Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
File: rd0Ub21v9nQIRevKnN_kDHFViD0.mft (raw, json)
Hash identifier: An/+pI3eQF76mIRxCVFN9DaXiIkBvsEaqURsoX0wnTA=
Subject key identifier: ED:CF:4E:71:31:7C:DF:C2:8E:52:45:5C:78:0E:EF:6D:85:DE:74:B4
Authority key identifier: AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
Certificate issuer: /CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Certificate serial: 019EFBA82BF5B03E31E36A0F4EC4CC0804AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
Manifest number: AC
Signing time: Wed 24 Jun 2026 22:02:42 +0000
Manifest this update: Wed 24 Jun 2026 22:02:42 +0000
Manifest next update: Thu 25 Jun 2026 22:02:42 +0000
Files and hashes: 1: d8grn2wXk9vmfr4CPR5GIGOguek.asa (hash: GujxxEhlnqGN/956zXiB0ryPh7UxwhtfLKl2I7TE640=)
2: rd0Ub21v9nQIRevKnN_kDHFViD0.crl (hash: IwmByslv8DWnY/Yv3DUxt9w2HWs/9CY5iyTmkEdtaJM=)
3: zzfUeVmLO32C_ObHNHjJVH4U69M.roa (hash: ZfmRsyH3zUInl36WXMdR2VHEdQrA8f5h8j3VKz/Y+TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:2b:f5:b0:3e:31:e3:6a:0f:4e:c4:cc:08:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Validity
Not Before: Jun 24 22:02:42 2026 GMT
Not After : Jun 25 22:02:42 2026 GMT
Subject: CN=edcf4e71317cdfc28e52455c780eef6d85de74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:74:b9:29:f0:99:47:c9:12:2e:5a:c0:5b:
14:79:8e:7a:0e:d2:81:c7:24:05:31:2a:d2:89:f2:
83:48:84:da:f8:64:90:36:59:10:61:fc:79:0c:23:
c6:ba:b0:89:74:0d:04:7f:7e:a1:2d:9c:12:42:b5:
a7:2b:94:ff:f1:48:64:e9:e3:72:b7:6b:29:74:e6:
97:cd:9b:96:d6:f6:d6:75:e9:b4:2a:48:82:01:5d:
73:55:53:f6:47:9b:eb:ac:68:b3:ad:b8:c1:d1:b7:
5a:26:61:6c:de:96:0b:99:d0:ee:50:a3:e7:06:cc:
b6:dc:9f:23:bc:c7:14:87:bd:99:49:b0:b5:28:a8:
be:3b:f4:75:92:c8:f8:36:c6:0b:47:88:ff:96:6c:
e7:d9:57:d3:ec:7e:0c:09:74:82:23:23:bb:82:96:
a8:1f:d5:58:4e:0c:23:f0:1d:81:bf:3c:4a:6b:99:
99:c6:b6:ba:f9:59:b0:c3:27:eb:cc:9f:69:24:3c:
51:56:4c:80:11:ac:55:e7:2a:4e:f6:a1:8c:c0:09:
aa:10:94:9f:84:98:38:99:72:b6:eb:11:2c:75:68:
5a:73:47:ca:9d:50:87:0d:76:4f:fd:c8:2d:39:28:
bd:02:bb:4f:7d:38:ea:88:c8:e4:e8:e8:00:18:eb:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:4E:71:31:7C:DF:C2:8E:52:45:5C:78:0E:EF:6D:85:DE:74:B4
X509v3 Authority Key Identifier:
keyid:AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:5c:e8:2e:61:03:8c:63:39:f2:9e:4b:33:e3:1c:bc:29:
2c:de:86:5d:60:ff:37:0c:47:e8:ca:c5:05:ba:e2:ff:a1:27:
91:2f:27:43:0f:65:47:f3:e2:af:26:78:ff:62:0d:84:0b:b9:
b9:d8:81:07:a2:3d:f0:01:49:eb:a1:30:10:4c:8e:df:12:04:
0d:86:18:39:18:b3:49:49:84:03:09:a9:62:dd:51:be:64:65:
5a:1f:27:a3:e1:25:d0:81:4c:0c:4f:8c:91:44:da:4e:ed:5c:
be:ea:b5:82:4d:89:3e:9b:59:8e:a5:0c:0c:ee:4f:a9:04:e6:
c6:ca:02:d2:10:f2:30:c3:ad:c4:cb:93:23:8a:2c:dc:04:7e:
af:88:31:1f:d6:83:fd:ee:e6:d1:d3:fd:d9:0f:9e:21:a8:28:
6e:19:8c:c2:d4:e6:f4:b4:ec:d1:29:83:72:89:9f:b0:3b:0a:
50:53:81:3d:68:86:ec:54:24:38:bf:07:01:04:4e:a5:68:01:
3c:80:3b:eb:f4:8d:8a:9f:d5:c8:2a:be:0e:9c:a8:c5:67:44:
de:1a:0d:91:a3:d1:2d:54:c4:54:64:2f:65:c7:cf:43:11:6c:
32:6d:f7:1f:d6:f6:7e:8b:2a:3e:fd:64:1d:51:f5:72:09:3f:
63:bc:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:25:32 2026 by rpki-client