Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: YWcvSCVXdxpXbJ1ohE4EXlcYIAWbGQGNxKsKvn+TCUI=
Subject key identifier: 4F:4E:19:A6:49:D0:1A:89:DA:0F:EB:6B:CC:09:89:65:E4:BD:ED:7A
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019EB8B4566947B81A9AD7FC9DBD70F38547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 22:01:26 +0000
Manifest this update: Thu 11 Jun 2026 22:01:26 +0000
Manifest next update: Fri 12 Jun 2026 22:01:26 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: sNGMkdHk48q0dXoQ7oBgC4o14P1xM7YdfglwovbHUcs=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:56:69:47:b8:1a:9a:d7:fc:9d:bd:70:f3:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jun 11 22:01:26 2026 GMT
Not After : Jun 12 22:01:26 2026 GMT
Subject: CN=4f4e19a649d01a89da0feb6bcc098965e4bded7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:51:55:fb:a4:f3:21:ee:02:7b:cc:21:22:
93:9f:84:c8:df:84:e7:99:cf:40:b1:b3:c4:4d:24:
f2:76:25:01:9c:91:7c:21:6a:5c:ec:28:37:3c:5f:
a3:2f:32:a7:e7:73:31:42:bd:ad:b4:72:ab:5a:23:
59:9f:bb:13:0d:0f:af:58:1e:d1:53:0d:c7:24:09:
15:51:e0:79:f8:9d:5b:2f:cb:69:fb:ce:5a:ed:fc:
5a:48:46:4c:81:5d:1c:db:f4:b6:b5:d6:20:b8:c4:
ee:11:dd:31:4f:0b:af:00:79:1b:b8:28:ca:59:bd:
38:05:ac:11:2b:54:c9:1c:0d:3b:b7:b5:f7:26:ad:
0a:ae:bf:e9:8a:cb:57:08:83:61:da:6a:2a:8e:33:
9f:6e:cc:53:67:66:46:94:2b:07:08:36:2f:b6:d7:
d3:bf:54:10:40:df:c4:66:f2:9e:c9:08:9f:4f:a2:
40:86:4d:03:ad:c2:f6:78:47:02:b9:21:9d:ae:a9:
66:87:65:43:d4:c0:4c:c2:08:d8:90:84:97:23:d2:
3c:cc:ff:62:9a:2a:9f:d7:5a:ba:ba:e7:a4:e1:49:
14:c5:50:4b:1c:63:a3:45:ab:b7:ef:cb:6a:a5:21:
03:80:9d:72:ec:6f:d8:22:82:73:1e:8b:9c:10:77:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:19:A6:49:D0:1A:89:DA:0F:EB:6B:CC:09:89:65:E4:BD:ED:7A
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d2:8f:f2:1f:11:91:44:7b:14:b1:68:3e:a1:b4:eb:c5:4e:
dd:e9:7a:c5:7e:a3:53:81:bb:27:91:ed:5d:85:89:cc:95:58:
36:fc:7c:f0:c9:f3:cd:ff:88:c5:75:8b:13:bf:4f:9a:f9:5b:
ca:f6:ff:eb:9e:e0:1d:5b:56:98:53:01:8a:5e:08:c8:b7:aa:
ea:a0:85:95:53:75:a4:91:73:b6:41:10:06:d7:5c:88:53:e2:
68:58:7b:d4:f6:ca:f3:60:96:2a:1b:2b:c0:9c:dc:07:75:8e:
42:3c:fe:2d:96:e6:66:d6:54:38:bf:b2:3d:07:dc:83:3d:b6:
b8:d9:34:bc:97:c0:39:ac:df:a3:d7:ff:e6:0b:4a:bc:ab:fb:
35:23:ce:fb:f7:e9:90:df:e0:1c:cf:b7:48:eb:7d:d9:de:b8:
58:4e:cf:a2:80:b5:21:c6:b1:6e:8a:62:df:8f:46:a1:89:d4:
95:e1:2d:3d:a4:91:62:2b:1c:0f:14:bb:c0:6f:f0:93:bd:fc:
a3:73:91:92:fe:ab:d1:f7:7d:76:a1:7a:86:d2:71:a7:ca:57:
8a:9b:cb:d2:6d:20:59:e3:61:05:20:a5:1e:e5:75:1b:4e:a7:
db:fb:af:66:bc:e3:c2:e1:8a:53:73:d6:da:3e:93:c8:53:54:
b5:b0:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:06 2026 by rpki-client