Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: 4iL53UUu1xXm7m4X56U10oUXQ3CyYIGs8mhKqXLRfhQ=
Subject key identifier: F0:24:A2:FF:C1:22:B2:28:44:DE:95:6F:BC:10:98:4E:AD:45:FD:17
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019EBE4805838CC6BF2CD388F6D4FF80A93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 11C1
Signing time: Sat 13 Jun 2026 00:00:51 +0000
Manifest this update: Sat 13 Jun 2026 00:00:51 +0000
Manifest next update: Sun 14 Jun 2026 00:00:51 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: GKEH0npo5NSSEmgK5E/tx4KsD4X5Z27vrvU2H5cgaVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:05:83:8c:c6:bf:2c:d3:88:f6:d4:ff:80:a9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jun 13 00:00:51 2026 GMT
Not After : Jun 14 00:00:51 2026 GMT
Subject: CN=f024a2ffc122b22844de956fbc10984ead45fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:99:43:01:f8:9c:6c:5c:a6:de:14:8d:49:
77:d7:b3:eb:44:fa:2a:6c:56:66:31:25:8b:af:55:
a3:25:ae:b8:42:f1:5e:2f:d6:aa:aa:3b:98:f9:60:
2a:89:d7:46:75:9f:39:e1:79:b6:eb:08:ea:9a:5e:
5a:de:44:ed:d7:f7:80:73:c8:12:ad:2e:41:6a:40:
b3:71:ff:ad:8b:4d:dc:0b:1a:d2:df:41:6a:c9:14:
56:59:27:b8:73:53:b8:28:8c:ba:c2:fa:15:bc:fa:
28:06:5f:d9:10:da:d2:ae:1b:ac:18:b7:a1:93:89:
e2:a4:6d:bf:f4:22:52:cb:94:4a:6a:0d:33:b2:fa:
db:f6:31:eb:86:60:e8:6c:ea:be:8d:5f:57:45:16:
c7:89:0d:05:8f:b2:36:e2:21:7c:c0:96:6f:4c:14:
f0:c0:bf:f1:4f:ed:4c:5b:e1:73:e5:5a:41:34:6a:
82:68:54:27:7b:e6:68:13:22:6f:69:a4:a2:bc:0f:
a5:39:da:44:ed:57:e6:15:9a:ec:8c:aa:fe:22:9f:
fe:01:ed:e0:09:3c:af:7d:05:78:e5:e1:e2:a2:7a:
92:c8:da:35:61:20:6d:23:b2:a3:a2:f2:64:da:a8:
af:29:8e:48:61:9c:c0:0f:6d:6d:76:d4:69:7c:d7:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:A2:FF:C1:22:B2:28:44:DE:95:6F:BC:10:98:4E:AD:45:FD:17
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:77:0b:d5:88:75:e9:99:15:86:7d:9c:cd:9e:63:ef:12:
27:29:4c:16:9d:f8:1f:e9:0c:77:67:67:8c:a5:d2:b2:46:45:
3c:cd:0f:f8:2b:4f:29:9a:88:48:37:93:0b:6a:89:a9:25:78:
ea:c5:18:75:5f:87:59:32:84:88:60:1e:67:f2:57:fe:a2:ed:
31:01:c8:3a:18:10:2f:f6:8f:7f:61:58:22:96:5e:22:4e:c8:
e3:2b:7f:75:29:04:55:88:8e:73:07:aa:c3:99:a3:82:5d:5c:
35:23:32:bf:14:25:fa:a4:c4:ba:c5:9f:a4:32:fb:70:7c:b2:
6a:89:f8:e9:61:3e:fd:da:15:13:c1:bf:a0:6c:f0:17:f9:5c:
6f:41:b4:23:04:fb:1b:ff:56:31:57:84:24:47:ae:a3:2e:0b:
db:ea:d7:d5:7d:30:86:0f:a4:74:8b:fd:de:d5:61:61:12:e5:
54:ea:48:b8:dc:87:1c:f0:e5:0e:e6:bd:4b:50:87:1b:e4:a6:
8f:1f:c4:75:6a:00:c8:a9:f8:e2:94:e6:3a:fa:bc:e3:df:8e:
b7:2e:5c:a0:5b:ba:7c:44:42:f2:5c:41:4a:ef:33:91:48:18:
cd:ea:14:cc:58:32:a0:af:db:ee:0f:31:35:14:2e:67:5d:49:
9f:a2:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:18 2026 by rpki-client