Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: AbELl/2H2y8dvthX/ZMh22R9TRjbcuJvjjnpMoyuWoI=
Subject key identifier: 9F:87:EF:5B:5A:A3:58:67:99:E2:EE:2C:FA:6B:CB:14:C0:07:EA:C4
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019EF94B7CF9508BC8272072ED5E998790E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 06ED
Signing time: Wed 24 Jun 2026 11:02:14 +0000
Manifest this update: Wed 24 Jun 2026 11:02:14 +0000
Manifest next update: Thu 25 Jun 2026 11:02:14 +0000
Files and hashes: 1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: CGVItO/o5i+Hwh7+y3pjNwLE2qkjRK3Rzju2cgr8dD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:7c:f9:50:8b:c8:27:20:72:ed:5e:99:87:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jun 24 11:02:14 2026 GMT
Not After : Jun 25 11:02:14 2026 GMT
Subject: CN=9f87ef5b5aa3586799e2ee2cfa6bcb14c007eac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:f0:e6:ac:fc:5e:ce:78:ed:9d:c6:8d:1b:
7d:39:c5:4d:ed:2e:52:49:b4:8f:00:0e:21:37:d3:
45:00:b4:90:90:12:5a:88:86:f0:95:46:81:c0:ae:
ce:45:48:21:36:70:51:47:50:3c:ff:c5:db:cc:7e:
07:12:58:18:89:1c:d5:0a:d1:4c:5a:e1:73:59:46:
75:cd:2a:9e:b9:3c:52:d0:84:17:51:18:ec:d5:f8:
f0:93:72:96:24:fe:68:d1:cc:68:67:69:09:5a:a9:
56:b6:e3:13:9e:bc:34:95:f7:80:a3:1a:5d:0f:9c:
1d:dd:ca:a4:76:2f:4b:83:6a:f6:0e:6e:70:1c:e0:
f7:90:94:7a:71:b3:3f:b7:5d:71:17:39:54:ca:eb:
24:8c:48:4a:a5:81:cb:cd:b2:4f:5f:a9:9c:aa:9f:
2c:47:23:6b:f7:b9:0a:e1:2f:a7:df:1c:65:27:cd:
78:ac:32:59:40:c5:76:69:fc:f9:9f:ea:83:81:dd:
e4:f6:9a:65:35:1f:d4:27:a6:c9:9e:4f:2e:a6:1b:
f9:02:b2:bc:1a:c2:3e:9a:4e:8e:3b:0b:0d:33:0f:
cb:4b:ee:7d:3b:90:8c:a4:fd:4b:22:3f:84:07:2a:
a5:1f:55:20:e5:fb:36:9c:8c:10:8f:3b:76:ab:48:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:EF:5B:5A:A3:58:67:99:E2:EE:2C:FA:6B:CB:14:C0:07:EA:C4
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6b:ab:78:c8:2c:6f:3b:19:f4:68:be:16:ba:8a:3a:65:9c:
9b:78:2f:cc:3c:76:67:53:e4:bf:ce:4e:3f:3c:2a:a4:9b:f8:
c9:42:6e:e3:b5:be:67:11:0f:d1:5b:2b:33:95:0d:86:2d:0b:
e3:6a:23:d6:f7:df:f3:9e:66:d2:5e:67:b3:10:fb:a5:3c:3c:
75:cb:0c:64:57:de:6c:da:6e:9d:78:9f:c4:ba:3e:da:5a:35:
2d:4b:33:69:c8:6a:be:33:e6:06:a9:b5:57:6e:c2:63:f9:c9:
22:49:6f:28:bb:59:1e:c8:94:ec:cc:18:2d:ee:af:8f:22:54:
ad:a3:20:71:ac:a6:1e:b5:b3:d6:4f:ee:e9:e6:f3:e4:7f:b3:
ca:07:0e:a3:00:3d:99:a3:14:12:6b:04:a6:89:53:ad:ee:74:
88:e1:a3:74:bb:e0:01:f0:80:1e:86:3e:a2:30:d1:36:a7:49:
71:06:3c:7f:cb:4f:c6:4b:44:c2:ec:a4:ac:a5:26:fc:e3:ed:
91:96:60:d7:fc:c0:73:b5:b7:be:06:05:d7:4d:b9:d2:01:fa:
f6:35:e3:ab:03:a7:c5:b5:c5:e5:68:13:ec:19:18:be:58:f5:
b4:bf:70:13:f1:3f:91:b0:f5:40:ea:16:2d:b1:02:ed:e8:25:
c5:37:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:06 2026 by rpki-client