Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: n3C5gT1e/rGNMi9vfr7m9Tx+2wAt90NsBbTWIIKlokI=
Subject key identifier: FB:A2:F4:3A:32:4B:0C:CF:25:83:F4:AD:96:DE:88:7F:52:7D:91:A9
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 019EBEEC701B0EA358FD43FCA90BDC708CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 171E
Signing time: Sat 13 Jun 2026 03:00:26 +0000
Manifest this update: Sat 13 Jun 2026 03:00:26 +0000
Manifest next update: Sun 14 Jun 2026 03:00:26 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: /2bbexd3gd1qcS68fUFwPh6NnPEaffnO5khvAc/Ms5M=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:70:1b:0e:a3:58:fd:43:fc:a9:0b:dc:70:8c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jun 13 03:00:26 2026 GMT
Not After : Jun 14 03:00:26 2026 GMT
Subject: CN=fba2f43a324b0ccf2583f4ad96de887f527d91a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:67:35:6f:89:8e:62:87:56:4b:b2:56:21:
b8:17:d5:a7:a6:06:1f:d1:10:2c:68:30:f9:04:e6:
95:c0:b9:2e:36:31:92:5e:d0:46:7d:51:4b:59:85:
91:41:51:da:d1:95:29:70:d7:83:b5:6a:80:b9:f1:
21:6c:45:a4:d6:7a:9c:4b:9f:6b:6e:84:06:8d:99:
0e:b6:af:2c:bb:8b:e2:e9:4d:43:19:4b:f0:83:5d:
1a:ea:74:a2:db:e8:70:30:eb:cc:8c:62:5f:d7:b2:
8e:be:17:86:b5:f2:ae:58:f8:c6:98:49:8f:6f:3c:
f7:05:b6:de:08:2d:ef:34:d7:77:b0:ca:05:06:5e:
b3:b8:ba:56:1d:98:01:0d:88:05:7b:9b:a6:39:f0:
35:e7:ba:f7:d1:6a:64:fe:13:0f:54:7d:d2:f4:85:
46:99:cf:61:04:29:08:48:dc:7a:5c:31:46:fc:c6:
17:ec:d2:53:d0:6d:80:c9:0a:82:39:05:98:7c:30:
b6:0c:44:49:d6:5b:b6:20:c4:8b:bb:90:a1:b4:e0:
7c:81:69:be:5c:bb:3a:07:9f:71:69:19:f6:8b:94:
c9:c3:6e:ed:c8:e3:26:6a:84:28:8c:52:4c:bc:74:
a5:0c:d8:05:33:76:6e:4b:38:1f:81:ab:dc:8c:4c:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:F4:3A:32:4B:0C:CF:25:83:F4:AD:96:DE:88:7F:52:7D:91:A9
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5a:b0:18:76:30:97:3f:bc:4d:50:31:cb:07:8d:78:2f:ad:
79:c3:01:f8:af:65:c6:6b:ff:3c:59:88:e2:53:75:4c:45:b3:
3b:01:63:d1:e4:9f:16:c5:33:12:dc:94:2a:74:4e:90:a0:01:
22:df:0f:fd:01:29:b1:64:ea:8e:12:b2:e9:2a:e9:9a:7b:52:
e1:85:2a:85:15:12:b3:5f:b0:25:50:b3:ce:fa:56:e9:ea:b4:
02:f1:f4:4a:d1:c0:bf:4f:0c:56:5f:a0:be:b1:de:bc:a0:a4:
75:dc:f8:36:81:f1:ad:64:1a:f6:77:50:20:09:4e:8b:0b:36:
97:b2:ac:0c:d9:82:de:ff:f5:a6:23:1f:2a:91:7c:13:46:be:
e0:59:80:6f:0d:c8:aa:b0:78:eb:a9:8a:f6:f6:df:60:06:55:
a3:0a:15:ab:55:5f:f2:f0:57:4d:f0:47:35:44:cf:7b:19:ad:
06:36:56:62:27:5a:f7:34:02:5a:a0:38:75:0f:15:57:8c:22:
7d:79:fe:16:49:5e:a2:68:86:6a:14:77:4b:b2:e6:44:14:6d:
4f:a7:0b:04:0f:a7:00:88:25:71:22:7f:f5:c2:a2:5d:ba:61:
90:71:00:c4:35:69:68:ea:20:7d:c8:4a:95:9a:82:76:6e:b2:
35:88:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:34 2026 by rpki-client