
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: isrBu9/GI4gbKbRCti3EvdLbDlTrC0VRCjz9cgxuijY=
Subject key identifier: D2:E0:51:69:F1:F3:0B:87:AB:A5:03:D3:EA:D2:D3:27:FC:D2:63:EA
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019EC4807E206384B9C89756946E5DC05F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 18EF
Signing time: Sun 14 Jun 2026 05:00:15 +0000
Manifest this update: Sun 14 Jun 2026 05:00:15 +0000
Manifest next update: Mon 15 Jun 2026 05:00:15 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 5d0gn9YBZRrjOFnAFUyrjOelnIt2sok8J9GKm8HSzuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:7e:20:63:84:b9:c8:97:56:94:6e:5d:c0:5f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jun 14 05:00:15 2026 GMT
Not After : Jun 15 05:00:15 2026 GMT
Subject: CN=d2e05169f1f30b87aba503d3ead2d327fcd263ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:d4:6f:69:11:1e:f1:46:a0:2c:61:63:50:
94:75:5e:f9:2b:3c:bc:d6:40:b3:74:0d:eb:bd:2b:
af:e3:dd:66:03:5a:62:44:47:b9:66:89:4f:80:c2:
78:f7:7b:7d:a7:81:4d:71:1a:96:78:10:c7:da:5a:
a3:bc:2a:81:50:87:2f:68:64:e2:52:1b:9c:95:a3:
94:47:84:44:67:9c:f3:74:83:dc:42:fc:84:0b:32:
81:ff:0b:1d:ef:70:57:b4:cb:9f:82:36:54:f5:5a:
2d:86:df:69:c2:5a:d4:5e:ae:ac:5f:49:ee:fe:83:
2b:d1:d8:7b:6f:39:a3:5c:1a:d6:2f:2a:08:5b:03:
f4:97:58:47:13:e5:58:8e:3d:db:cb:75:f3:f4:d3:
ed:b4:90:93:ea:08:bd:b4:cb:c8:8b:57:49:0c:8b:
11:c5:64:ac:37:9d:87:60:7e:f4:81:30:7b:bf:c5:
b8:eb:1f:37:07:cc:e1:e5:07:ea:1a:86:ad:35:93:
86:08:2d:e4:d5:c2:54:2d:2b:2b:59:5f:ff:5d:91:
64:82:0e:55:ff:bf:3b:f9:0b:59:72:95:8e:53:21:
7a:48:7e:98:67:72:3c:cc:ed:17:75:39:1e:7b:1f:
9a:44:6c:76:71:ec:91:8e:50:80:da:6b:97:0f:a5:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:51:69:F1:F3:0B:87:AB:A5:03:D3:EA:D2:D3:27:FC:D2:63:EA
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ce:09:b7:07:15:e1:5d:51:d8:89:4c:95:c6:ff:0c:d9:72:
9f:36:75:93:9c:c3:b5:a9:3a:9a:b6:cf:31:d0:50:27:e7:57:
0d:d7:29:f0:ae:7c:60:0b:b8:0d:ae:19:67:81:5e:46:f5:67:
86:ba:72:61:d3:83:91:3d:be:5a:de:30:37:a1:99:70:3e:65:
b2:b3:24:b9:8b:03:5f:af:b4:e0:11:d3:02:b1:ab:7c:57:1a:
43:6f:fc:06:5f:31:c3:6b:7d:e4:d3:6d:6b:33:51:a6:99:dc:
d6:e5:05:b3:8e:85:b8:87:b2:67:fa:18:15:68:dc:fc:f4:60:
41:a6:26:47:02:df:29:a5:46:ec:4a:d9:0e:07:92:6c:b4:af:
ba:e5:98:be:65:c4:3d:59:45:43:00:8a:e4:fc:a0:fe:b5:8f:
d0:85:f8:5e:1f:65:c4:c1:fa:eb:c9:4d:14:76:05:c9:02:6f:
d3:62:5e:6e:60:17:59:c2:fe:8a:ba:d6:5d:41:20:5c:5a:de:
1a:05:6b:80:05:93:82:62:f9:ac:15:07:0c:7f:5e:c6:2f:1c:
cf:e2:e7:ad:76:97:2d:2d:0c:da:90:96:7f:3b:ff:e8:cc:b2:
a5:04:dd:11:c3:59:34:b1:41:d2:ac:36:5a:2c:3d:d6:8e:17:
cd:37:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:14 2026 by rpki-client