Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: Zlpjla8vDqvgddEEs64+vO0U1mKO1R+jbtCiMF94d2o=
Subject key identifier: B4:03:D9:C3:4E:75:64:DA:E8:2D:64:A5:AA:16:46:F7:A9:CC:22:C3
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019EB87CBE9BC5E5D1BC7C489CC5C5E475FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 21:00:43 +0000
Manifest this update: Thu 11 Jun 2026 21:00:43 +0000
Manifest next update: Fri 12 Jun 2026 21:00:43 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: aEI1YLkNgd9WDLGsg3tqoziAE1jLMF2jhGqPpesiIIk=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:be:9b:c5:e5:d1:bc:7c:48:9c:c5:c5:e4:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jun 11 21:00:43 2026 GMT
Not After : Jun 12 21:00:43 2026 GMT
Subject: CN=b403d9c34e7564dae82d64a5aa1646f7a9cc22c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:b6:ba:bd:7d:a8:85:cf:44:51:03:b9:bc:
84:20:62:7f:1b:43:8a:ee:c2:30:b6:92:31:b3:b3:
86:40:d3:06:d6:99:5d:33:1b:e0:21:87:24:51:ae:
61:6f:fd:a5:e6:44:78:fe:63:43:f0:73:15:c0:00:
6d:18:6e:7a:bc:5c:7b:b7:93:09:72:63:49:94:b8:
1c:a4:1a:6b:20:9a:6b:ae:bd:79:b1:ba:50:04:35:
48:51:dd:99:7b:be:82:29:ff:d2:d0:d9:61:b4:b6:
dc:04:80:fd:72:69:32:60:40:e8:e2:09:b7:22:d9:
a6:55:3f:48:a1:76:bf:fc:7f:71:77:62:0a:9e:f7:
6b:9b:1f:1a:6c:d3:e7:f1:5b:77:42:1c:6c:4b:99:
6d:80:72:76:66:1b:d7:95:61:65:13:0a:84:fb:16:
a7:d0:0f:d3:13:c6:f4:d8:bb:4b:16:b8:bc:a4:ea:
2b:e1:c3:b2:f0:33:0b:12:ae:60:19:ed:72:33:95:
e1:5b:4d:bf:36:86:9b:e7:d7:b0:2d:a2:07:97:69:
97:10:9c:7b:1c:e1:f7:17:3e:d0:ed:a0:75:49:48:
a0:86:48:85:72:d5:6b:0f:bf:f3:14:29:0c:21:81:
f3:29:53:88:0d:18:db:56:cd:a0:d3:f6:0e:32:68:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:D9:C3:4E:75:64:DA:E8:2D:64:A5:AA:16:46:F7:A9:CC:22:C3
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:6d:d8:9d:cb:c0:a1:54:e5:7a:33:9a:d9:da:7e:3c:d6:
68:3f:fc:34:02:a5:57:e0:6c:72:cc:91:9d:3c:0a:d7:94:d0:
90:f2:c3:ed:5a:af:0c:33:c5:ea:6c:f8:65:09:06:f3:05:98:
e9:2e:41:8f:0d:96:b7:40:99:09:f9:6c:14:f9:02:b8:74:a1:
04:2d:8d:ee:19:8e:b5:ce:4d:84:4b:5b:f8:d7:91:1c:c3:8f:
11:13:f8:8b:f4:80:82:da:98:b8:0b:a3:4e:63:db:a5:07:f7:
1c:06:9c:1b:a1:5f:e1:94:58:2a:6a:2a:85:20:73:96:2a:63:
f3:b7:c2:83:9b:ea:d0:41:3f:1c:42:c1:dc:3a:41:0a:e6:5c:
1b:b1:45:9a:cd:77:3f:f3:1a:69:41:b1:8d:b7:8c:11:b3:2c:
1b:7f:ae:ac:b6:7e:41:9e:6a:c6:0e:d4:a8:5f:2e:26:cd:c2:
b7:be:19:47:e8:1e:ce:98:ba:e3:97:be:88:49:0a:b9:77:48:
ca:c5:e0:dc:5b:bc:1e:e1:bf:4d:24:7f:5b:85:07:53:ea:3f:
24:1f:be:d4:b2:09:f7:11:26:fc:1d:de:a0:8c:f0:73:3e:74:
e5:74:6e:5d:75:a1:54:42:03:3e:a4:d5:87:a7:c6:01:fc:b6:
e7:ac:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:43 2026 by rpki-client