Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: r5QtVJ/JSe5MN2UwYrp3ayfO1Sl5mIsDsCTf09s/Vfo=
Subject key identifier: DB:89:62:F6:28:AC:97:FF:B5:64:4D:61:D5:9A:34:CA:EE:44:4E:DF
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019EB9FDDE91CA5220829C2C13543F75BACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 7C
Signing time: Fri 12 Jun 2026 04:01:22 +0000
Manifest this update: Fri 12 Jun 2026 04:01:22 +0000
Manifest next update: Sat 13 Jun 2026 04:01:22 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: jjS6RqTEMaz0zrAfjPFPhztVnrrtAZRBHlQ4B3XEp+U=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:de:91:ca:52:20:82:9c:2c:13:54:3f:75:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Jun 12 04:01:22 2026 GMT
Not After : Jun 13 04:01:22 2026 GMT
Subject: CN=db8962f628ac97ffb5644d61d59a34caee444edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:26:a1:79:9b:8a:f2:d0:1b:d3:c1:fd:71:
64:86:0a:78:e7:1f:d9:dc:61:bf:09:be:32:1a:92:
96:91:7b:ef:5f:5c:f8:f6:1f:69:be:7c:d6:57:9e:
a5:00:2d:bd:00:2c:7f:8d:cd:65:cb:16:7d:0c:3a:
c0:ee:25:15:cb:43:94:ac:57:3f:83:b0:94:68:7f:
1b:62:16:ec:90:60:84:c8:67:36:59:4d:26:38:80:
6c:29:16:5b:2a:75:c7:b9:fe:6a:4a:e4:e7:19:e4:
78:08:98:41:4e:28:78:24:7e:13:34:91:c5:af:23:
10:92:47:4f:15:62:ae:2b:bc:f4:3e:92:0e:82:3b:
33:14:04:ef:b1:08:05:89:a1:d6:8f:40:12:79:50:
f5:20:69:f6:e6:21:38:17:ec:bd:fe:4f:a6:29:42:
1f:d5:ef:87:ba:69:d2:cf:1f:e0:b8:fd:d4:54:51:
ba:56:c6:e2:cc:6b:42:69:37:a4:a6:60:d8:24:7b:
b3:c0:85:ca:3c:85:fa:de:5a:f8:e3:77:d8:9c:6c:
1b:eb:b8:88:9e:b5:7a:0c:64:58:44:2d:61:81:c4:
b4:f8:a8:a3:4d:09:21:ef:23:29:c7:a3:ce:91:97:
c2:ee:d4:99:6d:6d:76:1b:9e:67:db:22:43:84:83:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:62:F6:28:AC:97:FF:B5:64:4D:61:D5:9A:34:CA:EE:44:4E:DF
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:99:c2:4b:3f:bd:dc:c2:18:27:8f:71:9c:8e:27:99:01:de:
d0:84:87:2d:c1:a8:6e:62:73:eb:60:f7:83:73:4c:1d:4c:7d:
b6:45:9e:79:c0:a6:9e:3d:ef:5e:58:b6:56:bf:36:5b:a1:8c:
bf:b2:0c:bf:c5:e5:93:32:53:e4:da:f6:64:91:cd:14:9f:8a:
fe:f7:21:05:7f:cd:77:e6:32:5b:14:8c:a8:91:a7:ea:81:58:
38:63:99:78:b4:19:91:e5:28:42:dd:4a:ee:23:6b:f6:d7:90:
9e:e3:07:f5:06:c8:29:30:9f:59:6c:cf:99:d2:d6:6e:3d:23:
c6:c3:e6:5d:20:40:8d:78:ed:c0:69:fb:7d:8f:b2:d7:5a:75:
3f:29:74:13:89:a8:aa:af:38:a0:0f:72:b8:a1:e0:ba:33:ec:
24:67:db:48:7c:d0:d3:aa:4e:4b:72:b3:7e:a0:ad:f3:85:d9:
3b:e7:9f:13:ef:fd:ad:e8:82:07:f9:46:f6:f4:dd:ce:21:c0:
e8:c5:38:24:79:db:21:fc:3c:9f:f1:27:fe:b3:2b:3e:c1:6e:
05:a7:ad:26:69:24:20:38:ef:91:50:51:a3:d5:3c:2e:6d:f5:
1c:f8:f2:39:63:a0:45:f3:7a:bb:2e:14:da:71:47:95:70:bb:
21:e4:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:07 2026 by rpki-client