
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: GBuaFs5FDDjuCBlRwp+jzfszO5c8UoTnL+PkReD+XTI=
Subject key identifier: E2:4E:C6:E9:66:8B:DC:FE:B4:03:DC:87:04:D9:5A:21:42:CD:C2:A1
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019EB9587771B64FF32D0CEBE25F53E836E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 196A
Signing time: Fri 12 Jun 2026 01:00:43 +0000
Manifest this update: Fri 12 Jun 2026 01:00:43 +0000
Manifest next update: Sat 13 Jun 2026 01:00:43 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: 1wOSaclvwH3NLh7Yv+rc0lroQkwgGPQoLb5AXfHHWHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:77:71:b6:4f:f3:2d:0c:eb:e2:5f:53:e8:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jun 12 01:00:43 2026 GMT
Not After : Jun 13 01:00:43 2026 GMT
Subject: CN=e24ec6e9668bdcfeb403dc8704d95a2142cdc2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:00:57:30:23:7c:01:c6:8b:0c:82:f4:63:
95:63:7b:15:97:f5:ff:5c:33:9b:25:87:b5:2c:6a:
9d:0c:4b:fe:b6:31:ee:b3:05:bc:de:89:42:f2:72:
aa:00:cd:f5:75:59:6a:b4:24:06:77:d3:98:4c:18:
0d:2d:2c:81:0d:1d:8d:59:e0:bb:b3:c0:6b:3a:6d:
f4:00:92:59:b2:36:ed:ee:fd:bb:3c:0f:c8:b6:b1:
72:a0:67:14:9a:d4:66:b4:19:90:a7:0a:38:03:27:
f2:74:82:d6:80:a1:0f:7e:94:a0:68:d1:bf:82:c7:
60:58:dc:bd:9c:69:4b:36:54:1b:01:00:5d:79:ba:
a5:a9:4a:52:20:0e:c2:31:75:0f:3d:a3:83:2e:81:
84:74:7f:d7:e7:6c:4b:dc:84:05:75:dd:ef:35:9b:
d0:3e:ed:e1:ec:37:52:33:b4:83:ff:21:73:fe:87:
22:b1:2d:7b:43:b5:a0:c9:f0:2f:06:34:56:ac:dc:
43:df:25:e0:da:4b:6f:5b:9a:d9:2c:03:ff:94:76:
a5:40:4f:af:26:65:25:f9:92:f3:44:30:7d:06:c9:
90:6d:c7:9d:a5:8e:60:37:ea:85:d6:0e:af:94:da:
c5:38:f1:10:34:8a:9c:18:06:68:94:6b:e0:a5:13:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:C6:E9:66:8B:DC:FE:B4:03:DC:87:04:D9:5A:21:42:CD:C2:A1
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:cf:4d:12:63:3b:4f:35:2f:bd:93:13:c6:f8:4a:52:4c:
f3:9e:9e:47:3e:04:b2:00:26:4b:c2:a5:94:c3:7a:25:fc:db:
73:f1:91:86:38:1a:08:85:bd:1e:d7:09:fc:91:02:dc:b8:4a:
3f:64:79:f0:8f:54:56:93:62:b2:a3:d0:2a:9c:57:2d:99:33:
d3:87:c2:1c:8e:74:eb:ee:81:2c:5c:de:4b:19:4e:6b:36:9b:
70:13:61:8c:b2:91:38:71:29:dd:fa:47:21:13:a4:dc:e0:f8:
98:f6:c5:84:12:de:7b:88:ab:f7:bb:4c:4a:b0:3e:21:60:ce:
e4:03:3e:33:bd:48:dd:e2:bd:87:a7:8f:07:10:6a:2f:bd:b0:
d6:ca:b3:97:c1:2a:9b:51:fe:dd:bd:1c:5b:5a:2e:00:19:71:
e2:e2:ad:45:90:d3:5c:47:d0:b0:af:b0:5e:64:7f:2a:ac:73:
01:f7:ee:11:ad:2d:af:5b:69:14:05:4e:88:3a:bd:fb:9c:22:
07:1b:bd:f6:ef:6c:55:f5:5e:3e:72:57:4b:bf:c1:6e:ad:9c:
67:be:81:4e:93:82:92:7d:dc:9a:8a:91:f8:43:c1:9f:cf:ec:
2e:b0:bc:25:8e:54:88:8e:59:93:80:23:c1:fd:45:d8:9b:83:
26:3e:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:10:52 2026 by rpki-client