Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: 0RYg4StwVra6/Doj+ZR1oFjYKwrlrb0KFV9HdB603wk=
Subject key identifier: DA:D1:EB:8B:85:02:49:3C:76:2D:C2:4D:54:24:83:0C:03:B2:A6:BE
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019EB80F7EE359EB899150671A5BA94AD9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 18E9
Signing time: Thu 11 Jun 2026 19:01:23 +0000
Manifest this update: Thu 11 Jun 2026 19:01:23 +0000
Manifest next update: Fri 12 Jun 2026 19:01:23 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: ZXY/RZdzvsgZDjHNzqelBNNQ2sbEutIIOwZwzHR13W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:7e:e3:59:eb:89:91:50:67:1a:5b:a9:4a:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jun 11 19:01:23 2026 GMT
Not After : Jun 12 19:01:23 2026 GMT
Subject: CN=dad1eb8b8502493c762dc24d5424830c03b2a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:23:db:b7:ac:b5:e4:3e:ac:6c:d5:f3:3e:
9a:1c:5e:3f:60:53:d3:1e:db:09:6c:4e:5e:14:69:
f0:d0:77:0a:4f:45:8a:7d:55:09:81:6e:a7:c4:be:
5a:16:5f:4a:62:cd:4b:0c:9e:8e:d7:fb:82:07:f9:
4c:8a:a6:ed:8d:96:f3:f2:82:51:4e:5a:fb:6d:48:
59:2d:88:14:87:2d:91:7b:82:ad:9a:1e:bf:61:aa:
d3:13:24:ed:51:94:86:b7:f1:11:1f:e3:a2:13:6a:
43:24:79:c3:0e:f3:31:c5:d5:79:6a:e4:b5:eb:7a:
97:a5:3a:ad:d2:a3:e6:f0:0b:ec:0a:a0:be:b0:92:
d5:16:b9:93:3a:be:de:97:02:74:4f:8f:d1:77:5d:
ed:69:00:98:77:cc:ad:0f:50:c6:45:10:25:61:c8:
ea:59:a5:6d:f3:de:87:87:e9:6a:40:4e:2b:39:3c:
4f:28:1d:6f:42:f8:f4:c6:61:5a:35:88:94:b3:ef:
0f:75:aa:27:87:8a:7a:fc:98:dc:58:5f:e0:95:da:
f9:ea:7d:16:c8:a0:f6:78:2d:cb:3e:3c:51:44:12:
a8:f3:a7:e7:70:e1:0b:b0:a0:b8:92:68:73:8c:90:
1c:28:07:c7:27:d3:59:6d:4f:72:28:03:d8:85:eb:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:EB:8B:85:02:49:3C:76:2D:C2:4D:54:24:83:0C:03:B2:A6:BE
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:e7:c7:e7:11:cf:88:9a:ec:fe:08:e9:2b:42:a9:4b:7f:
31:5b:a6:84:74:aa:82:7a:f4:59:dd:ac:dd:51:ac:3f:54:cf:
0a:e4:f0:55:84:51:b3:bc:5d:ae:37:3f:4b:a4:cc:6f:e2:2b:
64:bd:f1:a3:16:40:c9:99:16:cf:11:32:21:23:d4:48:45:5c:
4d:a0:89:e9:26:42:81:61:74:86:0b:6f:82:dc:a6:82:ed:e3:
34:63:e4:36:15:41:b9:40:1b:57:6b:aa:6f:c1:9d:e9:c2:47:
9a:85:26:b2:04:bf:82:66:eb:40:22:05:f3:59:1f:80:2c:e4:
61:bc:a7:d1:9c:06:96:f4:fe:aa:fb:31:8a:e8:7c:31:e1:62:
e4:64:d9:da:9a:9c:f0:96:52:c2:40:ac:67:5d:ec:dd:d1:af:
bd:60:50:51:bd:72:ee:f4:c6:e9:04:0d:d1:f3:71:59:95:4e:
a7:d1:ad:2b:27:0c:a6:99:0a:d8:86:3c:2a:f1:f2:a8:81:c1:
8c:9b:ef:d9:5c:05:a7:1d:eb:93:7b:06:5b:42:38:e1:40:a1:
2f:a8:2d:b2:12:fc:02:d6:70:69:f1:67:7f:a5:26:9a:c7:0e:
2b:99:27:d2:c6:44:ce:3f:60:f8:57:37:b6:18:44:00:0e:df:
c0:41:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:39 2026 by rpki-client