Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier: K6SHYYUt+bLGn+0dxYMZxUwPLrZcbOLscCZQugOh/uI=
Subject key identifier: 46:D2:0F:11:73:61:61:8B:B5:7E:30:4C:2A:71:6E:FB:7F:38:E8:29
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019ED2E1864ACFD04809CD5731C72DBB6833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number: 18FA
Signing time: Wed 17 Jun 2026 00:00:55 +0000
Manifest this update: Wed 17 Jun 2026 00:00:55 +0000
Manifest next update: Thu 18 Jun 2026 00:00:55 +0000
Files and hashes: 1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: oqDNMRjFxREZ1fckdr1VRf2ftJaWARAb0Kz7F63TQb4=)
2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:e1:86:4a:cf:d0:48:09:cd:57:31:c7:2d:bb:68:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jun 17 00:00:55 2026 GMT
Not After : Jun 18 00:00:55 2026 GMT
Subject: CN=46d20f117361618bb57e304c2a716efb7f38e829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:ec:89:8c:a4:91:97:60:c4:2e:eb:16:51:
0d:5f:6b:90:99:78:cd:10:52:93:34:1d:df:f0:ef:
96:94:f5:7d:a8:e2:a0:4d:31:d6:05:d3:e2:07:f4:
6b:f0:74:e8:e1:56:f7:c9:1e:4a:b6:00:54:89:7d:
5a:6d:1e:98:8c:a3:6b:1b:dc:57:e7:eb:79:3b:2e:
85:9a:c2:2d:62:67:55:0e:0b:06:b4:b1:84:d1:cd:
76:b7:54:f5:e8:71:28:51:c4:29:54:73:71:da:cb:
c2:ae:34:01:aa:f6:4e:15:b6:36:f7:2a:db:00:1f:
e5:21:43:cf:df:ad:bc:53:57:fa:2c:7e:2d:04:72:
26:5b:8e:29:b3:5e:78:c9:be:b4:da:50:b9:0b:2f:
36:cc:83:b5:5d:ac:51:b7:50:24:ee:d4:67:ed:e8:
db:c8:9c:ea:58:bd:a1:76:f8:98:84:98:c1:bf:cc:
02:23:79:13:e4:60:07:ac:4f:59:de:fe:22:6a:05:
9f:ec:5c:e8:cc:8a:5f:dc:82:bf:6a:f1:08:bb:38:
c2:5e:a2:51:22:d3:2c:0c:9b:c3:fe:ea:91:1e:fe:
33:9a:72:d0:48:30:0a:99:71:de:30:25:f3:b9:fe:
a8:b7:c1:97:85:61:cb:86:f0:d4:69:a2:73:b8:c2:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:0F:11:73:61:61:8B:B5:7E:30:4C:2A:71:6E:FB:7F:38:E8:29
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:66:c2:f8:01:74:45:3d:0f:50:f6:d0:be:37:64:cf:dc:
4a:ae:42:ec:7e:10:58:fc:fa:4d:3d:34:17:90:94:77:ed:fd:
64:f5:16:c0:ee:0f:eb:7c:b2:54:e9:af:79:52:a2:83:30:48:
21:85:21:9f:37:81:14:b2:d5:b4:4f:9e:9d:0f:5a:f4:6c:ec:
e6:9a:ab:3e:16:c9:a9:71:a8:db:38:bb:e8:82:64:36:f2:d1:
0c:2a:7d:1b:2d:01:39:65:0d:f1:f6:fc:b9:08:21:43:0e:ed:
14:5f:1b:60:a2:c9:9e:bd:35:46:5c:eb:c7:b9:f5:82:d7:c5:
e1:ae:c2:34:6d:ac:4c:6f:9b:4e:8d:e5:8b:72:07:cc:35:89:
57:cb:dc:47:95:04:3b:0c:44:21:d8:9a:61:b4:59:44:a3:c2:
51:3c:4e:5d:5b:e1:9f:73:53:85:1b:e4:60:98:8c:60:05:d0:
27:35:c1:ae:e5:ca:87:dd:a0:3f:6c:e2:65:33:c7:d7:d4:5b:
e1:11:ba:5a:39:7d:ca:64:c6:f7:d1:82:3e:71:0c:f2:7d:36:
13:38:69:10:2e:e7:1d:80:d0:23:a7:d9:17:a6:6d:ec:4f:c1:
43:dd:10:f1:05:b4:a8:60:69:76:8e:18:dc:be:c1:b7:1a:85:
20:f1:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:23:59 2026 by rpki-client