Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: FDq3moVx+0uj7sMRuVx3yuljKBJCq/walaLeM8YP14g=
Subject key identifier: 88:C6:B0:D9:05:A0:1E:71:E6:B4:2E:97:98:9B:B9:F7:E8:51:70:9D
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019EC3002BB1799070B8BE57FDDD8FA71E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:00:28 +0000
Manifest this update: Sat 13 Jun 2026 22:00:28 +0000
Manifest next update: Sun 14 Jun 2026 22:00:28 +0000
Files and hashes: 1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: seVxDzgHhPJQcm9xSYY86DvDqaFiYLgYuWJLTv8UILU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:2b:b1:79:90:70:b8:be:57:fd:dd:8f:a7:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jun 13 22:00:28 2026 GMT
Not After : Jun 14 22:00:28 2026 GMT
Subject: CN=88c6b0d905a01e71e6b42e97989bb9f7e851709d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:da:1c:c0:2f:f0:be:4a:65:7d:d2:36:59:
26:75:80:8e:91:de:0b:85:59:19:9a:7b:b2:6e:2a:
00:b0:62:32:61:57:d7:fe:38:06:b3:59:5e:2f:06:
19:25:75:d2:b5:6b:9e:49:17:47:3d:53:4c:3d:a3:
84:e8:b7:c5:d6:b3:b4:ec:c9:57:de:45:d8:ad:f9:
cd:02:d3:c8:8e:a2:76:87:8b:c6:a4:98:e8:66:a9:
9a:e3:27:04:18:c0:a7:db:2c:d8:e3:de:4c:fb:e5:
39:23:93:b0:d3:bd:19:1b:4b:5a:4d:1c:45:c9:b6:
53:43:45:02:fd:46:4a:21:b7:f2:cd:5b:ed:35:1f:
b3:de:a8:e6:d1:55:95:dc:e7:09:65:34:47:03:e9:
72:aa:7a:d3:80:80:57:7b:dd:09:29:22:a7:fa:5a:
a2:84:83:e4:4d:d8:d0:83:03:bf:db:5e:16:b2:ac:
88:df:49:a0:d9:cd:e7:c4:4b:8a:85:f0:0d:cb:f9:
b7:09:67:c7:b0:35:e8:4e:22:f9:d8:a4:c6:aa:23:
db:a0:1d:9d:e4:a6:41:81:d8:ec:3b:96:6e:86:d2:
3a:49:a3:a1:00:57:84:26:2f:26:16:ad:b0:e6:2b:
50:2c:cf:3f:60:a5:12:7a:8e:12:f7:ec:ac:1c:c7:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:B0:D9:05:A0:1E:71:E6:B4:2E:97:98:9B:B9:F7:E8:51:70:9D
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:9e:eb:aa:86:e1:73:ab:2e:50:b5:97:fd:3b:24:5c:df:
55:70:de:b7:84:06:e1:18:83:33:cd:6b:0a:aa:92:e6:00:85:
d8:15:54:8b:31:55:0f:74:67:d1:ae:fd:77:20:44:ba:46:89:
cd:fe:2e:29:98:e9:1d:21:bd:90:c0:44:6b:0b:12:1f:d5:a7:
80:4b:9c:9a:94:12:85:48:bb:d8:14:0e:cb:92:16:41:60:93:
0e:7f:0c:84:61:fa:3b:b1:50:43:cd:a1:38:81:f8:66:d9:b7:
60:4f:af:23:73:5e:48:55:84:5e:37:46:30:6c:a3:a6:23:d0:
e4:03:58:c9:e1:c4:f5:7b:af:4b:36:79:e9:e8:33:eb:fb:49:
18:31:91:ea:4c:27:07:c1:fc:2e:65:f6:22:97:07:97:b5:f2:
4f:2b:33:1f:12:b7:1a:4e:b5:1f:bd:f3:47:3d:0d:55:da:0a:
4e:64:36:05:56:d9:ae:08:f9:fd:8f:02:b8:b2:ba:72:93:55:
cc:a1:f1:9c:04:89:a0:a0:cb:2a:bf:93:1f:6f:72:7c:3e:af:
72:6e:e1:5d:f7:22:c5:7b:5a:c3:c8:5b:6d:33:d9:83:ca:bc:
37:4a:7c:4b:a2:a0:5a:73:dc:bf:4d:13:64:21:a0:ff:2d:f4:
7e:03:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:23:17 2026 by rpki-client