Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: CjL0nz+TvH0mrXHx8YLVccVWXlWu3UinpvmgEos11Uw=
Subject key identifier: 42:3C:65:18:C0:35:06:30:B9:00:8B:0A:2C:12:D9:42:FC:E5:68:6E
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019EC292AA3E9C60C6109888F6B13520D177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 17E4
Signing time: Sat 13 Jun 2026 20:00:52 +0000
Manifest this update: Sat 13 Jun 2026 20:00:52 +0000
Manifest next update: Sun 14 Jun 2026 20:00:52 +0000
Files and hashes: 1: HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa (hash: iTEJqDydJmTzPI0AxKyGiy/lzp+8Axti0R4ZxzfqlZo=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: N+h/sI/XVOsJqangJtwqcO1S/6HxWndNbrB5sxsB/tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:aa:3e:9c:60:c6:10:98:88:f6:b1:35:20:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Jun 13 20:00:52 2026 GMT
Not After : Jun 14 20:00:52 2026 GMT
Subject: CN=423c6518c0350630b9008b0a2c12d942fce5686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:2f:b7:43:09:a0:01:b3:bf:32:95:fa:a7:
5d:b9:09:f2:51:c6:46:f3:f1:7b:f8:aa:bd:31:e7:
74:9a:ba:d2:fd:ba:4d:74:cc:e0:e3:e3:19:95:f9:
6b:7d:65:40:47:b7:75:0b:ac:b9:05:4f:cf:1b:38:
45:d6:12:33:2b:ef:bb:8b:13:45:74:1f:1d:ac:52:
2d:9c:92:da:52:19:25:4d:07:bd:98:43:03:6a:9b:
12:65:bb:18:ec:ec:73:dd:29:33:1e:48:26:ab:cb:
23:ee:f3:3d:89:3a:60:36:35:68:a7:d7:51:1c:af:
65:73:f8:73:52:26:fd:3c:22:84:3a:fc:e7:a7:f4:
3e:16:51:fb:cb:95:14:44:53:e8:ba:bb:0d:66:ed:
f1:16:a3:e1:37:b0:b8:aa:59:bf:f0:3a:ae:21:18:
66:73:41:a9:f7:a7:9b:83:93:24:0d:d7:43:ed:58:
9a:b4:bc:3e:a5:0e:23:0b:64:3e:e2:d9:a4:59:94:
d0:8d:75:98:17:32:25:dc:ba:d1:43:34:0f:47:dc:
5b:53:12:0a:93:61:4b:53:f5:a4:39:a6:23:de:cf:
40:f1:84:b3:6b:be:49:12:8d:d8:82:81:d8:5e:8a:
36:ba:68:3c:45:eb:ca:6a:be:75:d2:70:0e:39:b0:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:65:18:C0:35:06:30:B9:00:8B:0A:2C:12:D9:42:FC:E5:68:6E
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:58:8b:2c:3b:cc:5c:7f:9e:9b:83:88:39:fb:85:a0:5d:
d0:64:9e:51:82:24:81:85:30:f8:ba:e6:9b:58:36:6a:8b:42:
f0:dd:e2:a1:63:8e:47:7d:d7:4b:2c:2b:da:d6:d6:1f:72:c5:
e3:a9:59:c1:0f:66:c3:33:29:e1:ea:65:25:66:df:60:b1:e3:
b4:bd:1c:5b:fb:21:d4:c6:03:a9:8a:be:58:78:f2:81:2f:bc:
fc:3d:ef:09:6b:7d:c4:c9:8b:7b:6e:6a:7b:e6:5f:ce:00:94:
f5:81:a7:5e:89:bd:15:b0:6c:b9:1a:8f:7f:19:9b:9d:f0:93:
75:46:4e:13:87:67:68:90:ac:fc:82:7e:09:a6:ad:9a:02:39:
38:9c:33:ae:02:e7:51:90:b8:eb:06:33:66:e4:19:de:81:8f:
2f:21:c0:84:79:4c:a6:60:de:18:9d:b3:7c:8e:97:96:67:6d:
5e:bb:8f:e6:07:eb:16:3e:b0:2f:78:6e:13:49:d8:8c:35:e3:
e6:7d:d0:50:17:45:c8:bd:80:98:b8:2f:0f:26:ec:5a:3e:de:
28:9d:98:5b:a0:75:ca:29:31:63:09:01:cd:16:82:74:09:56:
b7:d5:9e:f3:86:57:b7:17:c3:19:5c:1d:fa:2c:aa:e2:8d:cd:
45:26:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:46 2026 by rpki-client