Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: 7xGBM39B02O60RCq3db4urOOfv8udpQWhsmavUIqyHc=
Subject key identifier: 99:D9:19:F4:F1:DF:49:B3:A3:61:DF:A2:9A:5C:18:1A:8B:C0:F7:77
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019EB80E732CFD08EC2DE14FED87AFD27676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 100F
Signing time: Thu 11 Jun 2026 19:00:15 +0000
Manifest this update: Thu 11 Jun 2026 19:00:15 +0000
Manifest next update: Fri 12 Jun 2026 19:00:15 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: i3yqSYm6cVJxn5ZRtohV/C9xWOmKtEkIxMfNCZ6mLdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:73:2c:fd:08:ec:2d:e1:4f:ed:87:af:d2:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jun 11 19:00:15 2026 GMT
Not After : Jun 12 19:00:15 2026 GMT
Subject: CN=99d919f4f1df49b3a361dfa29a5c181a8bc0f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:4d:26:94:e6:6c:9e:eb:33:3b:26:a4:0b:
bd:54:6c:aa:21:48:dd:e3:b8:09:a3:fa:30:1c:2a:
ac:f3:f8:e8:9e:a1:e6:c1:0f:42:c8:16:29:8a:22:
c6:ef:5e:b4:6d:d7:8e:47:1c:07:d8:5e:f8:c8:3d:
dc:e1:e8:c6:11:79:74:ba:ea:b1:60:06:45:3c:71:
3f:f9:9c:f8:41:7b:e4:20:a3:43:29:ab:9b:96:95:
2d:6e:3b:b2:7a:25:f0:06:26:d3:31:22:9d:a4:0d:
23:6d:60:ca:10:b8:2d:a5:ba:a6:c6:ba:4e:9e:9d:
61:b7:79:d4:56:3d:b8:73:5d:b6:5f:b1:39:f3:71:
39:52:f9:36:07:12:93:e1:4a:43:fd:a5:e7:8d:41:
bb:ef:d5:90:da:a2:eb:8a:de:23:3f:7a:ef:a3:a6:
e4:c3:0c:8b:d2:1a:cd:c5:03:32:88:20:cc:b1:fe:
3d:c7:6b:ae:30:bf:49:84:a5:b3:fa:53:9e:00:6c:
41:59:80:74:3b:5f:32:81:b0:a6:b0:f4:1e:40:91:
b8:f3:4e:f8:d3:d5:c0:0a:92:68:44:28:50:5a:9f:
04:a1:39:53:c4:3e:22:4a:4e:a7:82:52:0d:03:f3:
a5:dc:8c:d7:22:d3:7b:01:db:de:d2:62:d6:5f:30:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:19:F4:F1:DF:49:B3:A3:61:DF:A2:9A:5C:18:1A:8B:C0:F7:77
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ee:3f:a8:c8:3b:2b:4a:d7:ca:e1:b9:26:98:43:47:b8:b1:
00:06:fc:5d:1b:3b:a5:e2:9e:79:59:d5:c8:cc:51:ed:77:30:
fc:57:85:d1:dd:b4:b6:67:01:94:be:c4:86:d2:7c:05:78:cd:
3f:b4:54:12:eb:11:a6:06:90:97:01:ef:41:5c:8f:1e:74:4e:
cd:6b:d9:f7:f9:89:43:97:85:d1:68:f9:a8:2a:fa:38:fa:21:
25:aa:38:c7:2e:60:be:76:11:7d:4d:32:e1:66:cd:57:79:4d:
39:58:d9:86:78:c2:e4:88:f5:1b:95:95:d4:39:90:07:ab:05:
7f:9a:01:bf:c9:55:b7:76:3c:27:e8:5d:8a:ee:43:61:7c:c2:
a2:e4:ec:25:f9:a6:03:ab:d5:c4:88:45:17:04:ce:3f:20:08:
b5:ad:30:23:65:3b:9e:ca:d4:bb:56:ff:41:40:4b:4c:0e:a8:
65:e6:72:cf:40:b3:11:a6:e1:be:68:09:62:2b:56:09:c4:d0:
b2:13:5f:18:ae:37:e7:19:14:d8:4e:87:91:fb:da:1e:16:b5:
db:6b:5d:ca:84:d5:d4:63:09:32:f3:ce:09:e2:64:a3:c1:6b:
af:43:d8:3a:64:88:e8:88:89:d0:f1:c8:1c:de:e5:76:6f:50:
24:a5:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:32 2026 by rpki-client