Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: 8KiHZt9WcRZcH3c/Va9Psr3Mmcs0KAwEUJklAyUVFbk=
Subject key identifier: 86:33:2B:44:FB:6F:B8:B2:8C:47:CC:A0:41:6B:25:74:B8:E3:F4:89
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019ED42B81F7856C9C4A25941B872F72E755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 138C
Signing time: Wed 17 Jun 2026 06:01:21 +0000
Manifest this update: Wed 17 Jun 2026 06:01:21 +0000
Manifest next update: Thu 18 Jun 2026 06:01:21 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: Zu5tOYDlqWD5WBID1soRGssPSS9yrBYjlflnmzW7UxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:81:f7:85:6c:9c:4a:25:94:1b:87:2f:72:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jun 17 06:01:21 2026 GMT
Not After : Jun 18 06:01:21 2026 GMT
Subject: CN=86332b44fb6fb8b28c47cca0416b2574b8e3f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:9e:49:b0:60:1d:ff:4c:48:d1:39:e4:48:
2b:0f:46:b4:01:a2:9d:fc:89:42:f1:8f:88:6b:cf:
52:2e:94:8f:45:6a:49:3b:58:a4:b2:5b:3a:73:6c:
f1:a7:c1:cc:c9:32:15:f9:86:34:7f:0d:d0:bf:1a:
06:23:36:f1:08:9e:37:44:e0:61:af:e2:e9:29:71:
ef:45:c9:ef:b6:36:6b:db:6f:a4:06:d7:ab:9a:5d:
8c:dc:e9:50:22:b1:6d:e5:18:17:84:77:50:b2:6d:
09:a3:86:21:30:e2:30:2f:b0:39:b2:08:69:29:e8:
20:01:26:bf:0d:64:61:b8:c2:8d:eb:02:2b:15:2b:
b6:fb:c5:39:78:a2:bd:3e:97:c0:0c:1d:f7:b6:b7:
de:b5:ae:9c:81:23:ea:69:93:72:13:e5:a5:b1:5e:
7a:5a:80:b1:c5:cc:c9:58:4a:f6:7a:2c:c6:cc:c2:
ce:a5:f2:ac:bd:6c:ba:db:98:b8:9c:70:52:75:11:
e2:4e:dc:26:55:8f:b6:c1:29:8a:6f:f4:a8:bb:92:
d5:3e:bf:e3:bb:6e:49:09:0a:f6:4d:02:71:ed:e5:
2c:07:8b:6e:91:d4:16:4e:da:42:6d:77:a8:b0:9f:
29:1a:fa:2f:05:e6:e0:f7:77:95:7d:a6:3e:57:14:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:33:2B:44:FB:6F:B8:B2:8C:47:CC:A0:41:6B:25:74:B8:E3:F4:89
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:b2:0a:09:f4:19:f0:47:93:1b:57:17:bc:28:83:bc:08:
64:f3:03:26:18:f6:3f:c3:f6:b0:97:6f:75:4c:25:54:7e:03:
94:48:18:de:67:74:29:98:7a:3d:88:5b:79:24:38:e3:26:66:
85:2e:31:dd:57:85:97:ba:b5:0e:13:d3:af:bf:69:36:5f:3a:
2a:7f:f8:5a:c7:b1:e1:22:94:3a:32:9c:0b:1f:f0:36:c9:73:
31:af:12:e1:24:95:73:ee:25:d6:57:5c:f8:96:1f:b1:a5:04:
35:97:4a:0f:b8:54:67:4a:02:4d:6b:ca:6b:56:91:d1:3d:f1:
e0:16:e4:b4:73:b7:7f:f0:10:51:2d:71:e2:06:df:0f:e1:03:
5b:8e:03:7c:e3:66:4c:e4:3f:ab:ce:e0:fd:16:80:2c:ec:ff:
21:43:a5:e6:42:d9:de:5e:cc:a5:20:85:58:0d:53:0a:ee:60:
5e:80:3d:18:a1:dc:1b:b7:ad:fa:60:17:91:0f:ad:a4:10:20:
c0:98:52:76:32:6f:68:62:b3:00:9b:bb:5a:6c:5d:79:fd:57:
d3:1c:e1:6a:26:80:c5:d6:8b:b1:2d:e1:d8:08:e7:07:f4:e1:
0b:fb:4e:73:f1:c4:36:3c:fd:fb:45:c4:d7:46:b0:04:1d:89:
7c:48:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:39 2026 by rpki-client