Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: vsZub0f4F84OKIMuF7UV87PpOuWFIaCvCtMqsuu0foI=
Subject key identifier: F4:BA:51:0F:45:F1:81:84:56:E3:C7:DB:82:BE:E8:6A:88:0F:E7:71
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019EB87CCA6F21E85CBF787E8A0FD53E8E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 21:00:46 +0000
Manifest this update: Thu 11 Jun 2026 21:00:46 +0000
Manifest next update: Fri 12 Jun 2026 21:00:46 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: RUAtPU0Yfku2ksIi7m9W2TKMLrbBW14bmxpehGlzj2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ca:6f:21:e8:5c:bf:78:7e:8a:0f:d5:3e:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jun 11 21:00:46 2026 GMT
Not After : Jun 12 21:00:46 2026 GMT
Subject: CN=f4ba510f45f1818456e3c7db82bee86a880fe771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:8c:29:2d:db:23:ea:bb:38:8c:e9:b6:22:
e6:d0:3b:0c:9b:b6:2a:22:7d:75:51:3a:97:26:dc:
ca:1c:7f:5c:31:98:a4:44:a7:0e:dc:95:62:c2:08:
8a:69:50:8c:36:b1:56:13:19:12:cc:06:c1:0a:95:
1b:5d:e5:36:03:5e:93:ef:18:51:ce:1b:a6:78:b0:
40:7d:32:45:8a:17:8c:10:60:26:03:1a:bc:60:27:
02:3f:e4:4a:21:c8:94:93:ca:e2:e3:37:2e:b3:68:
0a:b4:ae:1a:60:6c:cb:88:1f:85:88:4e:42:c4:84:
31:b9:3d:0b:23:d3:2a:38:f9:6d:6c:45:c0:93:a4:
ba:a9:18:29:20:c3:67:7e:a5:7f:f1:d4:ec:07:4d:
ac:5f:eb:0c:0f:9c:b3:46:ce:72:57:58:21:9d:26:
04:60:15:d6:32:bd:fd:e1:05:c2:25:58:96:16:fc:
b8:e8:99:c7:03:27:57:02:18:e7:ae:e0:45:51:2e:
77:8b:85:b6:f3:dc:21:9c:18:71:85:ed:1b:93:77:
f8:09:89:d5:9a:a9:78:c0:e7:73:c2:1f:04:1b:35:
2d:a2:eb:3c:d5:12:12:8b:ca:52:d2:0a:9c:5a:85:
df:89:6c:f4:7c:5c:07:a2:2a:5a:ea:b8:e8:22:9c:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:51:0F:45:F1:81:84:56:E3:C7:DB:82:BE:E8:6A:88:0F:E7:71
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:ff:f4:52:8c:2c:45:f0:46:0b:ab:ca:ec:4b:33:0d:61:
23:98:33:07:5a:77:05:24:aa:9b:54:33:d5:ca:51:3b:7f:8d:
e0:ed:81:a5:dd:1f:3b:9c:19:a4:98:15:da:1d:b7:1e:20:14:
17:68:b8:5c:af:c4:57:e1:21:36:3d:3f:05:a8:e4:2d:ca:7a:
3c:94:77:ae:f2:e9:22:1b:71:7e:be:5d:9f:0c:06:52:6c:93:
77:23:57:53:74:98:76:7a:b5:51:9a:c1:a2:bc:0e:0f:9b:0c:
33:2e:bb:a5:e1:fb:78:c1:9e:52:45:f8:14:36:99:c1:23:06:
22:3c:5b:44:f8:a8:d0:fa:94:03:75:6b:6e:d3:9c:5d:e2:c5:
39:ce:b1:07:d4:fa:b4:da:04:57:19:ad:e1:ac:50:48:c3:bb:
d0:1b:95:74:45:f2:9a:40:8b:8f:23:f3:7b:2c:5e:43:ef:e0:
65:a7:6d:ef:e3:89:69:21:5f:e9:d4:dd:c4:88:e8:0c:cb:8d:
e9:da:64:76:aa:d6:03:25:ea:6a:ce:85:91:6a:ef:05:f9:b4:
a9:9e:a0:0d:e2:e3:c7:b4:36:2a:de:b4:ca:24:64:af:5d:1e:
2b:6a:72:37:2c:73:34:27:17:7a:36:9f:59:04:3f:12:ff:4f:
4f:53:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:03:10 2026 by rpki-client