
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: HkbRiJEWbJH5g7yueqbyTFjWnbyZd1r3zm7f6je3NRY=
Subject key identifier: 43:C6:1B:DC:74:8C:37:31:A4:DB:F4:9E:9A:32:9E:AA:86:6E:8F:44
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019F17F99B8B21B85A1C451DDA83265CDC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0C57
Signing time: Tue 30 Jun 2026 10:01:01 +0000
Manifest this update: Tue 30 Jun 2026 10:01:01 +0000
Manifest next update: Wed 01 Jul 2026 10:01:01 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: 1dVeWQvxupMp+1G6Dwpu7iELM+KoteTLEVbyEA3aVvQ=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:9b:8b:21:b8:5a:1c:45:1d:da:83:26:5c:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jun 30 10:01:01 2026 GMT
Not After : Jul 1 10:01:01 2026 GMT
Subject: CN=43c61bdc748c3731a4dbf49e9a329eaa866e8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:d2:7a:3e:4e:10:81:e5:a3:a8:bf:c8:40:
73:67:20:14:e0:1e:7b:36:0e:0c:a2:51:06:ac:03:
18:c2:27:95:ab:5a:99:68:c6:59:09:a1:d3:60:c1:
54:1d:8f:0d:86:73:02:0c:03:9b:b1:f5:c9:ca:9b:
56:d6:8d:5c:31:c9:6c:41:8d:4f:d2:07:af:da:4f:
dd:5e:d5:76:ea:a0:81:75:60:34:5a:9b:6c:57:2e:
17:39:d3:6b:5d:30:a7:4a:7b:0e:df:ca:9e:fb:64:
36:14:dc:71:b7:c6:01:04:bc:d9:f7:ca:fa:e4:37:
8a:99:51:8a:2c:a4:9f:8a:6d:58:d7:ce:aa:cb:4b:
25:60:4f:60:a9:76:fc:30:50:f6:4e:83:f8:6a:7f:
9f:76:69:d6:af:03:bf:f5:e9:86:12:02:ce:6c:c7:
68:bb:61:63:72:56:df:d5:42:62:fc:ea:28:c7:c1:
cc:76:57:eb:28:8d:ea:90:8c:d0:3a:98:08:3e:1c:
52:2a:0a:78:8c:94:30:99:4e:76:3b:9a:dc:7b:84:
b9:47:25:b9:1c:1b:a8:70:1f:91:78:a1:f7:b2:f0:
4c:ab:c9:c6:07:3f:44:5c:b1:30:86:d3:7d:19:6e:
7f:62:bd:c8:8c:57:e0:6c:fd:61:c0:b0:ac:2b:44:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:1B:DC:74:8C:37:31:A4:DB:F4:9E:9A:32:9E:AA:86:6E:8F:44
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:59:1b:a5:a7:fb:99:45:30:d5:da:66:d6:47:fa:7d:80:
65:45:2d:d0:76:77:89:1c:56:93:4a:00:4f:d3:2f:79:7c:04:
72:31:bc:01:10:32:ca:a5:c1:27:13:be:4f:23:f8:24:09:57:
24:c3:ef:e6:80:74:f0:e6:17:d4:e6:e6:a9:ea:0f:5d:d0:40:
13:09:c3:46:0c:5e:6e:65:6b:6e:67:16:e6:37:42:9d:a0:de:
d5:b7:9d:23:b4:73:f7:9b:52:32:f4:74:ff:41:8a:2d:13:ff:
39:a7:cd:16:31:ad:00:ec:2d:c7:c4:30:a2:7c:55:bf:b9:21:
00:64:6a:2c:ae:81:7f:4d:4c:69:0a:05:79:52:e9:45:13:d3:
0c:ed:24:80:c2:e8:28:40:b4:cd:7e:05:fd:41:b1:69:0c:a5:
ad:12:59:ad:dd:76:c6:15:7e:86:d2:68:de:c3:53:7f:2d:19:
ba:bb:88:c7:fc:a0:dc:ae:7c:fc:e9:76:bd:45:8e:33:29:c1:
4f:fb:ce:a7:fe:ad:df:fd:09:5c:cd:ec:a5:d9:bc:2f:1d:d8:
a6:e6:0f:5c:bb:30:f8:26:6e:9f:b7:da:d9:53:68:51:00:7d:
e4:f7:53:8c:71:88:aa:9a:00:ef:32:1c:6b:a4:5f:37:63:01:
0d:ca:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:12 2026 by rpki-client