Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: XGf50yYHSftQFe62SA2ajDOzATitO8W7+2crSd4Z8JQ=
Subject key identifier: AC:E2:86:46:3B:E1:FB:55:1B:29:AF:B7:48:AD:A4:39:EA:3E:92:74
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019EB9FD2C1C5ABA14B49D637662D6C6EACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 04:00:37 +0000
Manifest this update: Fri 12 Jun 2026 04:00:37 +0000
Manifest next update: Sat 13 Jun 2026 04:00:37 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: fd6NWWVghZ1oc2WdSNVf9WZnKeOdlcSQoW0b3Co+UTg=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:2c:1c:5a:ba:14:b4:9d:63:76:62:d6:c6:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jun 12 04:00:37 2026 GMT
Not After : Jun 13 04:00:37 2026 GMT
Subject: CN=ace286463be1fb551b29afb748ada439ea3e9274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:45:ef:39:90:1c:91:49:65:b6:f3:5a:49:
6a:f3:17:ae:98:d0:aa:89:7a:f1:da:51:cc:ef:d0:
c7:c4:3f:c0:73:a9:b8:ff:2f:f9:0f:61:1c:5c:2b:
48:06:f3:05:8b:5a:29:12:72:71:90:cd:0c:37:fd:
8c:15:34:ae:14:3a:ac:96:2d:2e:88:ec:e0:0c:01:
2a:c2:4e:4c:d8:c3:b4:d6:ab:8e:a9:f6:97:c3:29:
ca:a3:c6:c2:1f:8e:ee:d6:52:72:85:1c:f0:f9:e4:
72:8c:c1:f6:a1:5f:52:ca:59:18:ef:80:db:86:de:
33:ad:9a:fe:76:4d:e0:07:19:a2:2c:49:b2:66:fb:
d8:86:77:11:3b:dc:a6:f6:38:4b:f3:fa:ed:95:80:
c1:9a:bf:98:54:38:66:ee:6e:3f:10:da:5f:15:99:
8e:96:17:bd:68:e6:cd:58:b2:6a:d8:c3:ad:1b:33:
72:7b:42:87:02:b2:e7:c8:ac:09:cc:3a:59:78:9a:
ee:36:0e:35:c0:8c:67:60:93:86:69:0f:12:73:23:
ea:df:34:c6:98:b8:74:c7:e8:7c:ce:0c:3f:6f:9b:
31:72:10:d3:0a:22:88:d8:f9:fa:da:40:cb:de:39:
44:94:7f:be:a7:3a:be:87:0c:66:86:67:7c:ff:bc:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:86:46:3B:E1:FB:55:1B:29:AF:B7:48:AD:A4:39:EA:3E:92:74
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:48:84:88:52:f0:5e:0f:d3:6e:66:33:c7:51:f1:20:1f:
99:7b:23:93:94:35:b6:f3:27:e7:5d:0d:16:0c:13:83:9d:43:
e6:cc:57:f3:f2:71:29:1e:f4:51:39:db:69:06:8c:60:be:5c:
cf:f1:2e:52:d1:03:83:6d:3c:ce:ac:ae:09:1c:86:b9:99:0f:
d3:dc:18:b0:f6:54:69:dd:15:1d:7f:c4:26:02:88:ab:c0:92:
d2:de:74:e8:87:b3:57:c9:74:e1:d1:78:44:f0:a4:f4:d8:9a:
64:09:85:dd:b0:5e:cb:88:1f:f8:6b:4b:89:1c:d1:06:38:5e:
bf:4a:d9:cc:91:7b:d0:50:9a:e4:41:f4:bc:1c:84:ac:2a:58:
db:ca:d8:21:fe:ef:2d:66:ce:17:65:c3:f3:c2:84:6f:eb:9e:
74:31:92:65:d0:cc:4a:a7:5b:22:a5:a3:52:16:9b:54:d3:39:
5b:e9:04:82:27:00:a1:e3:cd:ae:89:4e:c2:a7:b7:65:ac:79:
7f:5c:a7:fa:ea:f3:7d:23:d7:49:cd:1f:c8:c8:d8:f0:0f:ab:
c0:05:df:95:ee:59:dd:a4:56:68:d2:26:da:28:ae:e1:62:f8:
64:5d:55:0b:ca:e9:06:20:1e:68:3f:7b:ba:d1:60:3c:08:4c:
d9:54:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:39 2026 by rpki-client