Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: QPS4YtpJuNMVEKCUXWtp/N99/R8ZwGVIK20Lo9gTyFY=
Subject key identifier: 96:71:2E:6C:E4:9B:00:3A:8C:46:78:16:14:77:9D:23:76:5C:12:B9
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 019EB620A0CE3A3FE1FB617D32F4754EA0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 06CD
Signing time: Thu 11 Jun 2026 10:00:52 +0000
Manifest this update: Thu 11 Jun 2026 10:00:52 +0000
Manifest next update: Fri 12 Jun 2026 10:00:52 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: wNY1YR3tLCBJTA/wdE3go59b7tEXk8trF0ZmqMl9e20=)
2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:a0:ce:3a:3f:e1:fb:61:7d:32:f4:75:4e:a0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Jun 11 10:00:52 2026 GMT
Not After : Jun 12 10:00:52 2026 GMT
Subject: CN=96712e6ce49b003a8c46781614779d23765c12b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:36:b2:38:a4:a8:fa:27:7f:be:70:7e:00:
37:04:a6:37:8e:62:25:a8:0c:35:db:31:73:59:dc:
83:b3:d6:90:6a:05:d0:6f:a9:97:8a:b9:94:ac:d9:
03:65:cb:63:d2:c5:7f:18:1c:c0:c3:92:3d:a2:d6:
fd:3f:de:09:94:2f:39:c5:9c:e8:d1:27:9d:d3:a0:
5c:8f:d9:1e:c0:1e:48:ce:47:dd:3e:ad:2f:72:cc:
3c:1f:5b:98:31:0f:d7:9d:a3:e3:6b:d2:9e:d2:bb:
69:61:f8:79:8e:c4:b5:53:64:34:11:7c:4e:80:e9:
ea:37:c0:e0:15:68:b3:29:12:9d:b5:e5:d2:80:c8:
7b:27:8e:89:7a:2a:e0:37:ac:84:08:31:9e:74:c9:
c2:25:55:d1:f2:a1:fe:35:e3:90:15:f2:8b:f9:ef:
68:17:40:2f:9f:92:25:c0:42:c3:85:7c:92:04:fc:
79:ae:ee:e9:b4:3f:e1:d6:36:62:ac:36:fd:f0:c9:
ca:20:5c:70:0a:a3:af:7c:31:9c:3f:bc:9b:0f:04:
b0:cf:de:78:65:2c:27:6a:84:9d:e0:57:88:04:d7:
da:24:c2:c0:d1:d0:b9:ae:7d:e6:8c:24:bf:a4:91:
5d:f3:f9:37:3f:c6:28:bd:f6:68:17:53:e8:b9:0a:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:2E:6C:E4:9B:00:3A:8C:46:78:16:14:77:9D:23:76:5C:12:B9
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:d7:e9:48:ab:d7:a6:35:7d:92:a2:67:7b:4c:f6:79:40:
9b:f1:ec:eb:da:a1:c7:37:7f:4e:d9:48:80:7f:00:b2:d7:68:
f3:41:7b:40:01:a8:91:37:60:55:cd:6b:73:d7:cd:23:68:8a:
4e:93:1b:8c:de:4d:69:8f:77:7c:ce:45:b3:3d:ea:e3:96:27:
89:41:7e:ab:71:5f:df:0a:67:97:43:ec:aa:73:67:8f:35:d6:
55:e9:6d:f5:d6:71:e2:2b:d7:cc:a9:e1:bb:d6:b1:d2:fb:3f:
5e:f2:2f:ff:41:f7:cc:89:48:56:16:20:c0:ee:ad:94:84:1a:
0d:da:5a:9e:d4:07:86:99:a9:88:da:6d:1b:b1:5e:30:43:41:
2d:cf:27:0f:98:28:c7:c5:f2:33:7b:0e:4f:a3:b7:1d:63:01:
c4:56:be:c2:42:de:37:70:7b:05:f0:b1:36:39:5c:de:1f:f1:
f9:dd:76:7d:70:22:af:e1:fc:b8:e2:81:93:ec:59:71:d6:81:
49:d5:d8:4b:18:3a:c9:6e:a7:3b:fb:c8:87:f8:57:95:6d:a9:
2f:45:1d:11:d8:12:44:f9:50:ac:52:f2:46:06:91:4b:4b:27:
17:b8:9a:34:b6:83:42:74:a6:bb:0c:6a:60:4e:fb:bd:a8:eb:
fc:63:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:54 2026 by rpki-client