Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: 4ce5onxsIJlwUU5Hoau9QckuuFI83yxFql25N5lEjF0=
Subject key identifier: 98:FE:4B:87:5D:97:AC:2D:1C:55:BF:33:49:4A:CA:CB:7B:44:DC:4A
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019EAC7944F45BBD1BCE68C7F75276F57343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1952
Signing time: Tue 09 Jun 2026 13:01:28 +0000
Manifest this update: Tue 09 Jun 2026 13:01:28 +0000
Manifest next update: Wed 10 Jun 2026 13:01:28 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: EkULng0liMABcmffuc31kYlFbT/Q7IL6Da6MwNpAKlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:79:44:f4:5b:bd:1b:ce:68:c7:f7:52:76:f5:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 9 13:01:28 2026 GMT
Not After : Jun 10 13:01:28 2026 GMT
Subject: CN=98fe4b875d97ac2d1c55bf33494acacb7b44dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:56:49:59:70:2c:93:3b:9b:a6:46:06:8f:
6b:b6:f0:ef:5c:a8:a2:13:f3:4c:ad:2e:8b:ed:70:
da:32:76:fd:60:cd:b7:7e:6f:13:1b:c7:ec:7d:ef:
77:9c:9f:0f:d4:e5:c3:67:2e:51:9d:e2:1c:cb:f6:
ff:7b:a6:c7:5a:c0:2b:bd:95:a4:25:f2:57:0b:c4:
ee:f4:30:6b:6c:52:b6:19:4d:41:19:ec:6a:0f:ae:
1f:63:9a:e8:9c:62:ee:8c:ca:79:bd:be:07:4e:6c:
9a:7d:1a:c3:e1:94:f4:83:e2:c7:5a:da:36:3b:20:
05:25:48:6f:7e:15:18:2c:8b:f7:49:1e:4c:56:5d:
76:47:79:ad:53:30:0d:17:de:fa:93:f1:60:2b:28:
ee:cc:8f:79:9b:77:57:20:d4:a8:a9:c5:98:8b:05:
05:aa:f1:6a:bf:34:91:54:32:0d:0d:ec:56:25:b9:
6c:74:e4:2a:f5:bd:8c:4e:f4:a2:a4:ff:f2:21:f2:
d2:fd:87:34:65:04:3e:e5:0b:ce:85:d5:36:95:0e:
10:a3:be:03:93:83:50:02:ef:83:86:ac:2c:8c:01:
f1:c0:53:7b:d8:69:73:28:bf:34:2b:86:03:3e:4d:
70:99:66:7b:d2:69:e8:cf:c3:c4:b5:65:4d:a2:51:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:4B:87:5D:97:AC:2D:1C:55:BF:33:49:4A:CA:CB:7B:44:DC:4A
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:75:78:b5:f7:6e:85:84:17:c1:7a:17:e7:e1:57:88:b6:
82:89:a7:fa:08:b3:4a:dc:98:e9:eb:60:40:98:93:9e:15:fb:
68:d8:2e:20:08:0e:67:b7:85:59:d7:ab:29:2c:55:ac:94:96:
28:9b:bd:66:d0:26:38:d4:1a:67:15:90:7a:7a:b6:47:42:55:
31:14:eb:f9:9f:48:c7:f8:91:79:66:ef:00:e9:da:00:3a:91:
a2:f1:3a:ba:98:07:ba:58:0a:6a:a1:db:d0:84:6d:fc:33:73:
8c:64:1b:9f:d9:e3:16:f3:d4:39:5e:b4:2e:e9:88:66:8a:e6:
e0:3a:fc:2b:ba:d2:99:b6:4d:c6:84:e9:29:e4:99:35:61:36:
ce:88:72:a0:bc:b0:41:96:47:37:43:99:57:7b:a4:2f:0d:1f:
e1:be:a3:53:93:9d:21:ad:1e:83:2a:e3:cb:28:1c:b1:a4:87:
19:d4:4d:b0:f3:96:4d:83:52:0d:36:c3:b8:0e:b7:b1:ab:ae:
34:75:ff:a1:25:75:86:0d:d5:c5:9f:ce:5c:21:bd:2c:da:ea:
9e:c0:6a:c4:c0:b5:e8:0f:c2:a6:51:7f:79:70:c2:3e:c4:40:
2e:ea:66:0b:19:83:e0:ce:f4:a2:1e:d6:6e:3a:61:eb:18:3d:
4a:fe:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 21:55:25 2026 by rpki-client