Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: vRLN/m2LVqw0DsWoWtNUI0m+ua6CaXeeqnou4Phj3yQ=
Subject key identifier: F3:6E:3B:92:AE:09:A9:AC:59:D9:E3:99:EC:9F:6A:96:91:3D:FB:AE
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019EC412ECA2BABFD20D22747200FC1071B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 032D
Signing time: Sun 14 Jun 2026 03:00:34 +0000
Manifest this update: Sun 14 Jun 2026 03:00:34 +0000
Manifest next update: Mon 15 Jun 2026 03:00:34 +0000
Files and hashes: 1: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: W2ByhZSJdzrfN8tEz2R4Ut5iaaOqgavbdbYIsZNj3tE=)
2: qMO76GFUq-hY40YmP_a09TsI33Y.roa (hash: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:ec:a2:ba:bf:d2:0d:22:74:72:00:fc:10:71:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Jun 14 03:00:34 2026 GMT
Not After : Jun 15 03:00:34 2026 GMT
Subject: CN=f36e3b92ae09a9ac59d9e399ec9f6a96913dfbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:1d:3a:ce:0a:52:f3:dc:06:7c:b3:15:24:
9f:ab:03:98:72:f2:2c:e0:9e:8c:6b:c6:d0:54:b5:
04:19:95:e6:cc:70:c8:08:8c:e0:d6:f8:02:7d:df:
30:12:21:54:29:0a:f3:b6:d1:70:3b:3d:ff:ba:90:
81:e2:15:b9:3a:53:cb:2e:1c:60:48:0d:34:b9:67:
7e:e5:ce:0f:f7:fc:1b:80:36:7a:25:c1:42:79:e5:
9c:d4:db:54:88:b3:7a:f5:8d:54:d0:3a:e2:2a:29:
53:ed:fb:ee:c4:90:aa:6f:d3:a7:c3:5a:ba:df:d0:
dd:db:ca:2b:6b:69:10:41:eb:15:19:45:4e:0e:84:
40:a7:87:07:99:df:13:6e:f6:c1:fa:d9:4f:a0:57:
c5:c8:5f:56:4b:e5:01:a1:72:80:84:fd:5e:41:6d:
a9:ad:43:1d:de:2b:dc:87:59:0b:2a:92:a5:8e:11:
67:cf:ec:9b:5e:1b:42:a0:ba:b4:ec:f9:64:07:19:
30:47:66:c8:32:ca:b7:b1:06:cc:85:1d:d6:10:25:
87:a2:7d:46:33:3c:e8:8a:f1:39:00:aa:c0:a7:1e:
ef:bd:f9:29:32:4c:07:ba:e5:85:ea:2d:2d:62:aa:
db:4f:4b:75:db:83:b9:3f:38:11:f6:f4:9c:7f:25:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6E:3B:92:AE:09:A9:AC:59:D9:E3:99:EC:9F:6A:96:91:3D:FB:AE
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:92:cb:02:8a:d4:68:6b:1e:e4:6b:a9:24:a4:0c:5d:d5:
b5:22:18:61:a7:25:4f:c0:71:b9:cf:b2:0d:2f:60:e9:e0:e6:
8c:45:2d:97:88:f4:c5:56:1e:4c:72:0f:08:77:d5:76:df:ec:
3b:1f:c2:a1:f2:46:af:ef:aa:d7:94:db:44:17:34:af:9f:c5:
bd:88:53:ee:5f:00:06:86:ee:dc:04:f0:e9:a3:92:da:1a:e9:
1d:97:44:d6:29:15:a7:b8:27:9b:e1:e1:2c:45:ba:e7:df:4b:
66:96:49:6b:87:65:aa:e2:83:82:03:41:d5:0e:31:4a:17:10:
e1:91:8b:8a:ff:ee:49:57:e7:d1:c1:86:16:57:cb:7a:e0:f3:
20:1d:5e:f0:4d:2c:d2:ac:e8:f5:db:73:de:5b:ce:bc:41:2c:
e0:00:d1:70:00:22:e4:69:bc:0e:7f:a2:b4:cf:10:e4:4d:34:
82:1b:d1:c0:86:c0:70:c9:45:c3:5b:34:ca:ed:41:bc:1c:50:
11:a9:ea:ca:5b:b5:91:09:38:ca:e2:ac:1b:1b:ed:a4:41:e7:
3a:54:f2:de:b4:f4:42:ae:ad:53:6e:b2:b4:5d:9d:43:53:99:
2e:8c:a4:d1:82:8f:26:68:d1:59:76:32:f6:82:bb:3b:b2:a5:
c4:84:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:53 2026 by rpki-client