Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 2g5QSDdRI6Z6j8wWoh9N8z2mku0vhrd+Zd24VsycLBE=
Subject key identifier: 2C:41:4E:6A:F1:F8:98:E4:9B:3C:C9:CB:BD:26:82:75:77:B7:26:59
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019EB9213039F11BA94C5F6BAE6869CB0B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0E70
Signing time: Fri 12 Jun 2026 00:00:20 +0000
Manifest this update: Fri 12 Jun 2026 00:00:20 +0000
Manifest next update: Sat 13 Jun 2026 00:00:20 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: ZBWfkA+lUOiCKNVyBmxjcmUNaqJEP9uOsSZgUomXLHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:30:39:f1:1b:a9:4c:5f:6b:ae:68:69:cb:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jun 12 00:00:20 2026 GMT
Not After : Jun 13 00:00:20 2026 GMT
Subject: CN=2c414e6af1f898e49b3cc9cbbd26827577b72659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:b9:93:73:12:6e:97:d4:a7:29:6e:bf:06:
58:ff:de:c1:c3:f5:79:cf:aa:36:7f:0f:fb:0d:c3:
cd:97:57:94:b0:e8:cc:43:94:ff:b4:ff:c8:31:ef:
52:2b:09:36:d9:ca:4e:a0:ef:e5:cd:16:0a:1a:52:
8c:7e:33:56:8c:66:40:b0:7e:66:b0:8e:93:7c:fe:
e6:1a:da:a1:8d:5a:6f:24:f0:06:61:c3:a4:28:66:
a4:e3:f9:2f:d4:73:69:85:09:db:f5:24:8e:a7:e8:
91:4a:01:4b:2e:95:0e:95:bc:bd:93:34:bb:dc:7e:
9c:c8:c5:9a:e6:84:2c:ef:3d:1d:9e:b7:af:a4:24:
82:d2:bd:2f:a6:29:1b:4a:7c:cc:7e:a9:77:4b:d3:
dc:16:7d:12:d5:54:81:01:31:b7:42:67:29:8f:82:
73:0c:b6:98:63:e7:1f:0e:5d:0f:de:cb:05:5d:13:
fc:36:9f:80:8a:11:94:bd:0b:1f:fb:89:e1:33:4d:
0c:fb:b6:39:bf:02:fe:96:a0:8d:3f:89:fd:7e:27:
36:27:9d:8c:b8:93:ad:4a:88:01:09:e1:86:1c:b3:
ec:f4:ae:b4:16:57:af:11:a4:18:e6:ee:2f:aa:28:
0e:7b:5a:5a:86:c2:36:f8:5b:b6:5b:5b:7f:65:6d:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:4E:6A:F1:F8:98:E4:9B:3C:C9:CB:BD:26:82:75:77:B7:26:59
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:a8:9d:17:90:d5:9f:8e:e1:23:d2:99:8f:e1:7d:18:f6:
ce:00:22:a3:20:94:41:b2:db:66:51:d3:35:db:bf:5e:65:70:
9d:7f:f4:c4:b0:6e:8b:3a:39:86:3d:d7:2c:e7:27:1b:42:a4:
c1:68:35:d9:84:35:fc:45:e8:bc:9a:6e:a1:08:87:d4:3f:80:
be:db:b5:b9:fc:7a:57:0a:98:95:b0:f7:c8:cc:9a:fc:9d:7c:
92:b9:b3:94:cc:49:86:1a:f5:27:36:9d:2a:fd:34:c6:5b:1a:
88:d5:fc:b8:6e:1f:84:98:54:28:7e:dd:90:8b:e8:7d:e2:cf:
a7:55:48:d3:f5:e5:dd:95:c6:ed:d4:9c:6a:18:70:9a:37:b7:
d2:58:03:a3:f1:6a:25:18:6c:b1:e3:95:17:fa:19:9b:ae:a5:
2c:8d:d5:d9:70:e9:de:6c:fb:30:69:4c:52:fb:aa:02:d2:9c:
a7:a9:d6:4b:b3:ce:94:4f:70:1d:30:60:e2:10:27:bb:7c:db:
fd:40:a2:e2:0c:ba:27:55:f0:8f:93:09:34:99:e8:10:87:2c:
d7:66:55:b4:d7:6b:41:40:03:99:d5:bf:9d:65:59:d2:a5:ed:
d5:84:d1:73:49:39:ff:3c:c3:0c:18:2e:ed:00:9f:88:08:5b:
1d:c5:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:58 2026 by rpki-client