Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
File: k1uI_ryNEnURqcvxW4BJmLHNZoY.mft (raw, json)
Hash identifier: VTY+pGCY6zJbqHccSshSuWlVxpZd73SflV2oKS6zPRk=
Subject key identifier: 94:4B:44:91:B8:19:CB:61:32:E0:51:46:41:79:CD:15:48:04:91:7A
Authority key identifier: 93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
Certificate issuer: /CN=935b88febc8d127511a9cbf15b804998b1cd6686
Certificate serial: 019EC22432661F4C06F9462F2BC6D8393EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
Manifest number: 57
Signing time: Sat 13 Jun 2026 18:00:12 +0000
Manifest this update: Sat 13 Jun 2026 18:00:12 +0000
Manifest next update: Sun 14 Jun 2026 18:00:12 +0000
Files and hashes: 1: Jle1Wqwc9duNEaBgl4I6cNxXpdM.roa (hash: OBFM1Q4yqKAy/JhwM152fWLO9wCkZnqGzYRwcyY0AlU=)
2: k1uI_ryNEnURqcvxW4BJmLHNZoY.crl (hash: HO/b4lzaGGdeNSbbwfhCXiUksLu/qeWo+ZJbgMXYZ+E=)
3: tWhPmRdm-lCBfCBjSnpAIpwkHdA.asa (hash: CmYFI/mkQzMGe1+SvLrHk5OSNg13/iiannrbVF+QaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:32:66:1f:4c:06:f9:46:2f:2b:c6:d8:39:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935b88febc8d127511a9cbf15b804998b1cd6686
Validity
Not Before: Jun 13 18:00:12 2026 GMT
Not After : Jun 14 18:00:12 2026 GMT
Subject: CN=944b4491b819cb6132e051464179cd154804917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:9c:9c:36:51:33:86:b6:75:88:c8:ad:0b:
fb:38:97:bd:3d:fb:76:f5:a5:c3:65:28:e7:65:ed:
a5:82:09:68:43:84:9f:cf:8c:97:38:46:f5:e0:72:
06:ab:57:a5:98:4e:39:2d:6b:40:c8:e0:38:0f:45:
67:13:a3:26:80:8c:f1:b9:a0:ec:5b:53:05:8f:88:
ae:9e:ee:15:df:da:ad:2c:42:f0:bd:c2:17:15:6e:
90:e0:79:07:4d:62:d6:78:4d:f9:33:cd:03:08:2a:
8b:df:6c:6c:22:35:93:1c:1f:41:03:f0:a1:0f:54:
77:a7:c7:76:8f:da:32:58:8e:47:fd:07:e5:33:25:
49:a1:b6:9b:3e:e2:fc:6f:13:92:cc:13:4b:8a:c1:
5c:5e:75:34:31:e7:10:39:51:46:02:f1:d1:be:97:
39:40:e1:81:01:70:52:29:46:69:12:7d:44:ac:bb:
ea:b1:8b:e1:08:d9:6c:cc:f4:bd:16:92:14:eb:0a:
7e:e0:db:da:f7:19:69:58:cc:a0:f9:49:d7:ee:fb:
4a:f6:f4:14:d8:9e:35:d6:3a:f3:35:da:08:6b:3d:
c8:e2:18:68:72:c4:f8:02:0d:db:9b:e8:95:a6:65:
ca:7d:3a:0b:e9:7b:0f:80:c2:2a:38:e1:90:e1:9d:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:44:91:B8:19:CB:61:32:E0:51:46:41:79:CD:15:48:04:91:7A
X509v3 Authority Key Identifier:
keyid:93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:be:2f:fe:b6:13:8d:58:7e:20:77:3c:e4:db:07:46:24:a3:
ec:4e:db:76:35:09:4f:df:7c:c5:88:ed:7d:90:c3:60:92:05:
ce:3f:c4:5b:93:1a:2d:ae:34:86:09:23:5f:ce:9d:86:74:da:
5a:a4:3d:a1:d9:ba:49:66:a0:ca:29:3d:63:8c:5f:f5:4e:09:
a7:c0:25:6b:8d:52:a5:20:46:b6:3b:a2:af:f4:2a:d0:f3:39:
09:13:9d:5d:eb:8e:f5:98:82:70:c0:41:7e:6c:63:5f:d1:9e:
a9:b5:d2:df:d3:7d:7f:a9:b3:a6:cb:29:1a:1f:9b:44:86:45:
9c:34:71:bd:05:d0:e3:0b:1c:35:e4:f4:4c:a6:5b:a0:8e:98:
ed:80:1b:1f:30:6b:72:85:11:2a:91:8b:31:6e:32:07:72:f3:
07:b5:e7:b1:76:9e:ac:b1:c9:33:11:29:45:65:70:9f:ce:66:
2c:ff:bc:91:7f:84:c8:1b:8a:a6:87:f0:47:56:eb:67:43:5a:
12:95:6f:61:c4:4c:72:74:37:54:dd:5a:d3:11:77:6c:ba:63:
d8:53:45:b5:48:db:39:0c:69:f1:2e:2e:47:02:2b:47:9b:56:
32:6c:21:4a:aa:00:61:82:0c:f9:8b:94:11:23:be:1a:de:71:
d4:5d:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:01 2026 by rpki-client