Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: /3qcepeIeHfWKH7GQo6/dWWVdY+b3i9hRISGwIhLZ6s=
Subject key identifier: 09:11:E9:89:DB:E4:44:C0:31:75:D2:96:82:86:A8:2C:76:88:F3:35
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019EB87CC64D4FC61D546944B786B20C2043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0DBA
Signing time: Thu 11 Jun 2026 21:00:45 +0000
Manifest this update: Thu 11 Jun 2026 21:00:45 +0000
Manifest next update: Fri 12 Jun 2026 21:00:45 +0000
Files and hashes: 1: Ur12tMXP6krqdgPYJeyWQySwWuA.roa (hash: WAu5x/fHLD+hAA2/qHGeg9Ko8e7jyGO8J9Ruzc1IZ60=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: onbDPXSvLZ++lgvx4M1o5r91MCRCDp/JH248Q3OUp7Y=)
3: o43yV46tUCettjH0kRv7oqNolP8.roa (hash: RBU44rx424a90gKy+6zTDM6bwGFn0Mmg9XsrebbEcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:c6:4d:4f:c6:1d:54:69:44:b7:86:b2:0c:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jun 11 21:00:45 2026 GMT
Not After : Jun 12 21:00:45 2026 GMT
Subject: CN=0911e989dbe444c03175d2968286a82c7688f335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:ad:3e:f3:29:dc:76:87:27:eb:21:d2:b1:
ea:4d:6b:3c:6f:87:01:aa:0b:3f:ae:98:42:f2:de:
0b:6a:9f:e5:93:f3:76:4f:39:17:ac:28:2c:3d:e0:
c6:80:20:66:19:29:68:42:28:92:4d:28:73:26:e7:
30:c1:cc:f4:eb:4f:5b:70:98:e2:b9:cb:87:ad:9f:
22:e2:f0:95:50:ff:58:33:30:f7:bf:fe:aa:94:c9:
ce:39:e1:db:42:2f:d7:e1:3b:14:4d:6e:12:f6:24:
eb:f4:a0:09:ca:c1:7d:4a:1c:58:e6:0e:c4:fa:86:
69:2f:75:7b:42:7b:38:85:b7:5c:44:5d:cc:ab:47:
33:70:3b:64:b9:75:7a:4b:ea:08:9f:a7:b3:a3:53:
30:67:4b:ff:ff:c0:e6:13:17:6a:bf:12:7e:0d:b0:
ee:72:fe:f5:52:ae:3d:f2:d2:62:b8:8e:0f:46:f4:
07:18:7d:1a:43:f8:5b:0f:ff:c3:08:c3:3e:6f:bf:
ec:39:18:30:13:6f:83:c8:e3:6d:96:29:20:31:97:
ed:78:fa:2c:af:cf:7a:64:8d:a3:d7:d4:98:d2:e1:
11:d5:89:0d:3e:69:03:01:a4:a3:0a:8c:bc:5b:87:
8f:c6:a9:9a:2b:2a:7f:7c:b4:4c:35:40:34:68:fc:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:E9:89:DB:E4:44:C0:31:75:D2:96:82:86:A8:2C:76:88:F3:35
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ed:3f:6e:38:6c:25:21:0f:84:3b:52:ca:80:5b:92:aa:aa:
fd:0e:0c:d5:de:c4:af:24:01:a1:c7:44:b3:3e:54:20:61:1b:
87:cf:9a:31:bd:ab:ce:4c:8a:e9:14:fd:0c:d6:b0:b6:7e:7c:
be:29:c3:b2:df:a6:c9:94:8f:96:9f:a0:bc:09:52:61:7e:60:
34:ee:cb:92:9f:ed:af:44:1e:7c:66:e9:91:b2:63:7a:27:fd:
b1:49:9e:ed:11:3c:63:8f:27:17:16:a9:9d:08:2b:78:bd:19:
9b:bb:5a:8c:13:67:ac:8d:4a:dc:2f:2a:5d:1f:a6:72:db:3e:
82:50:59:fd:4c:bf:9a:6b:d6:8f:60:98:5c:d2:5c:06:3f:06:
99:87:90:c2:41:80:d5:05:c4:2a:59:ad:5f:7c:27:c9:ab:2c:
66:f0:b1:91:17:ca:96:b5:f9:5d:22:94:99:97:c2:30:07:40:
a0:de:69:97:82:e1:c7:5a:19:d2:76:b5:d3:d1:01:6b:ff:14:
2e:ac:7d:25:1a:73:5d:8e:6d:c2:ee:41:59:c8:c2:8e:ce:f1:
75:e6:1a:6c:78:b0:81:df:7d:e1:4b:46:14:42:97:03:b5:81:
44:26:d6:12:5f:87:b2:15:d3:f2:67:0d:17:91:2e:cd:ca:8d:
e5:5e:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:08:04 2026 by rpki-client