Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: ThtXG9wATFR0b8u5VsUYsr8zTiGG/z150Byb1KNXnKs=
Subject key identifier: 90:E0:A4:DB:DB:B0:2E:8D:C8:30:77:C2:54:F8:09:76:23:31:33:90
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019EC1EDFF65C8AF8CA02131616459152832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 166C
Signing time: Sat 13 Jun 2026 17:01:00 +0000
Manifest this update: Sat 13 Jun 2026 17:01:00 +0000
Manifest next update: Sun 14 Jun 2026 17:01:00 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: VJtlD7DPRC24RX6q+4dTf5aaRIR6F31MP3LTmK2cJ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:ff:65:c8:af:8c:a0:21:31:61:64:59:15:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jun 13 17:01:00 2026 GMT
Not After : Jun 14 17:01:00 2026 GMT
Subject: CN=90e0a4dbdbb02e8dc83077c254f8097623313390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:b1:17:6e:ee:11:09:54:7d:02:cb:79:5b:
7b:70:c5:3c:50:45:9d:c1:49:1e:e1:29:c6:04:81:
cf:9a:ce:6e:15:6c:ec:be:73:41:6c:0b:2e:03:b3:
98:4e:9d:3b:56:d2:aa:71:1e:ab:a6:81:d5:e0:16:
41:c2:dc:b1:01:78:9f:54:9c:1a:2b:2d:e7:ef:75:
44:27:27:07:ee:8e:58:0e:22:96:ce:90:e1:50:68:
65:7b:43:07:a8:26:ab:d6:64:53:15:86:39:cc:ce:
ef:a1:1d:fd:b1:25:dc:99:0e:7b:c7:70:99:e5:d4:
1e:c0:67:92:0b:45:74:3b:ee:db:39:67:08:56:ba:
61:7d:8d:d6:a7:31:7c:df:22:5d:82:6f:08:62:a7:
d8:06:73:3a:af:9d:8b:1c:e0:0e:de:51:47:95:7e:
ce:d6:2c:83:25:2a:81:00:24:2c:5a:f9:36:1e:c8:
c9:41:93:8a:e1:a8:a5:01:7d:35:94:5b:e6:15:e9:
dc:82:5f:84:aa:de:20:ee:4e:eb:bc:f4:24:4b:2d:
06:f6:5e:87:87:92:7e:e9:5e:d5:e8:2e:24:a1:98:
2c:3d:55:fb:09:99:94:ac:91:52:31:bd:ff:d4:7b:
c0:79:3e:e0:5e:b5:45:a7:2a:ce:ff:ba:c6:0a:11:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:A4:DB:DB:B0:2E:8D:C8:30:77:C2:54:F8:09:76:23:31:33:90
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:6a:40:df:20:76:24:ec:09:d5:b6:e2:b4:3a:2b:51:16:
ab:9d:d6:fc:a6:b3:2d:e8:d0:03:a4:e9:07:ed:71:d6:4e:75:
7f:80:3a:11:71:19:67:d1:5f:41:9a:98:97:14:ad:39:ab:f4:
98:be:d1:7e:4c:f0:bb:f4:cc:10:cb:76:20:ff:a7:83:26:16:
fc:34:6d:25:af:fc:5a:52:14:ac:a5:f9:bc:2e:ac:d9:5b:f7:
8e:44:72:b9:2f:d2:46:e0:81:e4:07:0d:21:1e:05:99:36:12:
55:f9:e7:f0:e5:c5:fa:cf:6c:09:ad:c1:7c:c3:62:8d:e3:ab:
fc:a9:23:c8:31:8d:09:66:e5:73:a2:c0:9a:11:3d:cc:cd:66:
f3:21:19:af:be:4d:9f:9e:17:8e:ea:80:c0:b2:c0:85:e5:ce:
42:2f:2e:c1:63:af:ac:29:a9:fc:d6:3a:7f:be:22:e0:c4:69:
ba:f0:09:08:72:38:81:c8:8b:76:72:91:72:39:cc:93:a1:93:
d5:60:33:d2:05:f6:04:61:a4:3b:86:de:34:19:9c:81:0d:3c:
c0:d7:74:a3:c8:71:7e:32:a8:55:bc:7b:14:2b:10:c8:fd:90:
94:43:19:50:bd:aa:16:eb:a6:33:33:37:d1:a5:ce:1b:ae:21:
97:3e:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:01:21 2026 by rpki-client