Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: rwFySO658u9KyCrKklRH+GTRl++5zmy2GC8EbWDs4c0=
Subject key identifier: 3E:68:6E:AA:17:99:F4:6F:CB:73:85:21:B5:C0:5D:96:A0:BC:AF:7F
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019ED4D0093E3F869ACC6B7E3F1F3FC6EE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0C9D
Signing time: Wed 17 Jun 2026 09:01:04 +0000
Manifest this update: Wed 17 Jun 2026 09:01:04 +0000
Manifest next update: Thu 18 Jun 2026 09:01:04 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: 6NBRr3cCwdAD8l+dqim4dMadGvijQEGl8Q0Nf9we3yA=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:09:3e:3f:86:9a:cc:6b:7e:3f:1f:3f:c6:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Jun 17 09:01:04 2026 GMT
Not After : Jun 18 09:01:04 2026 GMT
Subject: CN=3e686eaa1799f46fcb738521b5c05d96a0bcaf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:82:a1:d4:63:9d:eb:6e:6b:45:24:7d:d8:
e3:6c:f8:bc:51:f9:b0:0a:57:1b:1b:f1:64:8e:22:
16:b9:6f:71:8a:76:56:0a:20:b9:4e:a3:2d:ed:14:
2f:23:c6:25:16:eb:68:b9:66:59:fe:ad:52:66:7f:
f1:d1:ac:08:96:6a:a6:e3:9e:c4:a3:da:bc:61:00:
b2:f9:7c:93:7b:b4:41:04:46:83:17:1f:a5:c4:e0:
41:ec:56:eb:cb:89:45:85:3d:9a:2d:ca:4b:32:5e:
c3:73:03:1e:be:cb:c9:4f:6a:8b:d4:9e:86:26:bc:
d6:22:8b:a3:de:73:26:ed:59:9f:4e:e7:f7:7e:5c:
cf:79:0e:c2:62:29:d7:56:6c:2a:03:8f:79:38:2d:
e0:aa:f3:7f:83:d4:35:18:2e:6c:db:3d:4b:fb:8b:
4e:65:ea:ac:69:53:8a:2f:34:f4:2e:e8:dd:98:f5:
2b:5a:93:04:21:17:16:07:f5:75:63:b8:9a:a4:77:
11:16:e8:62:14:fa:34:64:02:5d:5a:e7:e4:59:24:
3b:8f:72:9c:86:dd:6a:58:6a:99:75:a6:8e:98:f1:
50:2d:cf:cf:d0:e8:c4:cf:e6:5d:ec:5e:d7:aa:a2:
b1:d7:9f:bd:5e:bd:62:fe:08:44:0e:e9:9c:91:b5:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:6E:AA:17:99:F4:6F:CB:73:85:21:B5:C0:5D:96:A0:BC:AF:7F
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:eb:ff:a2:a3:d4:f9:21:20:f1:c8:2a:77:be:08:58:1c:
86:76:c8:1e:76:2e:22:f1:0a:1d:d3:bc:15:2d:b2:16:01:da:
1d:8c:2b:a8:d4:93:1a:f1:cd:d8:1d:a2:9a:a3:43:38:b6:e3:
c0:c9:59:4a:60:a1:68:6a:6a:f7:75:c7:d1:99:57:2a:fb:09:
9f:6d:a8:9d:56:bf:55:f6:4a:74:14:7e:7f:bf:a7:de:69:70:
c6:94:e9:22:98:3f:7b:ec:04:2c:e7:73:ff:c6:96:87:aa:23:
ea:6b:0a:b2:50:d5:dc:dd:e8:95:20:ad:ee:74:dd:3e:83:23:
b9:f9:bb:33:63:51:a6:25:1c:7b:c9:64:87:5d:36:4a:5d:df:
e6:45:c5:a9:38:be:09:3e:c2:be:17:6f:c6:e1:74:ee:48:df:
1c:69:d8:a6:b2:57:42:1c:3c:2b:be:af:b7:b2:b6:44:60:41:
2a:cb:50:9f:1c:af:13:cf:ec:06:a8:2f:1b:fb:b2:a9:f9:4c:
45:9c:5e:b0:f1:b7:78:40:af:5a:bc:1f:b5:10:6f:73:26:34:
5d:e7:c5:c0:5b:8c:3d:06:1d:12:b5:b3:1b:fd:45:c3:24:9c:
d0:0f:cd:f9:27:31:15:ac:a0:ea:54:b6:72:d9:d1:b9:5e:41:
ce:8c:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 17:41:20 2026 by rpki-client