Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: 7C4Fkph3Z9eCZ9fwrj4fjmt/vgU8qq7x0j+/4R7/y7Y=
Subject key identifier: EC:17:C3:3B:76:0A:E5:D0:C4:47:EE:3A:1A:80:5E:37:E8:A8:F9:F3
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019EC36E787F610B38EC1C440E62032B694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1960
Signing time: Sun 14 Jun 2026 00:00:57 +0000
Manifest this update: Sun 14 Jun 2026 00:00:57 +0000
Manifest next update: Mon 15 Jun 2026 00:00:57 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: CjJbLM5eUTkS1spJKiMEZ4lQQ2dH7u4cr61WBCXzmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:78:7f:61:0b:38:ec:1c:44:0e:62:03:2b:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jun 14 00:00:57 2026 GMT
Not After : Jun 15 00:00:57 2026 GMT
Subject: CN=ec17c33b760ae5d0c447ee3a1a805e37e8a8f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:3a:4b:f6:fa:36:da:c6:9e:69:8e:8f:ed:
3e:70:96:8c:6e:4d:2c:5b:2b:91:5b:53:ad:1c:ec:
18:07:66:16:f4:7c:51:23:2c:31:85:a5:1d:66:78:
8e:1b:86:d7:2a:f3:59:db:8f:e3:8b:1a:67:aa:ca:
09:75:9c:1b:12:43:ef:25:e8:65:41:85:08:89:a2:
ab:5f:9a:4d:6c:be:c6:28:b2:f1:f5:54:a3:27:8e:
f6:98:43:63:6e:0a:50:75:9b:68:c7:fa:44:4e:d1:
de:27:46:5f:ea:81:78:2f:95:f8:8e:23:2a:e1:bc:
53:c2:29:e1:43:ce:2e:f6:48:8a:8f:e0:66:f1:7d:
90:ec:1c:61:02:a0:0b:35:2a:c9:ed:dc:b7:b7:ab:
d3:bb:91:59:e9:35:28:3d:6a:e3:cd:5a:a6:ad:a3:
69:2f:28:e4:67:8d:d7:6d:79:8d:70:44:33:a1:0c:
1e:f7:d1:41:87:d8:22:ac:6a:fc:ff:a9:4f:cf:19:
14:75:7a:be:6d:98:ee:6e:86:31:61:4b:79:98:18:
a8:30:cf:39:3f:e8:f7:a5:61:ef:de:01:54:47:bb:
ca:4b:51:fe:c1:52:28:d4:b8:23:0a:48:8e:8d:5e:
fa:7c:71:fb:7c:b0:3c:b9:f5:e5:11:ca:af:42:7d:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:C3:3B:76:0A:E5:D0:C4:47:EE:3A:1A:80:5E:37:E8:A8:F9:F3
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:eb:ca:37:fd:f5:63:7b:4c:92:65:08:c9:ff:f3:a8:c0:bb:
98:fa:2d:3d:03:9d:44:de:79:04:76:4a:0c:1b:6d:a6:91:2a:
cf:3b:cd:3b:30:13:09:8c:be:82:c9:73:b3:0c:aa:95:1e:f0:
03:04:df:ec:2b:36:f7:2a:82:7a:a5:fa:cb:7c:ab:04:2e:b4:
34:ad:f1:d9:94:c9:34:9d:6a:5a:f5:1c:47:39:a4:6a:6d:fc:
54:3c:65:9a:2c:79:c2:b8:96:0d:23:ae:59:55:e2:c4:8d:17:
77:78:6f:0d:4f:9e:6a:31:2d:d8:a7:71:68:51:4e:09:16:9c:
02:95:c4:fa:11:71:4f:24:2c:b2:1a:f4:fe:24:92:da:30:f9:
7f:97:6a:b9:5d:16:6b:06:bc:29:b8:cc:e8:c8:14:74:b0:d5:
a0:12:32:d9:f4:c6:1e:c9:da:67:19:e6:9b:ca:03:f5:1d:14:
8a:36:f8:df:b3:60:87:1d:76:40:59:bc:1c:d9:96:a4:7f:a1:
c7:34:85:3e:c9:32:5e:ef:ce:6e:14:86:9b:17:65:ab:31:7f:
25:b3:a8:d1:be:18:1e:ca:12:4c:d2:3a:c8:40:8a:f9:5f:55:
32:dd:a8:43:80:df:a7:16:c6:f8:35:d1:67:cc:d9:cb:e1:56:
7e:1e:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:17 2026 by rpki-client