Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: 0OaDa/vtKT0Qw3Habo9Onl+v/zrGXZiedwCjI3iGonY=
Subject key identifier: A8:6E:1B:32:71:67:4A:96:35:A2:94:17:94:F5:B8:C2:C1:A1:64:3C
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019EC4129603CA48C2C814585D1FB1EAD45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 03:00:12 +0000
Manifest this update: Sun 14 Jun 2026 03:00:12 +0000
Manifest next update: Mon 15 Jun 2026 03:00:12 +0000
Files and hashes: 1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: JNDW2+hzhnimsfeOLHwTruvmTd21EAZUq6ODCxV1XME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:96:03:ca:48:c2:c8:14:58:5d:1f:b1:ea:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Jun 14 03:00:12 2026 GMT
Not After : Jun 15 03:00:12 2026 GMT
Subject: CN=a86e1b3271674a9635a2941794f5b8c2c1a1643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:a2:55:bc:1b:30:12:4a:b4:fb:f6:43:4a:
bd:3c:2e:1d:0f:15:ed:0e:aa:9f:8b:0a:1a:20:d8:
5a:db:16:82:43:4a:40:06:a1:8f:2c:94:76:39:83:
75:9e:bd:ea:f4:65:9c:08:70:96:b7:e9:9c:ec:d1:
8f:96:77:6f:03:a5:a1:91:a3:d1:e5:f1:ad:63:a7:
5b:ea:fa:b4:91:6f:77:37:35:5e:70:ba:9f:4b:b8:
6c:ec:3f:7e:89:ce:10:6a:e9:16:ab:66:93:f6:c5:
99:3b:bc:ba:fe:0b:2e:d4:74:c8:bd:2c:4e:0f:93:
f6:c7:7d:d6:39:47:b6:e6:99:d3:74:ae:fc:22:8a:
7d:60:75:90:9d:e9:10:f2:12:d4:86:0f:d6:a7:b6:
f4:0a:3c:e6:3a:ff:2d:3a:7d:42:df:c9:4d:01:8d:
30:37:ea:89:65:f6:7d:02:fd:eb:33:d1:69:ae:0d:
55:53:30:f3:62:98:08:7b:0c:cc:ec:21:55:d9:11:
a2:74:e4:ff:72:ab:52:bb:4c:de:ab:57:3a:ae:48:
64:c9:ba:96:ee:cf:f2:4f:08:a6:62:92:e3:e8:6b:
1b:36:20:f6:4d:f6:44:b8:98:70:c6:f2:73:9f:56:
49:85:63:d1:18:aa:09:a5:08:5a:52:f1:ed:81:20:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:1B:32:71:67:4A:96:35:A2:94:17:94:F5:B8:C2:C1:A1:64:3C
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:fe:b0:36:a1:14:b2:0a:f7:e7:bb:54:21:25:77:97:0d:
77:7f:9c:d9:65:4c:fd:1b:44:e2:95:5e:5d:54:36:d3:3e:df:
03:23:e7:01:1f:39:80:f9:e8:23:c7:e1:d8:08:b2:f2:db:31:
f5:66:6a:bb:e8:bd:6d:7e:8a:04:2d:cd:31:e5:1e:f1:1f:e3:
67:fd:c1:2b:03:f2:b7:2f:98:0e:6d:ef:04:4c:a6:0c:05:fa:
f3:2f:45:ea:73:a3:9c:72:6b:0f:25:42:94:e8:9c:47:15:c1:
12:dd:0e:a9:3e:e7:d5:71:a2:7b:42:8e:1d:40:36:74:e1:6b:
b4:ee:9b:a0:12:b4:6a:d3:5a:f0:d6:0b:1c:32:a3:2f:53:37:
14:fe:b1:f9:34:06:5e:45:15:dc:6e:4a:64:4d:ca:a2:ed:00:
f6:9b:55:d6:b2:a3:e5:92:d1:6c:48:82:9a:63:ef:5e:d0:60:
92:0d:c6:d1:df:4a:9d:00:38:b4:6c:92:c8:66:84:0a:86:a7:
e8:08:55:c9:f2:bb:2c:82:c2:ee:49:54:2b:cb:d2:49:7e:e1:
7e:a1:a6:d6:eb:eb:03:db:59:83:54:4e:af:82:76:bd:95:93:
fb:b3:90:fc:f7:c8:eb:3b:94:a2:d9:8a:a7:0f:0a:7a:be:c3:
43:ad:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:19:49 2026 by rpki-client