Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: DWe1wXy+QxO1BTQrmPBR7AKlklHZR2YDSQVYoYkCbks=
Subject key identifier: 74:06:E5:85:68:71:CA:77:59:96:2F:FC:F6:94:E4:95:D9:EC:91:67
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019EEBFD05918F96EEA141F9020E72E14C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1972
Signing time: Sun 21 Jun 2026 21:01:28 +0000
Manifest this update: Sun 21 Jun 2026 21:01:28 +0000
Manifest next update: Mon 22 Jun 2026 21:01:28 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: C4Ma6K+cjjTzgGI/KLT0u3A29s/g0XpqlAvcT3+iXRg=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 17:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:fd:05:91:8f:96:ee:a1:41:f9:02:0e:72:e1:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jun 21 21:01:28 2026 GMT
Not After : Jun 22 21:01:28 2026 GMT
Subject: CN=7406e5856871ca7759962ffcf694e495d9ec9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:a7:bc:65:1a:fa:af:3e:fc:50:8d:66:df:
cc:15:ea:d4:a5:97:6d:ab:f0:82:84:b4:9a:34:72:
2b:b5:a3:5e:b9:35:ec:68:c3:e8:20:b1:33:1f:51:
7d:16:81:31:38:7e:a3:85:02:92:41:63:d9:b1:3f:
e9:e7:47:d1:b3:fd:38:8a:b0:8d:8b:cd:06:64:24:
1f:55:3b:8e:a5:22:6c:e4:22:32:6f:a3:4b:3d:b0:
0a:ed:20:44:db:f0:b8:31:07:36:50:63:1b:b0:fa:
41:f5:46:7f:26:90:64:e3:52:c2:92:84:d2:57:9b:
e4:e4:42:4e:da:28:98:ed:97:85:3a:63:e1:19:6a:
e8:2c:c3:6a:b8:3c:e7:df:b7:d1:ef:38:84:b4:e5:
30:27:78:38:54:ab:3e:27:70:be:61:a4:9d:87:19:
83:c7:3f:e1:49:49:25:d8:ec:cb:db:c2:df:92:69:
da:5f:75:3f:c4:8a:d4:1b:1f:7b:01:09:5e:a5:13:
74:f5:a1:2e:bd:5c:c3:b7:76:b7:91:7f:8e:6b:09:
ea:ce:74:4e:cc:54:f0:e6:e5:9c:24:6b:b3:13:5f:
54:e8:45:58:44:14:29:32:66:41:af:08:77:f0:6e:
ad:25:03:c5:f7:e0:5e:d3:ee:28:a7:f8:53:23:56:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:E5:85:68:71:CA:77:59:96:2F:FC:F6:94:E4:95:D9:EC:91:67
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e5:2a:4b:37:59:ec:48:f6:24:9d:59:78:1c:95:98:48:8a:
fa:44:9f:af:e7:2c:79:ea:d8:b1:96:dc:fd:f4:dd:e6:8a:14:
7d:69:48:5b:bd:74:c7:b9:9d:71:73:65:83:5e:4d:a9:de:94:
2d:61:e3:5c:74:4e:c2:48:ad:9a:77:66:eb:ff:ed:45:d8:ec:
c5:e8:a5:cc:2b:79:3f:08:5c:48:e6:23:20:df:9e:67:2b:24:
37:c3:ed:9d:59:47:5c:42:10:fa:bf:e6:ba:ac:95:4e:af:5a:
bc:83:09:43:d5:93:01:1b:72:fd:00:dc:c0:6e:01:47:23:1f:
60:23:07:cc:0e:19:d8:41:ef:8a:27:24:28:6a:b9:cf:fb:49:
a8:d0:c4:fe:f0:81:ef:93:b9:f8:8d:a2:4f:31:94:53:15:88:
b6:2d:e1:8c:3a:a0:49:00:03:aa:ac:ca:67:3c:4e:de:92:6d:
58:92:2f:ad:2a:9c:5a:e8:00:4f:23:96:95:9e:46:02:58:ca:
04:e7:2f:6c:fe:a8:13:7e:21:67:68:f7:90:c4:31:7e:a8:02:
5c:78:49:0c:73:3d:ed:b3:16:75:1f:11:ca:cb:59:be:8a:96:
cb:5f:23:e2:31:4a:c9:18:1c:13:f7:10:41:67:c5:15:9c:14:
48:15:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:20 2026 by rpki-client