Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: uBb2ogj8LgIC8/rQHX/YI0e8Vl3tJPrkFxVyctkNDHQ=
Subject key identifier: 7B:38:73:80:4C:04:AB:1F:F1:65:A7:36:3B:28:5A:F8:93:71:CA:C5
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019EB9C6245EB42FDEAD5F83D9A9EE9F4E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 03:00:30 +0000
Manifest this update: Fri 12 Jun 2026 03:00:30 +0000
Manifest next update: Sat 13 Jun 2026 03:00:30 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: BqBlt6KhEMcnHiJsN3ed+4s03tTUXhW72WU8AEPFqL8=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:24:5e:b4:2f:de:ad:5f:83:d9:a9:ee:9f:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jun 12 03:00:30 2026 GMT
Not After : Jun 13 03:00:30 2026 GMT
Subject: CN=7b3873804c04ab1ff165a7363b285af89371cac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:4d:23:96:7d:74:59:50:e2:80:6c:e2:63:
20:69:1b:d6:bc:86:a2:60:b9:89:c9:fa:20:24:39:
48:a5:7e:57:07:11:82:d7:9c:88:ed:95:3d:d6:17:
69:a6:71:0c:b0:f3:68:d9:90:c4:3e:54:ed:7f:f0:
96:91:63:86:21:24:68:80:c6:b4:7e:2f:01:7e:66:
b0:e2:fd:aa:e4:90:33:f5:5a:56:1f:07:f9:22:d0:
34:95:60:20:05:e8:bc:a1:2c:d0:e7:2d:cf:b5:0c:
10:f0:95:f8:2b:cd:d3:e1:5f:7d:93:90:f0:42:2d:
c6:b5:63:0e:39:d9:b4:56:bf:5e:ab:c0:7d:ec:44:
8d:c2:14:e3:b9:df:b2:c4:cb:f7:8f:d0:0e:a7:20:
34:9c:c4:08:2f:9a:44:82:0d:37:0b:d3:34:fb:7d:
16:13:8f:9b:8b:d3:41:9e:88:16:82:09:7d:da:31:
e3:a1:c8:29:1e:f8:ec:9b:a5:a0:bf:f0:77:32:8b:
f7:a2:28:b9:73:43:fb:16:14:88:de:b4:df:fa:0b:
9a:c1:e7:0a:dd:1f:dd:d6:93:9c:f0:3f:a2:b3:b2:
9b:5c:b3:9a:04:bd:f0:32:ad:fd:23:d0:ef:3b:f9:
21:4d:37:6f:e9:bf:57:a9:71:5e:85:5f:80:bd:74:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:73:80:4C:04:AB:1F:F1:65:A7:36:3B:28:5A:F8:93:71:CA:C5
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:24:cc:28:51:f2:91:51:bc:79:a3:71:1a:ec:34:c9:58:
cc:5e:4a:f1:be:69:86:24:29:2d:36:fc:8f:b7:1f:52:2c:20:
60:6b:55:9b:d2:07:b8:a1:1f:97:64:b4:47:13:bc:62:f3:ec:
0f:ba:8e:b0:e3:b5:dc:07:4f:ea:15:21:25:16:bd:a7:a0:ce:
55:82:f6:11:0e:c2:22:a6:f7:c4:6d:c0:e4:73:3c:e9:d6:90:
f0:30:91:fa:28:14:e5:13:f4:a1:ee:64:64:55:55:b9:cb:be:
7e:8d:af:da:51:dc:a6:21:58:e3:5f:4e:72:01:4f:6b:9d:f3:
a7:fa:c1:f9:89:8e:0e:9a:d6:76:33:0c:f9:92:d2:ae:52:93:
8e:65:30:a9:50:c6:67:95:bc:cd:15:5d:c6:74:15:e0:41:2d:
51:ad:48:32:ea:66:56:30:82:ab:0e:1e:9d:07:28:96:d9:62:
75:7d:f6:c0:44:5b:1c:d4:23:81:87:5a:de:db:8f:6a:04:6a:
92:cd:09:01:71:d0:a6:31:d9:05:5d:39:08:54:e0:83:83:16:
17:40:e1:8d:65:7d:12:2c:b4:46:5a:85:1c:35:80:db:f2:24:
f1:b7:f4:e5:4a:14:05:3d:09:6c:3a:14:59:25:0d:b9:9a:9d:
30:81:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:29:15 2026 by rpki-client