Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: Er0Zgx4/otnaEWWY/1j8vifj35MN+KnjMcLeInY49h4=
Subject key identifier: 1C:F0:C6:2E:06:B5:F6:82:86:11:FC:91:92:27:1A:45:49:2A:95:00
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019EBE47E0FBD263464C66557F5DC35579A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:42 +0000
Manifest this update: Sat 13 Jun 2026 00:00:42 +0000
Manifest next update: Sun 14 Jun 2026 00:00:42 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: 5P1duKDG369tvb56Uc7QPxpCCzlUFEeIlu/WPRaoNew=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:e0:fb:d2:63:46:4c:66:55:7f:5d:c3:55:79:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jun 13 00:00:42 2026 GMT
Not After : Jun 14 00:00:42 2026 GMT
Subject: CN=1cf0c62e06b5f6828611fc9192271a45492a9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:ef:b0:87:c5:ad:19:88:fc:a5:14:0c:a5:
08:67:d0:83:65:f0:a0:91:95:28:b6:c2:c7:c5:7a:
22:65:f8:b3:22:28:82:f7:26:fe:b5:ec:ed:65:bd:
e9:90:52:2f:8e:57:7c:be:d9:a5:9d:20:1f:03:f8:
26:44:44:4c:f9:bc:a7:57:5d:2b:72:c4:fc:9d:a5:
23:dc:24:f8:56:9e:c5:41:22:55:04:7c:b0:66:e9:
4e:a2:94:43:ec:c3:c1:c4:33:a1:6f:40:e1:89:2e:
16:45:be:58:54:e3:cc:0e:be:7d:1d:76:85:3d:ca:
51:74:61:2b:d6:11:fd:7c:99:a2:e9:88:46:73:09:
b0:6e:2a:fd:d4:46:6c:22:86:ee:85:eb:fd:52:30:
1d:23:8c:14:39:d9:17:2a:ca:70:d1:79:ff:8d:0c:
9a:5f:5e:c8:a7:75:2a:cd:af:d5:2e:95:17:16:5a:
d0:59:68:2a:7f:43:6f:4d:ae:10:24:ce:3b:75:03:
28:11:05:a1:24:f0:97:bc:6b:8b:fe:16:b5:ae:fd:
12:04:9e:9a:f8:87:1b:5c:e5:c1:fd:18:53:45:c1:
e6:ac:62:1b:36:d4:6f:e0:ed:a6:4f:7e:25:98:9c:
c3:34:d1:b2:22:fe:58:57:05:4e:43:f1:ad:28:94:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F0:C6:2E:06:B5:F6:82:86:11:FC:91:92:27:1A:45:49:2A:95:00
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:ea:5e:cc:78:d0:a9:c0:94:82:6f:61:04:44:ef:0c:06:
7a:b3:63:92:02:c7:13:2b:8e:86:47:d6:91:ba:7c:0e:b6:6a:
b1:00:b3:db:12:fb:3b:1a:c2:90:0d:bd:b6:5e:27:f9:76:0c:
8b:7b:88:db:8f:ad:90:8e:2b:ca:6e:9d:ba:d3:08:2a:ab:be:
d9:93:6b:d9:e6:39:65:d1:7d:98:c2:be:40:69:6b:3e:a3:42:
0e:b6:d0:9b:19:fc:48:46:55:17:b7:0f:62:fe:f7:6f:c2:86:
d0:16:3e:37:ad:55:06:f5:30:b3:f4:5e:34:6c:88:07:97:4d:
96:4e:2b:3d:ab:26:64:1a:eb:1b:6f:71:5b:69:75:c4:c7:31:
65:5e:e5:3b:94:b2:08:1a:65:f9:12:d1:87:fd:9f:59:1f:e8:
eb:8f:f0:6d:da:4a:bc:b4:e4:a6:cc:54:2d:54:5a:3d:fc:7d:
19:cb:58:d1:ba:63:e2:62:8d:8a:dc:97:67:db:ae:65:fd:77:
f4:29:7a:6d:77:40:3c:0b:97:4b:25:89:d5:66:3f:29:00:ee:
14:59:b2:31:9f:e1:32:fc:ba:48:d8:77:8f:6f:a2:c8:b4:59:
47:03:a6:da:38:c7:08:3a:f1:f8:05:91:68:4e:e7:78:b9:19:
dd:51:8b:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+R+D70mNGTGZVf13DVXmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy
YTcyNmIwHhcNMjYwNjEzMDAwMDQyWhcNMjYwNjE0MDAwMDQyWjAzMTEwLwYDVQQD
EygxY2YwYzYyZTA2YjVmNjgyODYxMWZjOTE5MjI3MWE0NTQ5MmE5NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/vvsIfFrRmI/KUUDKUIZ9CDZfCg
kZUotsLHxXoiZfizIiiC9yb+teztZb3pkFIvjld8vtmlnSAfA/gmRERM+bynV10r
csT8naUj3CT4Vp7FQSJVBHywZulOopRD7MPBxDOhb0DhiS4WRb5YVOPMDr59HXaF
PcpRdGEr1hH9fJmi6YhGcwmwbir91EZsIobuhev9UjAdI4wUOdkXKspw0Xn/jQya
X17Ip3Uqza/VLpUXFlrQWWgqf0NvTa4QJM47dQMoEQWhJPCXvGuL/ha1rv0SBJ6a
+IcbXOXB/RhTRcHmrGIbNtRv4O2mT34lmJzDNNGyIv5YVwVOQ/GtKJTSowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBzwxi4GtfaChhH8kZInGkVJKpUAMB8GA1UdIwQY
MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli
LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi
YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQ3q
Xsx40KnAlIJvYQRE7wwGerNjkgLHEyuOhkfWkbp8DrZqsQCz2xL7OxrCkA29tl4n
+XYMi3uI24+tkI4rym6dutMIKqu+2ZNr2eY5ZdF9mMK+QGlrPqNCDrbQmxn8SEZV
F7cPYv73b8KG0BY+N61VBvUws/ReNGyIB5dNlk4rPasmZBrrG29xW2l1xMcxZV7l
O5SyCBpl+RLRh/2fWR/o64/wbdpKvLTkpsxULVRaPfx9GctY0bpj4mKNityXZ9uu
Zf139Cl6bXdAPAuXSyWJ1WY/KQDuFFmyMZ/hMvy6SNh3j2+iyLRZRwOm2jjHCDrx
+AWRaE7neLkZ3VGLqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:23 2026 by rpki-client