Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: pwdxyKdxHQnFKmbXzB2HvLIQulGWXuXpPJ8dlpmdfMI=
Subject key identifier: 75:A7:A9:AF:F3:F3:EB:C2:9E:98:BA:E1:72:17:62:C4:B9:CF:12:B9
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019E8FB7AB47C2BB3A1294204ED46AFD7F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 15EC
Signing time: Wed 03 Jun 2026 23:00:39 +0000
Manifest this update: Wed 03 Jun 2026 23:00:39 +0000
Manifest next update: Thu 04 Jun 2026 23:00:39 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: gip8EJXOZEK/JpHsO8NvuuMbI351TXepKYshgO7WTuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:ab:47:c2:bb:3a:12:94:20:4e:d4:6a:fd:7f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jun 3 23:00:39 2026 GMT
Not After : Jun 4 23:00:39 2026 GMT
Subject: CN=75a7a9aff3f3ebc29e98bae1721762c4b9cf12b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:7e:cc:d3:bd:3d:45:2a:96:f2:a8:bc:9b:
9b:09:1d:03:e0:15:75:42:73:71:1d:45:d5:0a:52:
b3:d4:59:5d:a5:7a:9d:e8:a7:9b:3f:04:23:ad:8a:
5e:db:77:b0:90:8c:aa:b2:93:7b:9e:23:9f:49:42:
c2:c6:cf:c1:07:22:6c:34:9a:83:53:c4:fd:b0:48:
b7:fc:56:14:0f:82:ea:2b:70:e4:ce:55:5d:e9:d7:
44:82:d5:61:ca:ec:97:eb:88:27:a7:55:51:d0:36:
7c:39:95:b3:b8:bf:57:01:18:69:2e:43:e6:70:cf:
ca:aa:b4:b4:3b:81:d2:7e:f7:e6:3a:63:d4:d5:3d:
2d:a0:e3:41:2f:c0:e6:95:d0:90:3c:1b:23:86:c8:
e1:94:95:e9:bb:a4:4a:72:48:ba:38:3b:3e:b4:51:
e5:5e:f8:c7:db:e6:7f:cf:91:69:e3:15:c3:9d:ca:
33:cb:15:5f:c6:90:1f:89:33:ab:a3:10:50:42:aa:
92:9c:83:e1:18:37:ca:de:e8:12:9e:fa:f8:53:b4:
41:9d:4c:6b:bd:a4:99:a8:9c:cc:6d:6a:1f:f3:2e:
dc:9c:56:5a:c1:ea:97:46:e4:79:f6:d7:85:c7:83:
c3:70:1f:01:38:36:e3:5f:76:78:c1:1d:7c:13:a2:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:A9:AF:F3:F3:EB:C2:9E:98:BA:E1:72:17:62:C4:B9:CF:12:B9
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:5d:33:59:cc:e1:24:9d:ea:8a:3d:99:3f:c4:0c:24:25:
9e:ea:da:88:09:80:60:92:b8:91:35:97:5d:15:af:e8:c2:4f:
42:f2:cf:5d:ca:54:4d:4d:91:e5:93:db:9f:b0:d0:8a:46:b4:
50:09:d1:9e:3e:fb:63:82:27:77:41:c9:d2:02:1a:63:55:c0:
11:e6:00:a5:2b:e2:91:99:cc:30:7f:c6:0d:2d:56:bd:23:23:
73:16:ee:3b:d0:e4:da:3d:b6:23:4a:01:04:07:3f:f6:4e:7b:
21:4b:ba:73:6c:85:70:dd:cc:e5:65:58:b5:b4:13:b6:2f:33:
b9:c2:27:8a:36:8e:cb:5a:80:bb:d8:e6:34:a6:1d:4a:da:45:
8e:91:a7:4a:11:86:6c:f4:55:e3:72:c4:ce:b9:9a:eb:73:d9:
30:d5:4f:df:69:b7:af:7d:45:a1:43:87:26:7d:7a:8b:68:de:
c5:bf:af:01:48:70:43:c2:5b:68:ff:e3:da:5f:eb:50:e6:59:
d7:32:2f:e7:77:da:7b:80:a8:68:4b:20:68:a9:e7:36:7d:e4:
aa:8d:b4:8e:b1:92:d5:91:56:dd:c8:bb:3b:4e:30:62:95:d5:
27:7a:ea:12:10:2d:80:c8:19:68:30:52:3b:08:2d:fd:eb:2d:
6d:ef:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:32 2026 by rpki-client