Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: 1g0W7nNVqATnpfJfgHjd/EOdbM4R8C7IQCUXBwMESqA=
Subject key identifier: 4F:6B:E6:CF:38:A8:95:F2:49:96:CA:6F:4A:26:2A:32:55:0A:E0:44
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019EB76AC91D6492B5F461337741D85FA4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1884
Signing time: Thu 11 Jun 2026 16:01:29 +0000
Manifest this update: Thu 11 Jun 2026 16:01:29 +0000
Manifest next update: Fri 12 Jun 2026 16:01:29 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: xoVdp+Ew783dEJCdkk0N7b/Z5j1A5wcrZB5XCrN+cDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:c9:1d:64:92:b5:f4:61:33:77:41:d8:5f:a4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jun 11 16:01:29 2026 GMT
Not After : Jun 12 16:01:29 2026 GMT
Subject: CN=4f6be6cf38a895f24996ca6f4a262a32550ae044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:cb:a0:c4:87:3e:1f:40:bf:2d:bc:cc:3a:
4d:65:02:f1:6c:47:32:5a:e9:2b:24:ce:45:8d:a8:
d8:1b:5f:66:04:12:84:f3:07:d6:08:81:3f:a1:1f:
1e:c7:e8:24:33:a1:09:63:13:c2:28:0a:73:d9:cf:
b4:cb:cb:84:8e:05:36:f8:bf:97:9b:87:ef:86:06:
45:45:fb:59:67:ea:16:05:a5:0a:d2:da:81:a7:33:
74:70:28:4a:3f:9d:00:6c:9a:19:96:94:b7:5e:ce:
65:75:b3:a5:d8:50:2c:65:09:58:8a:62:48:3c:d6:
fa:1e:09:5d:eb:71:25:a5:dc:f8:4a:42:4f:4b:d1:
48:cc:d9:88:5c:b6:1b:45:15:c7:bf:db:c3:91:91:
8e:a2:71:a4:8c:c0:d7:31:91:7d:f7:55:46:2a:5e:
0e:cc:50:b6:b4:23:51:88:53:dc:0c:16:65:48:bd:
bc:e3:dc:a9:65:92:9a:4f:eb:18:36:65:c9:da:9f:
03:4c:1e:f8:8c:3d:68:77:6f:4b:74:2d:c3:6b:d4:
c9:42:7f:80:57:9c:59:88:92:c2:65:2b:66:bd:1d:
af:57:0b:f8:0f:f1:76:52:c9:ea:33:5a:9f:4f:85:
37:94:32:86:9d:24:07:21:72:f6:39:26:35:d7:29:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:E6:CF:38:A8:95:F2:49:96:CA:6F:4A:26:2A:32:55:0A:E0:44
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:54:ff:2d:ed:0f:de:db:e4:39:cb:9a:24:80:bd:a9:a4:f2:
bc:d8:8f:ea:75:9b:3a:83:13:19:f1:50:70:0e:97:1d:22:bc:
7b:f6:4f:cc:78:ff:bd:9d:47:a5:e0:ad:73:47:27:f2:8e:bf:
0c:7b:d5:14:df:b9:41:cd:f8:34:d9:79:02:79:fe:88:56:41:
a7:4a:26:6a:ac:bb:a4:31:30:8f:8b:6f:9e:16:13:af:af:5e:
3c:76:f3:d0:90:9d:3d:8f:3f:87:b2:75:43:01:86:a7:5d:54:
03:4f:2a:c8:f4:81:b4:b8:32:e0:17:57:17:49:57:b0:0e:6a:
d7:03:f3:47:23:67:96:ea:0a:b7:03:9d:f1:f9:9d:ba:c2:c4:
f5:e1:e0:94:1f:44:1a:a4:77:0c:74:4a:59:cb:c3:76:b3:58:
9a:c2:5b:f5:69:3d:b2:bf:0d:89:25:9f:e2:ef:14:7f:b3:93:
a8:a5:a4:91:53:64:81:0c:93:97:04:f4:74:01:50:24:48:9c:
d4:71:08:d4:8e:0a:13:45:3a:7a:17:10:8a:91:f1:7d:b6:23:
87:9d:b2:86:98:78:49:a2:57:55:6e:82:60:ab:a7:83:ec:a6:
41:36:f7:45:70:bf:29:92:26:78:a6:ed:2e:b0:3d:58:91:23:
cd:1f:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:07 2026 by rpki-client