Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: VIpNcxpY0hFnnNvLlCPhsecAqv+3QMwcTL2SdIaR5MI=
Subject key identifier: D0:36:68:A2:8D:D5:FD:0A:4A:48:9D:3E:41:BD:C5:75:EB:D5:F4:4A
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019EC292C93EE60AC60EB7E37D667436DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 20:01:00 +0000
Manifest this update: Sat 13 Jun 2026 20:01:00 +0000
Manifest next update: Sun 14 Jun 2026 20:01:00 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: AMAPEhQIBDy0cBxPxQ+VcTc7wP58WsNGQC1Iawob01Y=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:c9:3e:e6:0a:c6:0e:b7:e3:7d:66:74:36:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jun 13 20:01:00 2026 GMT
Not After : Jun 14 20:01:00 2026 GMT
Subject: CN=d03668a28dd5fd0a4a489d3e41bdc575ebd5f44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:7a:74:14:06:0c:6e:87:9a:43:7e:09:1c:
c9:6f:cb:b2:ac:c2:e4:51:23:c9:df:80:f6:94:c1:
c1:13:7f:a9:26:43:b1:2b:aa:fe:e9:54:47:4a:02:
6c:e3:94:70:3a:a0:f2:2b:d1:d0:5b:2c:51:63:47:
1f:d1:06:8c:5d:80:a8:c6:06:38:bb:6d:57:e6:00:
02:94:75:ef:31:e2:ee:92:62:75:3e:3a:95:79:53:
87:89:56:a6:5a:e4:42:74:97:51:34:a9:b8:5f:21:
8a:cb:07:e4:57:f9:18:11:01:b6:e5:f2:0c:d3:f4:
c4:ae:ab:8e:09:41:59:8a:df:59:c7:bd:c6:03:a7:
10:02:4f:47:d1:6c:45:fb:05:48:0a:f8:02:c1:e5:
90:cc:ae:10:be:48:a0:4a:1a:f8:bd:81:37:e6:6c:
69:90:7a:3a:76:96:60:10:0d:3c:4c:74:f4:b1:75:
69:dd:31:6b:2f:3e:d4:a4:69:3c:3a:3a:ba:1e:eb:
77:51:9a:a5:4b:7a:75:31:02:ba:d6:48:03:96:ca:
58:9d:84:89:32:29:31:bc:01:b2:b4:f5:5d:67:25:
b9:07:f3:9e:d1:69:1f:e1:8d:16:2b:d7:15:4d:f1:
86:53:3c:57:83:62:d0:63:13:82:94:af:b8:09:b3:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:68:A2:8D:D5:FD:0A:4A:48:9D:3E:41:BD:C5:75:EB:D5:F4:4A
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:3c:20:d6:7f:83:95:c9:49:33:f7:79:2f:f1:ec:79:01:
4a:5a:8d:17:f9:95:3e:44:36:11:d3:bf:8a:08:9f:3b:c2:15:
92:44:e9:24:8a:f0:8a:1b:10:00:b5:31:3a:25:b3:0f:84:ef:
b6:3d:f6:ee:b4:a4:72:91:7d:52:e1:f8:de:6d:e7:ac:3e:42:
de:dd:2a:86:1f:c7:2c:56:a7:c2:af:14:95:05:96:68:47:e0:
03:67:50:74:1f:04:dc:21:16:2d:4d:6b:15:bc:d5:b1:90:1c:
ca:10:8c:3c:90:64:69:f5:30:c5:72:69:da:93:06:00:ca:80:
f7:90:17:4e:94:b3:75:16:49:85:14:30:58:7f:f3:4e:7c:06:
00:7b:b3:72:fc:7b:5b:5a:cf:24:51:70:2a:b6:4e:57:5d:e8:
fc:64:10:6f:65:57:2e:f1:40:4e:d8:6c:9d:de:a9:6d:19:77:
60:8b:04:ce:ed:e1:1e:83:28:03:77:a1:a7:ec:37:74:e9:d4:
3c:8a:fe:68:71:ce:a7:2f:b8:15:39:35:d4:ac:c5:ad:d4:d4:
2f:59:73:16:a4:c8:76:9b:d0:93:21:b8:d4:16:eb:db:4d:26:
50:45:3d:c8:90:f4:82:44:ef:8e:c8:18:26:77:79:0b:97:25:
f5:a5:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:13:55 2026 by rpki-client