Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: h4C7JgcG8gRIo5DqeVxFMBr5DLP+pGAdDtgiWKXsVow=
Subject key identifier: 23:A5:57:6E:B9:07:1C:11:E4:E6:29:06:5A:9A:C6:02:75:03:07:81
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019EC336FDAD42DDB1076DF26B84504AD501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 23:00:21 +0000
Manifest this update: Sat 13 Jun 2026 23:00:21 +0000
Manifest next update: Sun 14 Jun 2026 23:00:21 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 7BjJLVR+LFFXJKC3yxdp3ASo0FePoN8W6Y0s6ug/WpA=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:fd:ad:42:dd:b1:07:6d:f2:6b:84:50:4a:d5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jun 13 23:00:21 2026 GMT
Not After : Jun 14 23:00:21 2026 GMT
Subject: CN=23a5576eb9071c11e4e629065a9ac60275030781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f5:ec:3f:d7:b8:8f:d7:88:bc:de:ca:1b:90:
4b:d1:35:aa:84:a0:00:9a:9b:13:cb:aa:c5:a3:88:
75:5e:eb:27:22:37:94:1e:71:e9:32:55:29:db:03:
7a:17:a6:1d:bd:bd:e9:2e:27:82:3c:57:c3:36:12:
f1:fb:08:0d:20:bd:7b:9c:f6:16:58:c6:5f:ea:51:
b0:96:c7:8a:33:9a:a2:6f:83:27:4a:59:b1:4c:ba:
68:0e:c4:95:07:7c:cd:53:dc:e3:8e:67:1d:da:66:
cd:82:90:03:79:cd:5d:b3:4e:7c:76:e4:a5:9b:1c:
7b:f6:e0:38:87:4b:37:7e:15:52:c0:65:eb:18:73:
bf:52:9c:42:39:22:48:81:a0:e3:3c:66:a8:e2:0f:
70:e7:d8:ee:aa:28:ef:ed:a3:78:80:c7:14:45:1c:
22:e2:10:03:2c:c3:a1:fd:c7:a2:d1:f7:1d:73:a9:
6e:dd:90:82:8d:4d:89:09:1c:bb:58:44:0d:30:2a:
fe:b8:c7:f4:f9:52:c7:30:32:67:57:fd:9c:3e:52:
5c:5f:69:21:42:41:0b:3d:5a:5d:e0:be:3a:7f:2f:
58:54:5c:65:0a:04:6e:b5:2b:01:cc:7e:e9:74:49:
eb:f7:57:cd:fb:5f:99:28:69:1d:e8:77:af:17:05:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:57:6E:B9:07:1C:11:E4:E6:29:06:5A:9A:C6:02:75:03:07:81
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:61:56:4c:de:97:ee:db:3f:33:9a:ed:a3:11:9f:a1:45:
bc:84:5a:a6:65:d8:ec:50:ba:91:ec:1c:f8:d0:9d:58:dc:a9:
58:4d:62:6b:c4:fe:a8:12:ff:5c:a5:58:eb:e3:d1:32:ba:f7:
5d:4c:2f:90:9d:e0:ea:98:67:28:5a:8c:31:e4:ee:3f:c5:a5:
45:8a:80:60:d5:7a:d9:01:0f:64:03:6d:54:9f:9c:09:17:5b:
e8:a9:e3:6c:89:ee:a4:23:bf:41:a8:b8:da:32:11:53:02:a9:
bd:97:4a:49:8a:55:a6:e9:d1:aa:f8:8b:69:2c:b7:ea:ad:f5:
b6:44:eb:04:9e:10:48:4e:5c:1c:8b:bf:1e:16:2f:fb:ea:a8:
5a:b8:29:14:82:8f:d1:ef:c3:47:82:6b:8a:4b:8d:bf:fe:b5:
82:10:73:fd:20:5f:92:a6:a8:1e:db:cf:5d:89:ad:b9:de:81:
3a:8d:a6:04:a5:db:97:22:08:c7:0c:53:26:25:48:0c:2d:05:
a1:32:90:04:f6:a8:f6:0c:6a:4f:36:09:ef:46:0c:c9:ce:b2:
f7:7b:ef:de:b1:06:7a:c2:83:7a:7b:27:b0:ff:8c:06:bb:f7:
83:82:04:6f:46:da:cc:6e:bc:7f:ac:98:a9:d1:70:5c:86:e8:
f9:93:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:26:24 2026 by rpki-client