Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: OMu7O38sc71LBNh4rK3UM1H+XhYqHe80JMtbRmp0b54=
Subject key identifier: E6:41:3B:75:57:2B:30:ED:DE:F7:33:4D:66:4E:96:8F:15:2F:F3:3A
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019EBF2407447E7C650583A437A7AFAA5DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0DD9
Signing time: Sat 13 Jun 2026 04:01:09 +0000
Manifest this update: Sat 13 Jun 2026 04:01:09 +0000
Manifest next update: Sun 14 Jun 2026 04:01:09 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: A278UNimSL6ZeWQ8sNEw+NznVp09O3gCxqDR3IPE8c0=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:07:44:7e:7c:65:05:83:a4:37:a7:af:aa:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jun 13 04:01:09 2026 GMT
Not After : Jun 14 04:01:09 2026 GMT
Subject: CN=e6413b75572b30eddef7334d664e968f152ff33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:a0:f4:09:d0:d7:2d:11:12:c6:12:70:a9:
2b:4c:a7:b7:b5:46:72:fd:f5:42:ca:ea:44:d6:3f:
34:51:37:b2:32:bd:3a:2b:85:32:d1:03:a6:cb:b8:
1a:ee:73:de:5d:44:21:10:ce:a3:5f:57:c2:b8:8d:
41:08:a4:76:16:6e:b6:d9:56:2f:ca:de:0b:69:d9:
4d:e2:1f:28:29:4f:d6:14:9e:02:48:f4:8c:7c:4e:
3e:d9:1b:94:c5:86:38:8c:30:46:23:04:7f:9d:54:
db:8a:82:02:3e:91:e4:77:94:ae:21:51:1c:01:34:
e0:6b:f6:35:75:e9:40:3c:b3:d4:54:95:3b:58:72:
95:85:6f:1a:da:9a:e1:ca:49:a3:67:94:f8:70:a4:
a2:70:39:8c:11:bd:72:35:de:55:ce:92:86:72:c8:
04:6b:4a:c0:d2:66:a4:82:d5:28:10:b1:6b:e7:9b:
a6:5e:33:3c:be:52:ea:6a:5d:e3:e4:12:f4:92:27:
0e:44:1c:99:6e:8c:a9:e1:7c:43:d8:1f:4d:7b:81:
b9:a5:48:83:ab:1f:6f:37:8a:03:b2:a0:30:3e:32:
8d:42:8c:16:bb:a6:7a:a8:53:37:ca:22:b4:4d:c5:
7a:f6:0f:c0:84:05:01:d7:1d:33:a6:90:3f:a6:b8:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:3B:75:57:2B:30:ED:DE:F7:33:4D:66:4E:96:8F:15:2F:F3:3A
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:94:34:33:3f:84:cd:ee:a3:4d:d7:8f:5d:fa:90:bc:eb:87:
b9:82:3a:5f:d0:c6:8c:ab:bd:de:30:c4:4e:f9:4a:c1:81:47:
06:94:ac:28:cc:d9:a8:1f:1b:45:ce:14:1a:c5:53:bd:c8:38:
1b:a2:4d:d9:48:21:d9:a4:f1:6b:6f:f7:3d:e1:6d:39:74:8a:
83:39:c8:3c:a0:0e:81:4c:73:96:a3:bd:fc:83:25:ab:23:8b:
94:b3:0d:91:07:7d:be:b5:96:13:d6:94:7b:cd:45:b0:c5:a1:
06:fe:ec:09:a0:36:d5:14:dc:9e:74:5a:76:0f:33:f3:44:82:
5f:ff:a8:3f:99:94:33:41:01:8a:6c:9f:74:85:35:f8:a8:8f:
57:9c:c9:e8:dc:26:23:36:ac:25:a5:43:b2:0f:82:db:0a:2a:
e0:32:1b:66:8a:b0:8d:73:be:01:c0:a7:d9:09:61:6a:5e:b3:
61:61:2a:86:fc:8a:2b:17:78:03:03:1d:7a:90:51:10:54:c9:
2f:2a:44:18:1f:d8:79:0a:db:d0:93:5b:27:97:bf:b2:59:fb:
fd:84:48:b0:85:04:2e:a1:5d:56:40:6d:10:6d:7c:95:b2:f6:
55:5d:38:f0:8c:10:3a:fc:22:5c:03:9f:68:30:ff:f2:d9:a4:
8f:72:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:59 2026 by rpki-client