Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: 0fXlJTnvq0o0r100TLqkPsT0cbspCRGTjlO8fLnKn3E=
Subject key identifier: B2:92:F5:98:69:AE:E1:AC:E0:87:A6:4B:55:63:D1:92:D3:78:13:A9
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019EB8EA58BFD77ABE920C9C0D4BF0CB6F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 18E6
Signing time: Thu 11 Jun 2026 23:00:26 +0000
Manifest this update: Thu 11 Jun 2026 23:00:26 +0000
Manifest next update: Fri 12 Jun 2026 23:00:26 +0000
Files and hashes: 1: AWdnvO_fGYURQMiK3WsDBvu78og.roa (hash: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE=)
2: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: FDmoMyXPR96jCij84jpjAN6n0z4AGXLEitQiIQmqZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:58:bf:d7:7a:be:92:0c:9c:0d:4b:f0:cb:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jun 11 23:00:26 2026 GMT
Not After : Jun 12 23:00:26 2026 GMT
Subject: CN=b292f59869aee1ace087a64b5563d192d37813a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:5e:3c:9f:52:43:1c:69:f4:36:b7:a1:5f:
c2:a7:41:c4:2b:8b:2a:6e:7c:45:86:59:cc:43:ec:
02:9a:e6:81:18:1a:37:d8:2b:d4:52:4d:88:4b:c7:
15:ee:6f:a9:68:02:08:49:d7:d1:66:47:29:ca:74:
be:be:c3:77:96:d0:74:00:f5:59:34:47:18:86:91:
b8:06:1a:57:f9:95:1a:c5:26:f2:f9:d2:b5:e3:f3:
75:72:c1:5f:fd:33:7d:1d:5e:1d:7e:cf:11:75:e8:
ae:9b:ec:bc:f0:77:08:60:fd:ec:f1:33:df:ed:6b:
f1:e8:6e:31:56:3c:34:3e:9e:8b:85:e4:a5:84:19:
92:24:03:5a:14:90:5b:d7:87:82:4f:bb:44:21:29:
a4:58:62:db:4a:ed:8b:47:7f:fd:e8:18:a8:64:61:
d3:6e:06:6d:2c:c2:4b:1e:00:2a:94:18:5a:d9:ce:
c7:13:e7:d9:d8:b7:fa:e3:dc:1f:8c:46:bb:12:fa:
ee:7d:68:17:01:b3:9f:d4:64:71:d4:88:f0:20:67:
87:42:d2:fd:0f:90:7d:e5:e9:0f:62:51:35:9c:3b:
f2:56:26:8b:ff:1f:ff:01:f7:f6:41:ff:52:9b:7c:
e3:68:02:3e:cf:a9:14:a1:d3:0b:35:0a:44:ef:60:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:F5:98:69:AE:E1:AC:E0:87:A6:4B:55:63:D1:92:D3:78:13:A9
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:16:f3:42:19:23:a5:59:f7:96:b3:0e:49:c8:94:bb:e1:0c:
fc:c5:ce:b0:9a:2d:25:82:03:ad:98:d8:6b:c0:ef:82:e3:5a:
4d:f4:33:dd:d4:96:1f:b9:a6:34:b7:2a:68:7b:28:f2:2c:b1:
6a:89:75:10:f3:49:e2:15:ec:1c:36:80:93:76:05:04:fe:11:
e7:f9:cc:ab:27:a2:54:77:6c:4a:97:b7:18:40:a1:2c:42:7a:
5d:e3:2f:89:59:35:d2:d6:fa:6b:4d:fb:97:bf:eb:4f:25:da:
95:ba:ca:cb:3c:13:ee:4e:77:c0:53:79:43:f1:8c:b9:60:d4:
d5:e5:35:6f:42:e5:b5:bc:0f:75:5a:c0:9b:64:76:cc:de:a1:
9a:31:a8:5c:b3:3c:96:81:c9:5f:c1:04:c6:55:a7:2f:f3:c0:
67:06:25:91:b2:67:89:17:19:cc:d3:73:95:4d:bd:4c:34:8b:
bd:7b:6f:4d:69:f7:e6:27:72:d5:e5:6b:b7:68:8b:cd:ee:40:
7e:92:b9:29:14:5b:53:67:5f:e9:0b:f1:61:59:1b:71:65:b5:
66:78:ac:fd:68:ed:5f:04:cf:83:39:8b:f8:75:59:79:a7:17:
8a:a8:5d:8e:46:45:e9:ce:27:54:80:9d:fc:24:c9:b7:a3:b4:
e2:c2:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:15 2026 by rpki-client