Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: fEpysc/l0MSEKKF/RNpY2FFU+QYAMBUP8jCWahTysfI=
Subject key identifier: 39:3A:6D:B1:77:C2:31:E0:70:74:D8:6F:0F:F2:D7:75:A2:17:16:A9
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019EF8012E3B52D6A7C6BF6D7F14DF64C605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0628
Signing time: Wed 24 Jun 2026 05:01:27 +0000
Manifest this update: Wed 24 Jun 2026 05:01:27 +0000
Manifest next update: Thu 25 Jun 2026 05:01:27 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 8XKTz+Tu5RvJbbda+01ew2MqC7/lJj4q3RN5GETZQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:01:2e:3b:52:d6:a7:c6:bf:6d:7f:14:df:64:c6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jun 24 05:01:27 2026 GMT
Not After : Jun 25 05:01:27 2026 GMT
Subject: CN=393a6db177c231e07074d86f0ff2d775a21716a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:7f:1a:f8:a0:3d:67:1d:d7:07:d7:77:1a:
b2:91:42:2f:3b:ba:d3:98:55:b5:fb:dc:03:82:9c:
11:4a:41:0e:ce:85:e9:ba:72:64:57:56:e6:58:fe:
84:95:c6:63:6e:94:ce:5f:27:cb:09:54:c3:06:70:
e1:a4:6d:64:e0:e8:2d:3b:a3:20:ea:79:68:fe:a2:
eb:04:b8:02:bc:22:02:1d:ad:13:8a:8f:12:f7:f9:
75:b1:ca:51:54:04:be:46:fa:1e:50:56:7a:13:db:
79:0a:5e:43:3e:22:95:97:21:b5:c7:b0:e4:37:8d:
02:2f:4e:bb:d0:2e:53:de:e9:9e:57:03:f1:9c:4d:
02:d3:ab:1a:e7:59:af:d3:f8:d2:05:03:51:0b:98:
4e:32:94:00:ad:f2:62:05:39:44:6e:bd:0b:7d:34:
35:91:dc:92:03:fe:35:01:3e:ae:64:04:84:bb:95:
dc:00:e2:1f:b6:57:ad:d9:42:1d:e4:79:0f:79:a0:
05:3b:3b:1a:2d:f9:15:00:c3:b6:dd:1f:35:be:22:
56:e9:d5:35:53:2b:ea:3c:cc:30:59:0b:69:34:58:
9b:7c:78:f9:65:78:d5:e9:32:ec:b3:75:d2:7b:3d:
1a:df:3c:14:a6:c1:61:e7:af:97:06:a3:03:80:94:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:6D:B1:77:C2:31:E0:70:74:D8:6F:0F:F2:D7:75:A2:17:16:A9
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:a4:f8:37:55:79:06:69:f5:7d:bb:22:cb:b1:72:ab:f2:
48:5d:ff:62:30:01:df:9e:cc:8b:01:a5:94:59:ef:ce:4b:5d:
67:0a:0c:98:74:07:28:0c:26:06:20:dd:37:3e:bb:e8:86:c6:
39:32:b4:ed:49:f0:f6:61:e8:69:79:d9:11:69:90:32:8d:ec:
53:de:b3:54:ff:3e:97:7f:52:0e:5c:4f:db:b2:77:80:8d:85:
ba:f5:39:82:f2:1e:2e:40:02:71:97:f1:39:da:eb:39:b7:60:
97:f3:df:b8:8e:0e:58:2a:6a:1f:ac:c0:bd:3a:32:78:03:0f:
57:59:79:14:53:62:ff:23:2d:1f:f4:05:2a:db:91:3f:31:da:
77:c3:55:bf:e5:13:0a:36:84:77:c2:d5:a2:0e:7d:09:9a:be:
55:bf:63:6c:3b:4c:84:d6:5b:0d:09:d7:ef:5d:68:5f:7a:b8:
12:cd:5d:d0:05:22:b0:a0:ac:0f:29:15:0e:4f:be:b4:ab:46:
ca:ae:a1:f7:ae:ec:ca:1a:f0:30:2f:6c:95:be:f9:8c:41:28:
99:57:8d:05:87:69:09:99:fc:29:2f:14:bd:7c:0d:0c:54:fd:
6e:fb:08:a4:09:a6:2e:17:fb:55:82:c6:59:dc:41:5e:72:84:
17:30:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:32:37 2026 by rpki-client