Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: EX7C1p0jyYB2dVYwFEUzaKlXTgKQiS332VihJtS3ta8=
Subject key identifier: 4D:CA:61:D2:A2:69:78:B5:A0:FC:D8:91:B0:CF:7C:16:51:FC:BE:17
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019EBFFF911F6523C5C68FC415866C5155AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0F09
Signing time: Sat 13 Jun 2026 08:00:57 +0000
Manifest this update: Sat 13 Jun 2026 08:00:57 +0000
Manifest next update: Sun 14 Jun 2026 08:00:57 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: No9YMEzJRNjswJkPgCFpKbhE5JkO6zP9Rd5BXGf4IXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:91:1f:65:23:c5:c6:8f:c4:15:86:6c:51:55:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jun 13 08:00:57 2026 GMT
Not After : Jun 14 08:00:57 2026 GMT
Subject: CN=4dca61d2a26978b5a0fcd891b0cf7c1651fcbe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:94:c8:9a:c2:a9:a6:f8:75:0f:0e:00:8a:
00:4c:e5:fa:0b:a1:37:01:97:c0:b7:2b:a1:cc:2d:
3e:0a:5d:97:d3:49:b1:bf:4d:d2:e6:b0:d2:01:72:
dc:60:eb:0e:b2:39:2a:52:d6:a5:72:17:04:89:57:
e9:d2:f9:27:fe:1e:6c:94:d3:15:79:54:b4:0a:43:
90:5b:35:c9:ed:b7:6d:72:90:e0:37:5f:c8:8a:23:
aa:ca:fe:14:8d:43:6f:05:5e:81:9c:d2:6d:30:25:
7f:f9:61:a4:bb:73:b6:28:6d:53:0d:87:6c:f9:d6:
47:40:8a:65:ac:9a:8f:47:9a:38:b8:ad:a0:eb:66:
1c:23:c4:69:88:f1:d8:c8:ce:bf:b8:09:9d:7e:a4:
a3:5e:f8:1b:4f:1d:0a:6c:85:a7:8a:74:4b:20:1a:
79:e2:2e:f2:01:72:b8:29:60:2a:5b:a1:96:d1:9a:
f4:44:80:85:c4:d4:6f:5b:f9:f5:e8:71:00:b7:20:
c3:75:94:90:c0:5b:52:a0:d2:18:ac:dc:35:02:3f:
49:81:ce:17:78:88:37:27:4c:ae:b2:51:bf:0c:e9:
75:04:71:13:9e:ef:ed:fa:80:95:c6:41:5c:60:d6:
4a:21:04:f9:0a:b1:4a:46:72:bb:1f:4f:d9:3f:ec:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:61:D2:A2:69:78:B5:A0:FC:D8:91:B0:CF:7C:16:51:FC:BE:17
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:68:b1:2f:b6:ad:0b:b5:b0:32:ad:a7:e2:63:6c:82:8d:44:
59:0a:be:a4:c6:46:76:da:d9:12:b0:40:8b:ae:ea:98:8f:e9:
7f:ce:2a:02:27:a3:cd:f2:f8:2a:5c:17:1b:df:b5:f8:92:aa:
c9:97:c1:80:69:0d:a5:9e:6c:0b:37:13:55:9e:79:96:b3:45:
a3:0b:33:f1:48:a7:cb:11:9c:6e:6f:94:e1:fc:2e:ab:fe:ed:
67:6b:86:76:77:e9:ed:d5:f8:dc:07:09:8f:39:19:ed:c9:65:
06:ce:af:97:f9:f9:7d:65:c5:03:e8:43:74:40:ff:81:d2:7c:
c7:63:35:12:4d:8d:17:d2:b4:63:25:6f:ce:ee:b9:3c:f8:83:
69:05:c0:e7:0e:a8:de:7b:0e:5a:3a:f6:86:4f:74:8a:69:5e:
23:99:2e:06:fc:69:0a:70:89:8b:fc:fb:96:92:f7:3f:f7:80:
ef:b2:47:1c:e7:74:d0:3d:ee:2f:84:96:af:9a:82:c5:bb:0e:
5a:5f:0f:53:d6:95:b9:f2:d5:89:41:4a:e5:78:93:54:cf:9e:
a6:ee:ae:16:6d:d7:7b:ab:9a:fb:cf:c0:5e:c7:38:de:3c:fa:
36:de:1f:f9:92:e4:64:0d:3c:82:c1:f9:a5:e8:49:29:4b:b7:
15:21:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:04 2026 by rpki-client