Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: WslBNGkHxWmuCTK6yjBkxmUxR8xc1bwaPgjHTZyqV8o=
Subject key identifier: 0E:40:11:9A:39:14:FE:79:05:FE:DD:83:14:FE:3D:E6:26:A8:8D:D5
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019EC06DFAFB15555CE552497E6AE3359799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 09C2
Signing time: Sat 13 Jun 2026 10:01:33 +0000
Manifest this update: Sat 13 Jun 2026 10:01:33 +0000
Manifest next update: Sun 14 Jun 2026 10:01:33 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: qLNeIwm2OJqSf3LQTZTRXJppqUYuXUtH67onNcb6Abo=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:fa:fb:15:55:5c:e5:52:49:7e:6a:e3:35:97:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jun 13 10:01:33 2026 GMT
Not After : Jun 14 10:01:33 2026 GMT
Subject: CN=0e40119a3914fe7905fedd8314fe3de626a88dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:11:d4:ba:69:55:d5:34:a7:f8:36:53:ff:
1e:ad:0f:35:68:5a:a3:36:9f:7f:76:9e:65:bd:45:
1b:fd:dd:62:ea:1c:f5:e7:19:61:53:f0:d4:ad:6a:
ab:8e:5a:04:80:1c:7f:87:df:c3:e4:2f:e6:d9:4e:
d7:2a:dd:b3:ba:07:f7:db:8f:b3:74:8d:64:2b:14:
dc:97:7c:44:2c:a1:5e:8c:10:76:d2:84:00:cd:dc:
77:65:90:26:fd:27:ae:3a:45:7d:53:ea:ea:13:f7:
c2:1e:7c:8e:98:63:a3:42:70:e5:0c:50:3d:ac:46:
d6:69:8d:87:67:53:fb:8e:0e:b0:f1:4d:32:fa:6d:
bd:31:81:92:2a:0f:61:8d:9d:fe:be:60:a2:40:af:
2e:17:53:d4:48:00:7a:7c:7f:35:45:ae:38:42:55:
f5:56:6a:cc:82:d9:95:f0:67:5a:1d:22:30:7e:72:
3f:f2:1a:bb:12:a2:ce:1b:74:9b:8c:cd:ea:a2:e5:
72:00:39:bc:b3:19:b7:c9:f4:d8:3c:9e:8e:11:1c:
d4:91:b2:d4:a3:90:3e:fa:f7:c9:b3:3c:d8:3a:49:
08:04:c2:84:d3:43:ee:92:5f:4d:99:0e:45:0a:b6:
3b:7a:a8:5c:cb:48:a6:10:97:82:ab:6b:0e:7a:ae:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:11:9A:39:14:FE:79:05:FE:DD:83:14:FE:3D:E6:26:A8:8D:D5
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:a1:2e:ba:a8:f2:bc:c0:a1:56:c9:c6:20:9e:58:13:6c:
2f:bd:e9:00:d5:88:a9:2a:68:0e:06:4a:5d:f7:6c:9d:c3:86:
8f:f3:fd:dd:c2:ec:22:34:3f:6d:f4:d3:c8:45:57:de:98:f0:
84:38:ad:13:75:c0:d0:27:d4:81:e8:86:e9:ae:d8:9d:fa:53:
eb:45:42:97:8c:92:03:6d:61:f2:bf:74:56:86:68:74:dc:d3:
20:a3:af:2e:b8:c3:63:38:06:3c:57:bb:7e:c5:15:32:a9:78:
92:7d:64:dc:45:5b:5a:33:b6:a3:67:77:3c:e5:56:0b:46:9e:
14:18:52:52:ea:38:c5:0e:01:a0:6b:c2:a3:06:b7:0a:c0:71:
e9:ee:75:b7:9c:26:14:bb:88:0a:57:d8:f7:5b:84:1b:a0:63:
c9:f5:d2:1e:d1:aa:f4:d9:2d:67:46:54:e7:7b:aa:26:6e:43:
80:3d:87:ca:99:e7:9a:f6:30:b5:22:83:96:74:3e:e1:6e:ff:
db:8f:71:ee:c2:8c:15:12:79:77:f1:d9:e5:92:a5:6f:80:94:
21:86:ca:57:07:0b:c5:e7:3a:66:56:e8:88:06:2f:4b:17:8d:
d1:13:71:23:d0:4d:17:84:77:c7:e2:aa:12:8f:c0:f6:c9:4b:
f7:77:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:07 2026 by rpki-client