Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: Bqcqw4wVhUtaJ87IbC0AtpJvxpuAMKtuIIEZ6HhxAKk=
Subject key identifier: 5C:C4:BB:3C:E4:17:FE:EE:B7:5C:2E:EE:14:0E:2E:4C:3C:27:18:FC
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019F1A1EDFD200BB247EF3235CA19A32338C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 124B
Signing time: Tue 30 Jun 2026 20:00:58 +0000
Manifest this update: Tue 30 Jun 2026 20:00:58 +0000
Manifest next update: Wed 01 Jul 2026 20:00:58 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: HPn0TqnWJ3p8eqJto0WQhL1gHejOFIMY+B2FhWMxhHw=)
3: m_9DNbciOyMJhFYq6AMIc9hId24.roa (hash: tBW7znRdSpU63evh7Ukilhd1TX1abcrpsvoLCnD8lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:df:d2:00:bb:24:7e:f3:23:5c:a1:9a:32:33:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Jun 30 20:00:58 2026 GMT
Not After : Jul 1 20:00:58 2026 GMT
Subject: CN=5cc4bb3ce417feeeb75c2eee140e2e4c3c2718fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:3d:c0:ea:61:00:b9:c9:a0:cc:fd:37:e3:
30:74:fb:9d:21:50:4f:d3:7d:27:35:98:50:bb:fc:
76:b7:73:f6:78:0b:fd:5d:59:50:3c:b2:6e:60:c0:
54:b3:b5:95:66:5d:fc:be:ed:9e:78:73:7f:ab:76:
24:7d:4f:33:34:33:81:bf:70:d6:8d:8f:3a:94:12:
86:28:bf:02:9e:ac:bf:a6:52:58:34:a9:bc:25:68:
38:1c:77:e8:5c:33:3f:93:cd:e9:f1:58:c1:de:7d:
b0:c3:8e:46:3d:ec:20:5a:83:02:47:eb:7b:26:ff:
57:5a:c9:e5:9c:e5:dd:40:b4:5d:3c:f0:71:6d:c5:
f8:22:49:36:6a:db:25:72:c2:b3:f7:46:84:4c:cd:
b7:5f:69:3c:7e:5f:8a:61:cd:d8:53:97:97:e3:5a:
b1:2b:c8:a3:17:60:f2:d4:eb:b4:e8:eb:89:3e:9a:
0c:d8:81:2d:20:bd:4f:0e:e0:d0:58:ad:db:7f:bc:
e8:2b:a9:b1:da:be:d3:35:fd:75:e5:aa:f2:e4:b1:
8e:41:76:2a:33:c0:b5:ea:ac:79:d5:3c:9d:28:10:
80:29:52:40:a9:81:92:7c:0d:3d:d6:29:44:e4:19:
27:d0:7d:73:2f:d3:6a:dd:25:b6:82:11:d9:20:12:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:BB:3C:E4:17:FE:EE:B7:5C:2E:EE:14:0E:2E:4C:3C:27:18:FC
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b5:52:2a:a2:48:63:42:88:3b:3f:ba:11:c4:2a:75:6d:6f:
bf:e8:28:44:7a:db:c1:e5:c9:e2:b5:a9:32:3e:55:36:7b:94:
6e:9d:89:f1:4e:17:cb:58:fe:37:68:89:24:5c:62:b4:b9:c6:
ec:a7:bb:c4:72:03:b1:63:a4:07:9b:94:94:40:e2:68:21:1e:
06:17:f7:49:3e:45:d1:74:d0:95:b6:3a:07:8b:a0:5e:72:92:
40:cf:3f:32:bd:14:3d:6e:94:4e:4d:77:85:2a:a8:dc:b2:db:
48:e3:c8:67:3f:28:d1:bb:d0:09:05:a1:d1:39:43:58:43:b8:
de:ff:a0:fb:d0:73:40:25:b3:dd:3a:23:c9:af:d4:ae:50:c8:
40:32:e5:93:1e:45:e6:36:ee:75:e1:da:0b:9e:ea:ce:b5:fa:
6b:1e:ad:3f:4e:ee:f7:de:26:ad:e2:fc:d1:ef:5e:43:32:bc:
45:1e:51:be:5e:cc:ab:bd:5f:9d:f4:c2:e2:a1:c6:15:48:cd:
d5:b2:cd:dd:f0:43:a1:fd:48:92:f9:d4:cd:c1:d7:7a:33:31:
46:b9:ca:67:1c:09:da:3f:34:59:4b:19:f5:fe:5e:52:99:ba:
0d:50:c9:0d:90:5b:75:09:cd:d3:94:26:ac:ac:e1:1f:7e:c8:
0a:90:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:41 2026 by rpki-client