
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: H/ays+iTIE5PcxgsxfGjUTFK3MHEd1gZuoT7UTqr5Nc=
Subject key identifier: 9D:4A:27:EA:20:9E:00:42:A9:BD:87:2D:7F:48:9B:53:1C:36:D8:FD
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019EB7A0B5312A593B9402B46F62ACDC1B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 1970
Signing time: Thu 11 Jun 2026 17:00:23 +0000
Manifest this update: Thu 11 Jun 2026 17:00:23 +0000
Manifest next update: Fri 12 Jun 2026 17:00:23 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: kbxAoUwUZV95bCI+mn+4G9O91RNPUEVp/PqMkQg/pUk=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b5:31:2a:59:3b:94:02:b4:6f:62:ac:dc:1b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jun 11 17:00:23 2026 GMT
Not After : Jun 12 17:00:23 2026 GMT
Subject: CN=9d4a27ea209e0042a9bd872d7f489b531c36d8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:6f:26:6c:ad:01:c7:ce:d5:02:31:df:4f:
24:7c:b2:47:f0:ad:81:e7:c6:c5:4a:82:ec:fd:42:
43:79:ff:74:47:a7:c9:d2:bf:69:42:99:88:00:79:
26:bf:2e:fb:18:6c:af:64:6b:2d:01:41:3b:47:b0:
76:4c:bd:55:49:0b:a3:20:06:f1:18:a5:76:fc:2a:
d2:74:07:81:8c:9f:60:ff:52:86:21:c5:b2:02:9a:
e0:9d:96:1a:be:eb:5b:f8:e1:85:d3:76:9a:5a:2f:
0c:eb:66:5a:f0:e3:ea:e6:5e:65:2c:41:96:ae:2e:
bf:97:0c:c1:d1:3a:37:45:44:43:59:97:cf:6c:43:
18:98:aa:24:a5:87:81:bc:06:24:c2:3a:ce:f7:4a:
70:b0:ec:cf:14:09:4d:cf:13:2d:41:bd:7e:1a:bc:
34:92:ea:17:b8:1d:ae:e6:fc:88:2e:69:6f:e4:5a:
04:e1:31:a5:2f:d9:3d:9b:51:18:11:fc:d4:7c:11:
4c:55:0c:20:9b:fa:c1:e5:72:94:38:00:56:5f:5a:
0d:0f:22:98:40:1f:f8:ad:0f:ba:c3:ca:af:16:e5:
1e:2e:9d:de:31:03:18:c5:75:5c:cc:cb:f1:53:cc:
8d:e2:5c:ba:f3:ab:8f:8d:53:2a:58:b2:f5:d3:86:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:27:EA:20:9E:00:42:A9:BD:87:2D:7F:48:9B:53:1C:36:D8:FD
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a4:dc:33:81:36:df:f6:4c:94:a4:e6:93:72:f9:a1:74:05:
60:24:e8:32:73:59:9f:2d:93:91:55:e8:e9:a3:c7:da:83:f9:
9a:1a:ba:81:06:72:d3:bf:23:d7:b3:7c:c6:5a:2f:1e:14:70:
f0:db:9b:9a:6e:33:73:0b:aa:af:1a:c7:0f:8b:0e:9c:7d:2c:
48:09:4e:1f:41:d4:00:c7:86:e3:73:01:a0:63:2a:69:8e:c6:
a0:d2:45:c7:ed:f8:eb:16:2b:7d:59:e8:b8:78:53:55:03:65:
8f:d3:ef:9d:f9:64:40:8e:92:95:85:0b:23:ed:d0:f4:f8:a4:
99:37:4f:27:23:16:5d:48:f9:80:67:4e:0e:66:c0:b2:75:59:
24:0a:00:ca:e1:96:58:e2:56:92:63:71:9f:98:c9:9f:6b:92:
b2:03:68:49:6c:d3:01:17:36:d3:a1:8d:24:5b:51:af:a7:e4:
2b:a4:7c:a8:d8:4d:e9:71:3f:5e:1d:39:26:64:3b:c5:b8:47:
dd:dc:12:b2:94:0c:c1:13:14:1e:51:b8:84:5e:1c:bf:41:c6:
e2:ca:21:46:a8:c8:cd:79:70:59:a8:a6:40:61:d4:60:6e:ab:
bb:e8:72:f4:54:b3:44:76:b2:26:bd:2b:0d:33:5c:d4:6d:0e:
8d:c2:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:38:47 2026 by rpki-client