Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: tfM75y1IKYH39Qji67zAspWMhtpYZaHl1ozsyU7E1cg=
Subject key identifier: 91:C5:20:F0:75:A2:B3:BF:56:AA:E8:1C:F1:87:ED:C5:B9:AA:A1:B5
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019EE85725DF6F79E4AA46D4DB86CA6A86C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1970
Signing time: Sun 21 Jun 2026 04:01:25 +0000
Manifest this update: Sun 21 Jun 2026 04:01:25 +0000
Manifest next update: Mon 22 Jun 2026 04:01:25 +0000
Files and hashes: 1: hRQCi57thYOlY1i0Di_3OEU8RbI.roa (hash: CiJ/s78ir+15MqFOT5aaVIhr5Aw/xJZZ/G08VuU4cSs=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: HzGNud0mKbBuW1cuTQPVqaoxU74F2hxttwMPVdVIjt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:25:df:6f:79:e4:aa:46:d4:db:86:ca:6a:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jun 21 04:01:25 2026 GMT
Not After : Jun 22 04:01:25 2026 GMT
Subject: CN=91c520f075a2b3bf56aae81cf187edc5b9aaa1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:77:e4:ad:d2:ee:77:e1:36:ae:fa:55:7e:
09:bd:03:6a:c7:6e:d8:dd:cb:e7:f9:26:ab:0d:49:
d2:75:f6:35:e3:9e:3a:5d:0d:68:14:49:c7:24:c6:
41:f3:b8:17:3b:34:7e:fd:5e:d1:83:c7:aa:18:ea:
26:02:ad:98:82:99:40:64:97:5a:27:52:57:48:a6:
c4:f3:0c:61:35:92:40:08:a0:8d:f3:8f:a2:69:cc:
e4:57:1d:b7:d3:90:1d:cc:ae:87:4e:69:44:9f:e1:
8f:ff:7a:06:9d:1d:1a:e5:28:35:11:d7:6f:16:77:
de:2d:2c:54:33:5b:4e:79:df:a9:40:e9:23:e1:c2:
d0:09:f4:a0:cd:e2:f8:7b:d9:1b:95:d0:8c:e3:ad:
c2:68:8b:22:85:06:04:dc:e7:14:33:8a:32:32:24:
d2:b2:de:1a:40:23:5d:88:fe:da:1b:6e:98:26:3a:
d3:61:2a:a0:cf:ea:ab:1b:df:16:c2:af:37:72:9c:
42:87:e2:83:ba:2f:96:56:2d:bc:73:f2:d6:42:44:
1a:aa:3b:f1:78:35:b1:af:dd:68:bb:9b:33:64:76:
0a:8b:30:d8:e5:b8:1d:a2:fe:1d:71:a6:e3:f0:33:
28:37:2f:01:cc:12:e3:6e:02:d3:f8:00:c4:e1:59:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:20:F0:75:A2:B3:BF:56:AA:E8:1C:F1:87:ED:C5:B9:AA:A1:B5
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:bc:70:9f:aa:98:7a:3c:ab:42:29:b5:2a:b5:96:03:3d:
35:5f:33:d7:88:64:b2:03:09:60:4a:b7:53:ca:f5:c1:1c:af:
00:d4:51:e0:85:02:31:9e:23:85:18:55:0a:aa:92:42:23:cf:
81:19:2f:0e:03:bb:35:92:7a:69:17:20:d0:1e:a6:0b:47:98:
a2:32:90:4c:8d:43:f5:87:ae:5f:82:38:64:e6:c3:44:0f:5f:
90:18:cc:18:85:c0:03:6f:4b:10:1f:4a:24:72:9a:3f:78:08:
dc:d8:a6:60:e0:ed:6e:df:63:25:95:b3:d7:6f:1b:15:18:49:
87:fa:9f:64:22:b3:30:6b:58:21:25:a4:b2:0d:d0:3d:a9:31:
39:1e:df:22:cf:64:a2:d0:56:65:34:13:07:05:f7:5f:a2:ad:
eb:85:f3:98:b9:cb:04:62:49:28:bb:1c:be:73:50:d2:b0:ee:
a9:5b:ee:d4:b2:62:11:05:1f:3e:9c:8e:07:24:4f:d3:17:a1:
5f:71:bc:90:c0:cb:a6:05:cb:08:d5:bc:b8:b4:f6:23:15:30:
c6:79:3b:54:c0:28:94:02:88:63:ad:cb:9f:0f:52:fa:c2:f6:
b1:a2:e3:1d:af:e4:c1:91:35:52:ef:1b:fa:28:21:91:51:4f:
a4:d5:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:34:26 2026 by rpki-client