Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: wxR8WCgyFbyehw6jxI0EYpbc75pYPuVodp5M6f9SZd4=
Subject key identifier: A3:47:8C:51:D5:E9:08:64:F3:41:AB:F0:DA:B7:01:E5:AC:9D:CB:D0
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019EC5255FE5B5B61B39026252767BCD4C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 08:00:21 +0000
Manifest this update: Sun 14 Jun 2026 08:00:21 +0000
Manifest next update: Mon 15 Jun 2026 08:00:21 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: H7tSGum2US/b6pOEfNw0ob8s8klfpIIaE5Ax+f4H6OM=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:25:5f:e5:b5:b6:1b:39:02:62:52:76:7b:cd:4c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jun 14 08:00:21 2026 GMT
Not After : Jun 15 08:00:21 2026 GMT
Subject: CN=a3478c51d5e90864f341abf0dab701e5ac9dcbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:f5:a7:eb:ed:c1:d9:ae:76:66:fd:73:5e:
8b:63:1a:2b:89:5b:46:1c:2c:09:59:69:14:d5:4e:
e6:2f:b3:a4:f8:9e:97:46:cd:42:63:7d:b2:54:06:
12:e5:24:0f:ad:53:59:f1:83:4a:53:26:bd:24:92:
d5:92:5c:a1:78:c5:99:54:b4:79:8d:66:d3:d2:0d:
e1:0a:a7:b0:ac:e9:28:70:6a:0c:8e:01:4b:c0:ad:
86:b2:3e:86:ca:9b:a0:1b:5a:66:52:13:69:fe:77:
f2:7b:8a:74:ca:ea:e6:cf:93:4c:8d:10:9d:04:a6:
b7:7a:d5:ed:78:da:69:75:bf:ee:3a:fb:53:41:4c:
d7:b9:8b:95:ef:e3:8b:52:df:c3:99:5a:6a:9c:27:
3a:c9:fa:9a:d8:20:57:97:68:1b:89:93:fe:a0:2a:
b1:84:65:8e:bf:e7:8f:d3:22:ef:e8:36:04:47:6c:
ae:da:5c:9c:bf:e2:f0:dc:1f:86:99:10:d8:29:5a:
94:95:6f:ed:6b:28:d1:b9:ea:02:7b:07:f4:cc:e0:
61:23:de:0d:08:02:c3:fa:f9:39:91:7e:d6:64:68:
98:ac:4f:05:83:39:43:2a:b1:ab:4e:a4:90:54:a8:
41:73:f2:08:41:2f:8d:a3:d0:11:af:9b:a8:23:9b:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:8C:51:D5:E9:08:64:F3:41:AB:F0:DA:B7:01:E5:AC:9D:CB:D0
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b4:98:1e:29:5a:7b:d8:11:a8:9f:0a:0d:dc:5a:7a:c0:65:
5f:a4:e7:38:b0:ab:ba:89:a7:54:92:79:17:0b:48:f6:d1:43:
b9:6e:55:3a:22:80:6d:a8:68:6d:25:d4:c1:2e:5d:fa:74:a1:
39:e8:1d:9f:9a:c1:93:d8:21:12:aa:45:96:9d:ca:5d:f0:61:
3b:90:ac:cc:fa:d3:5b:dd:7b:ff:3d:94:45:ee:64:bf:7b:a2:
dd:6f:1a:31:27:86:dc:4c:03:98:76:4f:97:f4:e1:3b:46:0c:
38:e8:3f:8b:73:4e:ed:64:75:92:32:29:ab:a7:7f:b2:53:b2:
f5:49:0e:85:68:8f:5c:b1:79:e5:78:df:5f:b0:04:a5:1a:a1:
d0:0d:db:85:51:b2:ca:99:af:67:2c:3b:b9:49:64:8b:07:59:
f9:82:3c:f7:49:36:39:1f:19:65:58:e3:d0:27:3f:c6:04:f5:
55:7d:89:31:61:cc:e0:7b:ec:32:49:51:9d:2d:a8:48:8f:3d:
59:10:6b:2a:f4:05:bd:47:8f:59:62:72:e3:8a:60:7a:d5:23:
9e:a8:8b:d8:b5:9c:14:e6:d0:46:cb:24:9d:c7:f8:6d:09:77:
62:54:18:73:41:cf:26:b3:7e:f4:4c:ab:81:b6:f1:6f:db:80:
59:dc:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:47:00 2026 by rpki-client