Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: JCmrbliIuAKYEqEtplamK6riT/Eoi2NrdViRarAH6gI=
Subject key identifier: 94:F3:41:5F:31:3D:4B:F6:A5:E4:F1:E3:F4:7A:13:49:BD:CA:15:7F
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019EBEECF97AEDA9FF8194BF223B79634BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1101
Signing time: Sat 13 Jun 2026 03:01:01 +0000
Manifest this update: Sat 13 Jun 2026 03:01:01 +0000
Manifest next update: Sun 14 Jun 2026 03:01:01 +0000
Files and hashes: 1: 8xA9g6st8q1ZO7p8fBgY7k3h940.roa (hash: es+n+A0JT354CmSRIsGHstM8RZuYiz9SAi6sT3RamMM=)
2: Fq7TOkYyouHC8xR1kjrAsL5urTc.roa (hash: 6GYjOmrjXmmr24z+aC3KxZOdFr1vqqY/PhQW/qHR3M0=)
3: U3uskgBenRf6gNmvfw00tQrNEBw.roa (hash: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=)
4: We9ajpgv-KMWtCNehj5200Ms4KE.roa (hash: yAe9WyOmZWrvcHTRYvIZ0zYpeNqUkrBR9gUrKL3DkRg=)
5: Z_UkflDweGnz8zM_7oi509EJZ5k.roa (hash: hSzmu9iIssf6q8RWNHjOF5etDQN6C9VPkQzbrxInqjA=)
6: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: Ytr0VGpDSy1DHNare3+a6uXsfjkpF9wLqlFDNcHRw+0=)
7: kKLGgE3fyTVxx91dU2mQiyqGm10.roa (hash: ZqNmuP4152Y5l4OYoFJ5inMC8KhvOltpWeQnsy5c5So=)
8: xenLsKPBBzBMqRcg-OjXqeVukQ8.roa (hash: b82QWnmVuqMrn+VvITgqUIemhL5L20gAU9zx2kZtgG0=)
9: xkcxmbV395wD6Bpm8A0maelgxXQ.roa (hash: 6jEjfrEoAEHIt6C6bZR7XXWE/0hdr4gv+O/JcJ+oWEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:f9:7a:ed:a9:ff:81:94:bf:22:3b:79:63:4b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 13 03:01:01 2026 GMT
Not After : Jun 14 03:01:01 2026 GMT
Subject: CN=94f3415f313d4bf6a5e4f1e3f47a1349bdca157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:dd:e5:12:e9:1a:05:de:3d:cb:03:ef:95:
0e:c7:46:53:66:d1:2f:7a:ca:30:46:4e:40:3c:d7:
2a:66:45:16:ce:02:da:ab:17:14:03:0c:d1:01:ab:
b6:3f:6b:5d:b2:81:6f:c3:28:5f:d7:60:25:0d:81:
b9:47:9c:ce:8f:02:d6:3b:6d:16:88:b6:60:31:3d:
36:83:66:92:e1:3f:29:29:af:43:47:20:c3:08:60:
85:35:13:d1:3b:c8:3e:1c:83:47:a2:a5:b4:60:e3:
e9:7d:81:fe:d3:9f:3f:a3:62:f1:7b:3a:12:33:3c:
0c:83:9d:29:21:5e:d1:95:63:78:11:bd:52:cf:0a:
64:cd:c2:96:9d:ae:1c:1c:70:df:45:22:b3:04:c4:
f2:10:d1:ff:23:ff:81:8a:da:f2:46:1a:b4:34:2b:
68:7f:03:16:41:54:03:96:dd:f0:ca:4f:a4:5f:9c:
e7:92:8a:60:1a:66:a6:59:27:e0:c0:69:99:39:b7:
a9:f4:c4:09:77:2c:8d:6a:51:80:08:45:06:6b:9c:
24:da:2b:6e:aa:82:5a:07:b5:62:81:db:6b:97:c8:
ad:1a:7a:f1:fc:0e:a6:3b:a8:75:cf:5b:24:01:6f:
5f:7c:7c:2f:01:91:fd:cd:c8:83:c4:8b:e0:74:94:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:41:5F:31:3D:4B:F6:A5:E4:F1:E3:F4:7A:13:49:BD:CA:15:7F
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2f:58:eb:4e:89:22:19:3d:56:65:bb:55:46:af:5f:05:c3:
31:93:8c:d8:3e:3b:9b:69:98:21:56:56:67:f1:cc:48:27:71:
b7:39:17:45:3d:f4:ad:e8:79:ee:15:b9:99:b5:68:b0:73:94:
1e:cf:34:2a:73:f2:42:d6:c5:1c:b5:a8:49:58:43:58:ac:0b:
f7:37:02:16:89:78:de:2a:0c:89:3f:3d:50:21:5a:5d:40:f3:
15:58:a7:0e:ed:a0:83:b0:e1:0f:56:0a:63:98:be:c3:fe:d2:
4f:02:0d:ab:24:84:83:66:22:a7:bd:ba:97:d7:61:bf:e4:dd:
58:2b:57:12:70:c4:cc:c3:26:e4:18:c5:7f:fe:d5:93:2e:9a:
5b:f0:53:aa:f7:8d:12:6d:4c:34:5d:6b:72:de:fb:56:2c:70:
1d:66:16:87:c8:bf:61:d0:ef:7f:c8:98:2c:96:3a:9f:9f:51:
d0:ae:2e:e2:e9:3c:f1:40:0c:2a:10:c5:70:89:08:b3:15:b7:
a4:e6:e0:e9:8f:91:98:81:8c:a1:39:a7:81:9d:ed:cf:46:40:
b2:ec:59:b9:5c:d7:71:58:8f:d1:e4:35:42:3c:ec:2c:2e:e1:
0d:f2:3a:91:cd:a3:d4:6f:c0:2c:69:7c:17:19:c3:91:bc:f7:
7b:ea:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:06 2026 by rpki-client