Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File: svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier: znqLW8GYzstpEXQ0FEkpfY8WI9fNTZ4ikO4YW+LkesQ=
Subject key identifier: 2C:AC:D9:F4:96:A3:29:AA:B5:39:48:0D:C3:E3:13:03:D1:65:11:25
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial: 019EB845A35590A9068C8B57394F70142543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number: 11FC
Signing time: Thu 11 Jun 2026 20:00:32 +0000
Manifest this update: Thu 11 Jun 2026 20:00:32 +0000
Manifest next update: Fri 12 Jun 2026 20:00:32 +0000
Files and hashes: 1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: CUPSvs4H5zLAoverQld+daiVX94yORphWlSLJZ7OVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:a3:55:90:a9:06:8c:8b:57:39:4f:70:14:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
Validity
Not Before: Jun 11 20:00:32 2026 GMT
Not After : Jun 12 20:00:32 2026 GMT
Subject: CN=2cacd9f496a329aab539480dc3e31303d1651125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:7c:2b:95:9e:46:bb:0e:3e:eb:bf:43:62:
99:fc:9b:cb:4c:7a:c4:8d:2c:16:d6:f1:54:6e:1a:
0b:0c:48:a8:72:f3:96:24:33:e7:bd:12:de:69:22:
ae:40:fa:6f:45:49:d9:3f:d7:c9:3a:ef:74:c7:98:
9f:2d:61:5d:59:7a:47:d7:70:3e:a3:58:88:c1:42:
89:90:a8:bd:00:31:36:ba:58:82:1b:2f:c3:03:46:
80:19:dc:2a:ac:db:c2:35:3d:c7:65:ab:99:6d:51:
ec:e6:0b:eb:aa:ab:fe:ea:14:7f:c4:de:42:2a:08:
e3:a0:d8:e5:52:09:7d:84:97:8e:05:8d:b6:77:9f:
d2:71:2e:f4:94:87:cb:bd:d6:b4:8e:6e:b0:f4:41:
1c:3a:10:d8:64:91:2e:1a:61:18:73:a3:d4:48:a7:
e1:50:b7:5e:86:f3:bc:18:71:91:48:ca:df:94:74:
86:9e:11:7a:1e:b0:1a:4c:48:c6:7b:ce:4d:75:17:
c2:76:e6:1b:50:97:d2:a6:f3:7c:ad:fd:be:fd:02:
e7:f9:a2:c3:db:f9:16:16:b2:a8:da:ff:04:bd:79:
52:3c:b2:32:e9:66:99:fb:9d:65:f4:ed:6e:3f:be:
e1:88:68:2d:66:6d:f7:ac:ce:a3:f1:e5:62:16:8f:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:D9:F4:96:A3:29:AA:B5:39:48:0D:C3:E3:13:03:D1:65:11:25
X509v3 Authority Key Identifier:
keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:fb:4d:2c:01:b9:0f:58:6a:bb:16:f0:13:9e:8e:08:52:
af:49:da:35:5d:dd:f1:cd:6c:b1:13:4a:9b:9f:0f:14:8d:f7:
e3:eb:5d:88:66:eb:6e:e4:5a:82:60:84:f8:1a:31:e1:4b:46:
3f:21:ed:b3:a8:44:c9:47:4d:d3:cf:5f:15:c4:e5:08:ff:e8:
2b:c1:38:81:e7:ef:f8:51:4d:07:79:9c:1a:2f:54:a3:00:f6:
14:19:fc:77:6b:d6:ce:17:0d:77:fb:c2:b8:82:f7:ca:dc:bc:
85:d7:e3:15:4c:e4:1b:28:c6:0b:ef:e0:f8:ee:59:66:b4:fc:
32:76:db:8d:26:7c:4f:cf:b9:dc:12:25:ce:bb:82:ee:d3:1d:
88:75:f6:6e:ee:db:13:44:43:e2:69:d0:c2:d1:55:2f:53:ab:
93:97:60:29:26:90:17:b4:6e:db:1d:87:32:16:f0:08:1d:27:
22:43:11:3f:a9:3b:04:a8:e9:b9:12:fb:a3:81:ad:bc:3f:26:
15:6c:e2:cc:37:90:0f:09:09:c6:3a:4a:de:35:d6:a8:2e:8b:
6a:9d:f4:ba:fd:5c:98:67:be:95:12:da:29:5b:d8:21:af:91:
7e:8e:13:5a:76:24:2d:a5:10:1c:a1:b8:8a:fb:af:e4:0b:5c:
5c:93:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:17 2026 by rpki-client