Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: vQjwTYzYzm6qu2Io86h6aBbkoqNwhTIWYD1HO/j1ltA=
Subject key identifier: 75:75:53:C3:B5:38:E3:9F:C6:4F:66:4B:1B:DC:E1:27:98:40:AE:5A
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019EB98F7D04C7F2687D3B6121FFD4DCFE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 1392
Signing time: Fri 12 Jun 2026 02:00:49 +0000
Manifest this update: Fri 12 Jun 2026 02:00:49 +0000
Manifest next update: Sat 13 Jun 2026 02:00:49 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: JyuDaTzlZVuvGaNH0SLtdbnZvnYMbXYgpJ9zhWF7UCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:7d:04:c7:f2:68:7d:3b:61:21:ff:d4:dc:fe:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Jun 12 02:00:49 2026 GMT
Not After : Jun 13 02:00:49 2026 GMT
Subject: CN=757553c3b538e39fc64f664b1bdce1279840ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:4c:63:af:d8:11:d4:9e:24:cd:af:f4:02:
86:fa:da:0b:3a:87:a9:af:9c:bf:21:1c:87:3b:2f:
24:67:eb:8b:db:65:60:e7:3e:ab:f0:54:dd:20:44:
c6:ff:1b:6c:e1:ff:02:50:98:8f:c4:bb:fd:04:ad:
29:3e:dd:70:c6:1b:85:8d:b8:83:aa:09:de:1d:a5:
18:ce:5b:b8:87:bd:ab:1b:b6:b0:88:11:dc:97:4b:
4c:6b:7a:05:4c:b4:f6:eb:00:c3:0b:5d:1c:6e:61:
a4:51:b0:50:ed:6f:69:73:bd:ad:c6:24:74:7e:85:
12:a9:54:4b:b8:5b:bc:26:4a:47:21:10:80:a3:33:
86:54:4f:d2:d0:8d:75:15:8c:63:32:d4:14:0f:8a:
c0:b6:cf:36:70:f5:c0:bc:2a:4c:79:46:37:e8:f1:
0e:2c:9f:01:4b:11:24:d8:82:d4:01:fc:cb:fe:a0:
91:a4:8b:ae:4f:d2:ef:50:73:eb:3f:af:68:ba:94:
fe:0a:99:e2:a5:c8:61:bf:12:ad:af:57:95:43:bc:
24:f2:2a:40:71:78:2a:8f:3e:96:54:24:b0:be:ad:
20:3f:3d:fd:5b:5e:1b:10:d9:e4:f9:e6:1b:9a:86:
1e:a9:09:35:b3:df:b4:02:cb:b6:c7:50:c6:81:7c:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:53:C3:B5:38:E3:9F:C6:4F:66:4B:1B:DC:E1:27:98:40:AE:5A
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:10:c6:30:6a:bb:9b:17:f8:11:fc:4e:a7:52:3c:57:a5:c5:
d8:52:49:1d:c1:b7:31:2a:26:d4:89:c5:31:15:64:3f:6a:e3:
81:e5:8c:1f:23:60:a6:c6:16:be:15:fb:7a:76:ef:68:9d:a5:
66:36:03:6e:72:b4:d8:07:cb:54:50:ab:11:c6:88:43:47:f1:
10:a6:6c:85:76:fc:1a:ef:ab:86:79:6a:2d:26:33:a7:e9:47:
d2:78:b7:bf:5b:b7:ef:a6:a1:32:47:40:66:bc:b3:64:7e:b5:
de:60:1a:e9:73:fe:8e:c3:93:cc:1a:3e:7b:7d:fd:82:9b:74:
7f:5b:82:b2:d8:bb:e3:53:30:e0:af:96:a2:a1:4a:22:9e:cd:
37:ae:bb:1e:58:43:01:54:d0:dc:30:c7:9e:63:b5:f7:d8:12:
1e:72:a4:dc:2d:a3:80:85:90:c6:2e:92:68:75:ab:47:ad:42:
f5:8e:c3:5b:05:66:03:a9:a0:92:5a:60:3e:ed:a4:80:c2:f3:
49:c4:3c:1f:48:5c:b4:36:55:37:fb:8f:33:a8:e5:10:9b:d7:
7e:79:3b:9f:f3:b5:e2:ef:b3:f0:30:86:bc:c2:ad:3d:68:ad:
b3:12:f2:5d:8e:9a:81:38:8e:b4:3d:89:6d:41:bd:4c:e3:e5:
0e:7a:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:16 2026 by rpki-client