Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: wyUlaBbdeSOKUG4WbaUmOR8RNxhnnU232F1Vv8DZEr0=
Subject key identifier: 19:30:CB:FA:C0:F6:0E:D1:AC:77:8A:D8:ED:F6:C7:59:6F:32:76:B0
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019EBDA30D86CFCE8AEC0252B3360ADC4951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1654
Signing time: Fri 12 Jun 2026 21:00:40 +0000
Manifest this update: Fri 12 Jun 2026 21:00:40 +0000
Manifest next update: Sat 13 Jun 2026 21:00:40 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: vNF/xVG/Ma1nrKZ1w/3FpisfVnQJ/yA9jXKgTiPKIqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:0d:86:cf:ce:8a:ec:02:52:b3:36:0a:dc:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jun 12 21:00:40 2026 GMT
Not After : Jun 13 21:00:40 2026 GMT
Subject: CN=1930cbfac0f60ed1ac778ad8edf6c7596f3276b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:a4:15:8e:8d:df:2c:fd:d7:f5:14:52:85:
16:1b:16:eb:01:41:ad:5b:8c:4e:b8:d0:c5:f7:90:
14:38:3e:b7:55:3e:3a:da:e4:39:86:ae:99:56:ef:
8c:11:ca:8b:65:e9:b8:6d:f9:d9:0b:71:f1:1f:8e:
bf:f9:56:40:8a:28:76:01:10:4d:16:6f:fd:33:cb:
4f:7b:8e:3c:13:a6:f2:2c:85:7f:08:a6:f6:e6:7a:
b4:ff:48:3d:9b:97:f4:ac:2a:44:e7:f3:65:d3:eb:
cb:c5:9a:01:79:73:a3:02:50:8f:89:6d:c2:1b:35:
f5:80:90:f4:25:55:4b:69:d7:ea:da:3e:df:1c:7e:
b0:62:c0:43:1c:45:36:a1:ad:de:d8:ae:7f:09:ad:
b8:08:4f:90:1a:fa:39:0c:b3:c9:71:b3:77:76:01:
e7:aa:98:d5:ba:39:56:f6:c6:92:53:90:26:e8:98:
bb:58:f0:c8:37:f1:79:3d:8a:69:a7:36:de:89:14:
a7:71:99:a5:b6:2e:e7:43:97:25:a2:cd:04:13:9a:
59:c6:27:3a:84:3e:77:81:69:91:09:5e:1e:94:21:
aa:5e:fe:33:b9:ae:4c:2f:ff:b9:7f:2a:bc:91:a6:
c1:7a:da:35:ef:22:36:77:3a:b9:6b:80:5b:5b:52:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:CB:FA:C0:F6:0E:D1:AC:77:8A:D8:ED:F6:C7:59:6F:32:76:B0
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:47:4f:a0:d1:af:96:3e:2b:c6:ba:81:8b:e9:3d:24:48:
9f:6c:67:37:fc:d0:50:ca:68:ff:b7:29:b5:44:6a:c1:d9:fd:
56:29:ca:67:a4:6a:00:0f:1c:56:fb:00:69:86:5c:45:f1:10:
51:5b:da:0b:27:de:ef:35:f0:96:23:47:c5:1a:09:d2:50:fb:
5c:d0:cc:ef:ec:59:d8:cf:1e:46:b8:f9:f6:ca:60:f0:c6:44:
32:81:f4:aa:5f:42:bd:eb:d2:fc:47:30:e5:89:a2:57:91:4f:
ec:fd:28:2a:11:b5:51:02:02:b4:dc:c1:d2:1b:79:af:a4:e7:
06:d7:fb:e7:fa:bc:7f:af:06:50:7d:fb:46:af:9b:12:d0:d8:
09:29:f7:ed:ba:0f:e9:ad:d2:52:4b:18:02:8d:1f:3e:fd:2a:
e7:8f:53:25:ea:f9:77:bd:38:45:d4:72:89:e4:f5:fb:2e:e3:
fb:69:42:a0:9e:10:1a:87:79:62:59:3d:f3:08:cc:83:13:e1:
53:2d:43:bf:68:b9:c5:bc:8a:0c:f0:96:c2:13:68:b3:35:d2:
50:69:3c:3f:a8:f1:66:a0:cd:26:b0:63:c1:d1:37:e1:5c:8c:
78:ac:59:af:63:fe:c1:f3:c7:09:4a:ce:b8:6f:7b:0a:ac:d4:
23:e0:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:38 2026 by rpki-client