Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: jqqN6v0rdzwyZbrfRR/qtVShcUXmHQSrVgrD6W5lnE8=
Subject key identifier: 74:88:4A:7C:AB:51:AD:8F:AC:06:97:59:19:F5:2D:DD:ED:7E:7A:C3
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019EDDD3637D26D20461D772D09C06375F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 0852
Signing time: Fri 19 Jun 2026 03:01:18 +0000
Manifest this update: Fri 19 Jun 2026 03:01:18 +0000
Manifest next update: Sat 20 Jun 2026 03:01:18 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: f38cE7rc+zORgUi2OnSPXbQUpHQPTRBmFuxtN4BcMC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:d3:63:7d:26:d2:04:61:d7:72:d0:9c:06:37:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Jun 19 03:01:18 2026 GMT
Not After : Jun 20 03:01:18 2026 GMT
Subject: CN=74884a7cab51ad8fac06975919f52ddded7e7ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:e4:78:b4:7f:cb:63:0b:46:c0:75:1d:e9:
f9:1d:fb:d8:bc:af:94:98:ba:68:93:5a:07:2c:dc:
7a:fd:6f:0b:dd:02:fa:0d:80:92:b5:e7:55:2c:3c:
85:15:ae:d7:79:86:6f:c1:59:13:27:d4:82:9d:c1:
8b:bb:80:93:ef:49:c9:c2:00:46:5c:fe:6a:ec:0f:
e1:85:ef:8a:37:64:c8:f0:33:a0:a5:55:a1:a2:a1:
76:1d:37:fc:6d:32:99:92:3e:11:27:cc:c3:46:3a:
40:21:73:16:9b:c7:3c:df:e8:fc:b2:26:d4:54:76:
8b:d1:7a:14:e1:cc:72:42:b5:4a:2e:02:cf:e0:11:
67:7f:8c:57:94:6f:40:84:82:be:7f:c9:36:09:12:
ea:8a:1d:76:c2:b1:61:8c:f3:1b:ad:12:ce:0e:6f:
97:31:7a:09:93:68:c5:9d:3c:ad:da:0e:b1:ea:20:
f3:b4:52:ca:4b:93:53:41:7a:03:fe:4c:5f:2e:b0:
57:e4:b1:1f:a6:b5:49:41:dd:34:f5:d3:09:a6:14:
a5:a0:db:e2:38:27:b0:21:ff:ee:9f:7b:f1:be:7f:
1c:6b:7b:f8:3e:99:92:4f:72:b0:89:1b:a3:f5:d9:
08:63:af:21:54:1e:1d:44:9d:46:36:12:b0:55:1e:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:4A:7C:AB:51:AD:8F:AC:06:97:59:19:F5:2D:DD:ED:7E:7A:C3
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e3:9b:0d:7d:34:4e:62:62:f0:23:33:5b:65:a4:8b:b7:fa:
17:e7:b7:f0:80:e4:24:29:6c:63:3a:c3:0c:13:74:06:c3:35:
43:53:23:83:8a:00:4d:04:a9:41:fe:67:a3:ee:b5:58:13:34:
fd:e0:91:31:c4:2a:8b:9a:b4:26:44:6a:9d:0c:55:7d:88:01:
c6:2f:b0:0e:05:19:6c:06:23:b3:3a:56:07:17:5a:04:2e:29:
c9:b8:52:df:38:cf:ab:da:09:89:54:b0:2a:19:eb:35:2e:2c:
e3:75:da:7b:05:f2:b4:86:2e:d1:b9:54:e0:ee:b9:79:b5:87:
f3:e8:fd:24:e9:ec:26:38:52:5f:72:f6:ee:66:91:9f:79:26:
5f:4d:f2:87:e4:61:7f:2d:a3:ba:c0:23:a1:0c:4f:98:f8:67:
0f:ff:2c:e6:db:52:3b:29:4b:af:f8:94:1f:56:7e:27:f7:d1:
87:21:3e:ee:e4:50:63:f0:2b:4a:0e:d2:d2:23:9d:46:82:46:
98:81:6b:db:f7:da:00:41:c9:b6:30:0d:d3:69:1c:d8:c8:60:
4f:dd:7c:01:d4:cc:d3:28:3a:e7:df:53:8a:5d:17:39:57:7b:
a9:37:2c:ea:51:93:08:a2:ba:72:94:b3:aa:11:a3:37:34:39:
f5:e2:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:21:41 2026 by rpki-client