Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: NHQ7q8oAXthy6sT8JfBibXCss7yPYaelssr7CMHnmPU=
Subject key identifier: B1:95:E0:0B:59:32:C9:C0:C6:6E:00:59:C3:BD:B3:44:BE:9E:C2:C7
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019EC25B7C04ABB3DD1630E8048E3470A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 196E
Signing time: Sat 13 Jun 2026 19:00:35 +0000
Manifest this update: Sat 13 Jun 2026 19:00:35 +0000
Manifest next update: Sun 14 Jun 2026 19:00:35 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: EZ+h9s7wsolwP+DLSIrVLYoOIG7K4kIntFJOZIUF2zc=)
2: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (hash: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:7c:04:ab:b3:dd:16:30:e8:04:8e:34:70:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jun 13 19:00:35 2026 GMT
Not After : Jun 14 19:00:35 2026 GMT
Subject: CN=b195e00b5932c9c0c66e0059c3bdb344be9ec2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:d9:bb:9f:e7:33:4d:3a:24:65:75:ae:5c:
65:25:38:a0:f6:da:09:16:38:92:ed:f7:14:2d:f8:
0a:03:8c:83:a9:d9:c1:14:5a:5f:21:33:f5:5c:16:
8d:3b:b6:c7:38:3b:fd:9c:4c:db:17:1d:88:28:c0:
94:a1:ac:d6:62:5c:28:ea:3e:c6:f0:14:4f:58:9e:
c1:f3:9c:2b:42:96:d6:3a:f9:62:57:94:d1:26:cf:
0b:a7:ce:0e:89:7c:3d:12:a8:16:92:1c:e4:bd:00:
6b:9d:7e:1b:f8:be:8a:15:5f:6a:65:ab:5d:45:fb:
6f:62:6b:99:50:36:8d:da:9a:ac:ea:55:58:56:d8:
34:db:dd:4d:96:0a:70:72:b6:07:ff:c7:d3:fe:0e:
53:11:7b:4e:8a:6e:ea:4a:df:74:50:71:a5:ba:71:
7f:79:2b:21:d0:30:85:16:3e:1b:ec:18:70:32:64:
57:b7:b0:16:de:87:71:5b:43:5d:d5:fd:39:10:de:
53:81:61:74:25:28:27:d1:90:fa:ce:cb:3e:63:a7:
bb:2f:66:f0:9a:63:4c:80:d0:5c:59:98:11:f7:c2:
ee:09:41:a5:98:2a:99:6c:c2:d7:35:b2:e9:db:cf:
1a:b5:c3:0b:c9:fe:2d:5b:e0:ef:05:a7:88:f0:c4:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:95:E0:0B:59:32:C9:C0:C6:6E:00:59:C3:BD:B3:44:BE:9E:C2:C7
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ca:50:90:42:35:bf:7d:3c:55:dd:3d:95:8e:97:4e:3c:26:
3a:f8:77:b0:f1:cf:92:a2:99:19:27:89:58:68:8f:21:60:6b:
8b:c0:8a:35:61:68:8a:c1:69:8c:9f:32:5f:b2:22:90:32:56:
4a:3e:e4:3f:69:33:f5:54:30:e4:ca:08:50:cd:25:35:c1:6b:
01:88:1d:9b:74:68:ae:ee:54:06:d1:10:9d:28:38:4b:4d:40:
75:fe:21:5b:6c:6d:71:4c:e3:9b:5a:1d:49:93:34:d5:82:87:
30:9a:8d:40:a8:a5:13:bc:2c:5c:b8:c3:dc:93:e1:db:f2:a6:
7b:ea:df:71:f3:0a:89:90:db:ec:86:00:3b:33:c2:98:0a:94:
86:19:96:1b:a2:48:05:b1:a5:24:92:1a:88:c5:15:7f:bd:5e:
3f:fb:ae:7e:d0:b4:cb:91:a9:cb:25:8b:ce:f5:83:ce:31:70:
0e:d4:3c:49:0d:a1:aa:c3:2c:82:ac:fe:7f:2d:25:4d:cb:80:
82:27:f0:27:d5:21:0c:67:1e:f8:2a:a1:7f:a2:41:83:b3:fb:
74:c9:dd:c7:7b:52:a4:01:b9:48:ae:51:a1:0a:cf:90:06:02:
24:ac:93:5c:36:81:a3:bd:e2:2a:59:0e:4a:a2:4d:a4:ff:7b:
d3:29:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:44 2026 by rpki-client