Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: NSNhxJMVC6Q28l2d4OvMq2L7L9V2fuS+gkaqltdYzDc=
Subject key identifier: DB:43:B1:9E:72:DB:B5:03:4F:A6:A1:B1:09:B4:3F:3B:9F:7D:87:DE
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019EBEECA72D68C8E993ECC5120639901063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 0480
Signing time: Sat 13 Jun 2026 03:00:40 +0000
Manifest this update: Sat 13 Jun 2026 03:00:40 +0000
Manifest next update: Sun 14 Jun 2026 03:00:40 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 4bH/PNgXWYLkBPipKNbaVC/MmsdLEmnoFW1bp1d9yjw=)
2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
3: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
4: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
5: j6znYu0bJRReLpFKGjBQS3zUf5Q.roa (hash: zeH1/5DXXLfFyvTDI3wxcCj9S7ygGASJokuM/q7Nwsg=)
6: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
7: pKmHj_UwSowJL7JtZ3ZsbqaOaAw.roa (hash: sJJU0c0HzgrlO4mmoDliyfZm6hgydL4GUuwlpgThsI4=)
8: y_q6oXAcn1QTbLa0udIrMROEC1Q.roa (hash: AntBpXmaQ2/xqqPYuzxdq79btBpJ26XMku4sZQLLDjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:a7:2d:68:c8:e9:93:ec:c5:12:06:39:90:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 13 03:00:40 2026 GMT
Not After : Jun 14 03:00:40 2026 GMT
Subject: CN=db43b19e72dbb5034fa6a1b109b43f3b9f7d87de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:24:78:95:e3:c9:06:d1:36:42:d7:bf:99:
50:65:d7:f9:26:89:74:89:56:9d:95:b3:e7:d4:44:
13:a9:f9:a0:cf:a5:2f:cb:de:fd:c2:26:b4:8b:ac:
20:a9:8c:72:f6:9d:1a:d4:fd:a2:20:3e:c9:25:ea:
ae:d7:83:eb:41:f2:4c:12:97:d2:60:70:4a:38:0d:
c3:b7:8a:de:f0:2c:9a:34:cd:b7:4f:8f:06:45:5f:
b3:5a:0b:e3:d5:d8:a7:18:88:08:82:91:ff:7a:c5:
3f:de:99:d9:e6:a1:31:4b:b8:42:cb:90:44:f8:61:
70:8d:63:9d:23:c3:ff:09:14:78:18:d2:7e:6f:89:
77:3a:74:f4:3c:c6:2e:4a:14:8a:fa:89:3d:f9:69:
73:e2:b4:f9:f1:7b:08:42:52:38:d9:f4:57:ab:0b:
58:0f:40:2d:84:be:2c:4a:30:ff:ed:55:11:82:e4:
ad:d9:81:b0:34:b7:9e:be:ac:a5:85:22:41:9c:65:
ae:96:47:31:c3:89:a6:3d:70:cf:6c:af:2a:f5:5c:
31:d7:27:b7:c0:27:ba:75:c8:0f:b3:66:4b:fd:4a:
57:f4:3b:ff:5d:fd:ae:3d:1c:dc:d4:45:1a:37:8b:
84:ef:22:e5:c9:7e:3e:f9:83:6e:d2:78:0e:09:9e:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:B1:9E:72:DB:B5:03:4F:A6:A1:B1:09:B4:3F:3B:9F:7D:87:DE
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:82:9f:88:7e:48:35:f7:07:1c:54:0f:29:63:fc:0e:1a:
82:a5:47:32:06:2d:8a:7b:22:f3:e3:86:25:f2:c8:e5:5f:72:
98:b1:64:88:aa:be:46:64:43:e4:0d:ca:0f:06:de:2a:5f:0a:
ff:6e:87:0a:e1:3d:f7:60:3a:76:c5:e1:13:d6:50:b1:23:60:
8f:37:1b:b5:f1:09:9c:75:41:6c:af:6a:57:1b:10:27:bc:e1:
dd:98:28:e3:94:3d:4d:04:f2:1a:1f:e8:a7:98:4f:39:63:1e:
71:9b:55:5d:ab:86:dd:09:94:70:1e:ce:39:e5:44:13:ae:31:
34:16:d3:3c:2a:39:6d:ce:4b:9c:f1:5b:ec:42:b7:52:45:5b:
9e:2a:17:cf:9b:ee:57:95:fe:22:ff:de:33:a0:03:b7:c8:63:
16:e1:58:00:73:c6:8a:99:1c:ac:43:93:aa:8e:3d:dc:22:fc:
5f:65:94:8f:ea:a9:a6:3f:9d:f2:36:f9:6d:77:44:7a:ad:a3:
33:ee:e1:8e:24:93:3c:f8:a9:b9:dd:60:50:ba:58:55:04:6b:
54:3e:73:ff:c6:1d:55:03:a9:03:da:88:5a:b6:e6:b0:b0:50:
99:da:fa:2c:f0:8b:18:2f:7a:51:57:b2:b7:43:96:49:69:06:
53:e6:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:10 2026 by rpki-client