79:a9:9e:a8:42:e4:2e:05:7f:31:a7:3e:91:
87:34:a4:7a:4b:87:74:6c:8a:fd:63:db:ac:54:cb:
a7:11:1c:e2:33:6c:00:72:7d:b2:3a:8e:b9:14:a9:
ea:0b:f4:40:68:80:e8:2b:43:0b:66:93:c2:c7:2a:
d0:4c:ff:68:b9:42:a5:47:69:f3:65:bd:96:57:10:
ec:93:19:a4:f8:2a:b7:cb:62:f0:4f:5d:f8:78:b9:
35:56:99:f0:d2:10:45:ad:a4:33:98:c5:48:01:66:
33:9c:67:e2:b8:2e:68:7c:b8:35:69:32:bf:08:8f:
e3:40:aa:1a:7c:ca:99:8f:5e:e8:19:d5:85:ab:40:
b3:5d:92:4b:07:3c:03:43:77:a4:6b:3e:3e:02:f4:
39:42:9d:c5:a5:2d:2d:5c:28:44:e6:56:8b:26:f1:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:A2:D2:AC:CD:39:ED:76:36:A8:C3:20:1D:73:38:4C:96:F1:BB
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:19:b3:64:0d:c9:50:9e:1c:70:68:dc:1a:7c:71:df:f9:
72:90:e9:81:ff:ef:51:dd:d9:f6:31:f0:59:e1:d7:bb:e0:64:
7d:43:dc:67:c9:14:05:36:fb:b3:3d:97:cb:b6:35:37:fe:d0:
a3:71:f4:d1:a1:08:b5:07:2a:fd:96:56:dd:6f:d3:f1:47:b3:
c6:3d:c4:6f:d2:97:6f:f9:24:f5:e4:4f:23:c5:f0:ca:fc:2b:
a7:bf:b4:94:ba:34:49:25:0f:06:a9:c2:aa:5f:c0:44:2d:28:
37:04:d5:f8:88:d7:db:67:91:9e:f8:94:36:f3:b0:bc:51:9d:
4d:87:5b:fa:60:6c:11:4c:cb:94:2b:80:d1:90:46:a7:b4:8e:
9c:1e:39:7f:1d:95:66:ab:04:2c:38:d8:55:a8:4c:8d:78:d3:
04:0c:a5:20:ff:bc:10:15:e1:8c:78:db:a9:cc:e5:90:37:40:
5f:61:42:77:d0:0b:6f:4e:cb:a7:b0:81:8a:a5:8f:51:43:80:
eb:13:df:af:74:46:3f:68:a6:a8:80:31:47:b0:e9:b2:c8:85:
03:04:98:db:27:c2:b6:47:d5:7d:b4:e1:05:5f:75:db:0d:e2:
16:b0:94:6a:db:fc:97:f9:e1:bd:38:70:2d:bb:85:79:e9:0a:
8e:12:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:32 2026 by rpki-client