Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: HDlpt0R21mLUmpw6fdIQz9i/eqht2jebRQd2v/J9Bc8=
Subject key identifier: FB:0A:EB:4F:E8:F6:8E:5D:24:49:A6:3C:2F:6A:8B:19:B5:81:BD:B9
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019EB9FD720EF364CCA52DB0DB1B42DEDE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1979
Signing time: Fri 12 Jun 2026 04:00:55 +0000
Manifest this update: Fri 12 Jun 2026 04:00:55 +0000
Manifest next update: Sat 13 Jun 2026 04:00:55 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: ASG2djAMm+uw4hllJyqI9dCiEztphawJ0fHbVClujQc=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:72:0e:f3:64:cc:a5:2d:b0:db:1b:42:de:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 12 04:00:55 2026 GMT
Not After : Jun 13 04:00:55 2026 GMT
Subject: CN=fb0aeb4fe8f68e5d2449a63c2f6a8b19b581bdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:19:c5:4c:e1:6d:99:c0:87:19:b8:cb:80:
05:31:8e:17:49:e1:94:77:31:2b:33:cc:b5:6e:0e:
4c:da:4d:2f:6a:fb:a6:75:26:3d:e0:ab:3d:12:9e:
c8:12:40:c4:14:c5:de:98:e3:3c:e3:5a:2f:54:94:
2d:7d:c7:17:a4:6c:a0:19:b2:35:a5:a1:f9:0f:62:
67:cd:bf:99:43:f6:5f:2b:72:d9:f2:a0:eb:b2:6e:
c8:ff:10:61:02:46:92:c1:9b:95:3f:9d:77:1e:7a:
ab:f0:94:9b:1d:e8:d5:ad:3b:c8:45:e8:16:66:63:
35:1d:89:d5:a4:3a:67:e2:d6:2e:f8:81:e9:9b:e4:
39:b0:f5:f9:10:05:47:09:83:0f:7f:17:29:c5:1b:
60:13:3e:35:d2:eb:55:a4:77:87:78:e2:ee:13:6d:
98:ae:bc:df:11:09:e6:44:3d:57:d2:99:83:dc:50:
3c:97:91:6d:f5:a5:04:9c:f1:d0:b6:53:16:5a:77:
87:e3:c1:4e:b3:b2:42:e9:a8:b6:76:56:a9:cc:d3:
36:fe:c4:70:01:f5:ae:bc:ad:d3:41:47:dc:31:9f:
b2:63:af:c5:4a:d4:77:0a:12:33:d6:e6:d0:f2:e5:
27:f0:80:51:0b:d6:9a:29:1b:8e:e8:39:d9:df:94:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:EB:4F:E8:F6:8E:5D:24:49:A6:3C:2F:6A:8B:19:B5:81:BD:B9
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:8e:3f:a4:1c:ed:ac:38:eb:9b:4d:a3:06:29:0e:80:dd:
1b:97:f6:b3:d1:9d:4a:7d:25:f0:6e:2a:30:fa:62:c9:01:76:
47:87:81:08:02:79:b0:e3:2c:bf:6e:55:d4:1a:82:32:ed:84:
c1:73:76:b6:a7:e5:97:7b:02:51:a2:a5:81:94:24:9c:64:11:
de:dd:cf:9f:8c:cf:1f:b8:23:9d:3a:ad:f2:63:5b:2b:58:6a:
d4:58:62:3a:26:8b:85:dd:4c:b7:c7:22:c2:68:0e:88:79:c6:
6f:37:0f:f0:e2:b2:03:d9:08:21:52:1c:b1:13:ba:77:a2:42:
88:08:bd:70:f4:6b:b9:d2:3f:b6:47:38:eb:7f:6e:d4:44:55:
e3:1a:4f:e2:4e:9a:aa:fa:7a:de:01:37:b9:3f:a1:c8:38:17:
45:be:ee:42:d0:0b:81:91:cb:da:af:d4:fe:a4:8a:10:1d:4e:
c7:e7:dc:df:e3:1e:8e:ee:c7:cc:1f:e4:a3:bc:22:10:18:17:
1a:88:fd:87:10:d2:fe:be:c5:15:8d:fc:ff:7a:19:da:bc:95:
a0:cb:8d:d3:8b:89:db:94:d1:d0:5c:26:de:2f:c3:29:47:47:
2f:ca:14:72:0e:4d:92:83:0a:ac:85:24:db:61:d2:0f:ec:ad:
ec:15:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:47 2026 by rpki-client