Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: O7Oa9BAwkt0vi5lp2RoydEnr11kKGrEmECkalavh/gM=
Subject key identifier: 88:2F:C4:4B:9A:9F:C0:4E:8D:FE:44:74:6E:3D:B1:59:7A:19:80:E1
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019EB84596905675A7558B9048E64D38A6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1966
Signing time: Thu 11 Jun 2026 20:00:28 +0000
Manifest this update: Thu 11 Jun 2026 20:00:28 +0000
Manifest next update: Fri 12 Jun 2026 20:00:28 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: pi3rgz3ixclezkulzjrdlGnR83QysVhcs9e6nu5RF6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:96:90:56:75:a7:55:8b:90:48:e6:4d:38:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jun 11 20:00:28 2026 GMT
Not After : Jun 12 20:00:28 2026 GMT
Subject: CN=882fc44b9a9fc04e8dfe44746e3db1597a1980e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:d1:f7:97:8f:02:a0:4d:b9:d4:26:2e:b4:
05:91:ea:ab:2c:91:c7:3f:d9:a0:3d:10:b9:18:dc:
b7:5c:c7:20:dc:0d:69:65:b7:55:23:84:8f:e7:4e:
77:68:3c:fd:e2:39:97:5b:aa:4c:0e:81:49:f6:39:
f4:a3:d9:2e:56:13:ec:65:43:8c:1a:ff:b4:49:21:
f1:c8:07:bb:55:da:56:c1:db:81:80:a9:e1:f1:23:
1e:9d:53:16:12:1e:69:61:af:cd:f6:6c:b1:70:c3:
95:fa:6d:fe:51:11:1c:ff:75:e7:0d:d4:78:d4:e5:
73:f6:f4:35:b1:0c:08:42:38:b0:37:7c:d1:b8:20:
2d:f9:e3:fd:24:f3:da:1b:6f:f8:64:db:fb:a3:62:
03:2d:f8:2c:af:c5:b2:ba:61:e6:46:f7:c1:0f:9d:
25:9b:63:e8:89:57:af:b3:69:1e:fb:74:f2:a7:04:
ae:45:04:9e:18:a0:95:ef:05:c7:b2:38:a6:2f:33:
f4:55:ef:9e:f9:59:0d:8c:5a:09:47:54:e7:e7:11:
2b:f3:90:c5:4c:7b:81:2a:18:01:6c:b2:ef:ae:44:
f1:80:b3:43:67:9f:b5:db:5f:97:05:74:05:04:a8:
62:1d:99:7b:e3:89:75:c3:a5:64:d3:e3:aa:1f:2b:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:C4:4B:9A:9F:C0:4E:8D:FE:44:74:6E:3D:B1:59:7A:19:80:E1
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:e1:87:75:44:17:13:c2:79:5d:db:0b:70:36:d5:89:c6:
b8:66:d3:a9:9a:0d:24:94:9b:0c:6e:d0:24:40:13:6e:16:82:
46:2f:cc:f7:42:4a:95:d6:a8:e1:06:3b:7e:ed:6e:23:f2:41:
3c:9c:12:e0:aa:2a:28:35:d1:70:0d:78:04:a2:83:5b:ba:85:
38:96:5d:14:b6:c1:1d:fb:34:ad:d6:61:ec:a7:51:82:4d:38:
90:dc:0a:e2:a3:24:15:37:32:81:6b:b4:1d:84:b8:69:82:76:
68:d4:e9:fd:4f:e6:da:5e:89:4f:66:7d:78:85:19:52:20:9c:
e6:f6:03:b1:55:6c:00:c1:45:59:a0:c9:4b:6f:f4:14:e7:3a:
b4:47:24:8b:84:cf:73:b5:6a:f3:3d:7c:56:6c:19:5a:0c:f3:
7a:87:be:ec:5a:4c:c3:0d:b8:07:ba:0f:89:bc:43:3d:6a:fc:
b1:af:83:7c:82:49:6d:d6:7b:1d:7c:75:76:08:00:48:2a:a9:
84:3b:9e:ee:a9:d7:d4:55:74:72:54:0f:93:ef:e9:c5:ea:3e:
d6:57:1c:46:56:7f:f9:4e:3d:5c:cc:86:56:de:7c:9d:c5:62:
e2:89:82:59:62:ff:ef:53:d6:d5:6c:e5:77:14:1e:86:f6:1f:
db:27:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:06:07 2026 by rpki-client