Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: 8qlUuBRe3QeGntLfaRg/CQV4PoTXF+hDnRSJU5Ur9+I=
Subject key identifier: DE:A5:12:67:5F:57:A1:6E:7E:AE:CF:CA:CC:42:E6:DE:C6:BF:15:FE
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019EB921D9613A349A44D7C15980B3F0BCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 067D
Signing time: Fri 12 Jun 2026 00:01:03 +0000
Manifest this update: Fri 12 Jun 2026 00:01:03 +0000
Manifest next update: Sat 13 Jun 2026 00:01:03 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: 6KOKchelS8YVnfadhg9m3KlAzpckzPbE4hJKQZi1itI=)
2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:d9:61:3a:34:9a:44:d7:c1:59:80:b3:f0:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Jun 12 00:01:03 2026 GMT
Not After : Jun 13 00:01:03 2026 GMT
Subject: CN=dea512675f57a16e7eaecfcacc42e6dec6bf15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:dd:11:e9:cf:d3:38:5a:8d:30:d7:65:d4:
dc:1d:be:15:55:f5:99:f0:cf:49:e0:95:ae:0f:41:
2d:1a:1f:bc:fe:fc:20:58:1f:6e:31:35:30:c1:f0:
10:07:d2:1e:79:e8:16:66:8a:90:8b:72:1f:ce:00:
27:4a:ea:46:5f:a6:7e:5c:a9:f1:41:22:3b:fe:b7:
a6:f7:b1:f3:bc:3c:eb:68:b5:b9:5a:b3:de:9b:5f:
f4:c0:e3:5f:a7:e3:a1:c7:9d:5e:a3:3a:6e:10:6e:
ce:c1:29:d3:33:69:56:a8:5a:f6:58:36:0b:00:60:
b8:36:44:8c:91:8a:84:78:4d:34:26:a2:b4:ec:a0:
e1:8f:b8:d7:5a:f8:58:e8:53:05:27:f9:cb:3d:cc:
5e:79:04:07:e1:86:a0:a6:e9:62:ac:89:ff:4d:e3:
77:22:19:15:21:50:30:b6:79:52:00:12:e0:fb:06:
dc:1d:0c:d9:59:87:85:3b:ff:c3:2d:bc:7f:01:95:
b3:ba:e6:f9:f1:67:bf:80:54:22:4d:2e:82:e3:4e:
57:fc:60:93:58:a3:b2:cd:c1:b7:dd:3f:e9:bc:36:
fe:dc:de:d4:69:95:b9:cb:01:89:c5:a8:ac:e5:8b:
01:fc:12:1b:a3:16:37:15:fc:3b:63:5b:eb:08:3e:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:12:67:5F:57:A1:6E:7E:AE:CF:CA:CC:42:E6:DE:C6:BF:15:FE
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0e:78:22:39:ee:af:f9:87:d8:25:69:55:45:a3:f8:51:ef:
d0:e6:4c:eb:94:de:2f:a5:8a:7d:b0:0c:0b:3a:c4:03:3b:a6:
79:af:b8:32:91:bd:fe:14:99:c4:b8:fd:ea:70:1d:1d:6d:3b:
42:42:b0:1e:7a:6d:03:7e:48:62:82:87:7a:3c:70:f2:33:63:
e1:3a:75:3d:2e:13:88:f1:dd:a5:65:52:8a:e4:de:db:77:e7:
0e:79:a9:f5:d2:ab:cc:b8:5e:cb:18:9f:6f:9b:9b:6c:ea:d2:
6b:99:2f:0f:df:5d:05:81:6d:90:12:ae:58:c7:79:19:04:8c:
d3:da:b5:8c:96:3b:c9:7e:fb:95:f1:62:52:b2:d6:0f:9e:d5:
3b:40:fe:79:a9:2d:1d:20:ab:dc:39:57:50:1a:c7:ce:f9:70:
8a:b2:33:98:f2:0c:73:c5:18:8f:b2:1c:52:5f:3b:ab:21:d1:
2e:47:66:5a:1b:39:b5:2a:01:d0:a1:e3:ac:b9:a4:67:7f:70:
0d:a7:fe:60:df:57:e3:07:ac:1a:a3:4e:48:7d:a5:40:20:28:
33:93:d6:e0:f1:92:81:c2:da:a1:ba:57:98:d5:45:05:23:37:
e0:d4:ec:cb:78:8e:cd:3d:69:a5:78:fb:51:a9:4f:dc:7d:bf:
ea:c1:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:28:30 2026 by rpki-client