Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: 0Z6aZ1cZVBcRhUUcZ4lRAceknzW6Au25+bF+ACHbGwc=
Subject key identifier: 6A:32:A2:14:66:3B:49:A6:6C:42:56:A8:AA:EB:9D:67:D4:3F:26:00
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019E9C6037343F217C01508AC51CAD0CDD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 02B3
Signing time: Sat 06 Jun 2026 10:00:11 +0000
Manifest this update: Sat 06 Jun 2026 10:00:11 +0000
Manifest next update: Sun 07 Jun 2026 10:00:11 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: EzlrcFEX7J2L+iKUtJ4dLQ+sGaqUXnCdbGIRGjcO+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:37:34:3f:21:7c:01:50:8a:c5:1c:ad:0c:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Jun 6 10:00:11 2026 GMT
Not After : Jun 7 10:00:11 2026 GMT
Subject: CN=6a32a214663b49a66c4256a8aaeb9d67d43f2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:c6:d5:1d:67:d5:e8:fc:e8:f4:10:6b:88:
ee:b3:df:de:60:d9:6e:ca:e7:83:6c:b1:44:4a:ba:
8a:b3:68:c0:14:1a:b2:f2:cb:3d:fc:f9:b9:73:4d:
38:e1:fb:ff:0e:b1:e6:bf:1b:94:e2:75:c7:8d:4f:
f8:24:2a:b1:71:ec:af:b0:5d:c1:ec:59:56:19:8f:
20:05:94:f4:1d:6c:4e:17:d7:92:be:62:de:8c:72:
0f:da:1e:3d:5b:12:fa:fe:f6:5a:b1:6a:7b:98:cb:
c0:70:97:3b:67:3c:65:7b:ba:91:41:e2:36:d0:2c:
77:b0:06:a2:fe:8f:e0:73:71:3b:b3:96:7f:d2:16:
d1:56:6e:05:bc:54:df:7e:71:93:7a:aa:7b:b2:04:
78:42:d1:bd:be:0c:21:44:1d:9a:3c:95:f8:61:12:
25:28:28:54:f0:7c:45:27:06:8f:ba:a6:a1:c9:86:
d6:5c:2d:a6:a6:ea:21:cc:6a:fe:55:2e:d6:86:e3:
ab:00:38:1a:fc:68:8c:ff:ef:e3:80:d2:b1:7c:e7:
35:87:8b:5a:f4:cc:ba:d2:06:63:a7:12:b1:9f:0a:
8a:07:c2:69:66:95:c8:58:f2:9e:ea:d3:bf:b9:0b:
ca:23:77:f8:b6:00:5f:72:08:42:0b:59:f4:66:f8:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:A2:14:66:3B:49:A6:6C:42:56:A8:AA:EB:9D:67:D4:3F:26:00
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b2:bc:fa:d9:76:e9:f2:31:aa:23:80:29:66:6f:63:a0:ff:
bd:ef:6a:4f:88:3d:a1:b2:e0:ed:b5:02:b3:cc:d1:6b:5a:c5:
29:94:b9:07:bc:6e:40:04:6b:82:b4:5b:8a:09:7e:5f:18:11:
cb:48:9f:a3:01:1b:e7:fc:3a:75:5b:34:94:15:b4:cf:b3:7d:
69:27:42:38:61:85:25:ca:8e:cc:6e:03:5c:75:6b:5c:b2:fa:
0f:bf:8b:bd:ba:e0:89:dd:c7:f2:c0:55:0e:88:9d:f3:7b:6f:
1c:d9:df:f2:ee:d6:84:29:a8:b8:4d:b6:ec:9c:cf:13:1c:45:
8f:ba:fd:16:7b:85:6e:af:1f:0c:90:f5:19:44:a8:fa:bc:fb:
e4:a4:84:f5:8f:75:ab:d2:07:ec:20:07:0c:ca:05:54:e0:66:
79:31:b6:67:10:3b:27:82:6e:03:bf:27:2f:26:84:5d:dd:ce:
5c:1c:8d:b3:5f:f3:9f:ae:9e:d4:00:e3:2c:27:2e:47:57:2e:
86:c0:98:83:79:88:53:ff:7e:79:c8:a5:60:24:2e:0e:7a:a6:
91:73:d1:a2:ad:0f:e9:86:c4:f7:35:9f:64:e9:78:2a:7a:d2:
53:7c:64:37:09:ab:8b:ea:ec:d6:19:86:56:f8:97:a5:fd:c1:
84:5d:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:21:52 2026 by rpki-client