Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: LRiD6Xz6apg+IgfghmHeptfzwG1rZ+v9XFl9XQWupIU=
Subject key identifier: D3:D0:80:0C:09:E2:7A:9F:F8:CE:67:64:E7:A5:3B:B0:86:29:2C:40
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019EC0DB51E90A87D741FC950C644741C6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1834
Signing time: Sat 13 Jun 2026 12:00:59 +0000
Manifest this update: Sat 13 Jun 2026 12:00:59 +0000
Manifest next update: Sun 14 Jun 2026 12:00:59 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: j0oN0W8RmXpC84IVXEcSuHw/98IdndOaDJQuqrt5/Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:51:e9:0a:87:d7:41:fc:95:0c:64:47:41:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jun 13 12:00:59 2026 GMT
Not After : Jun 14 12:00:59 2026 GMT
Subject: CN=d3d0800c09e27a9ff8ce6764e7a53bb086292c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:54:b6:9d:9d:23:ba:77:03:61:f7:36:18:
2a:bf:91:28:18:99:26:da:94:59:ad:5c:15:9c:41:
c9:43:30:1e:0d:64:6b:6e:bf:04:3c:81:dc:17:a6:
30:37:50:ed:2a:34:33:bd:3f:70:7c:c6:51:7a:90:
f7:aa:45:76:1d:7b:eb:30:40:e8:21:c7:e2:b5:bf:
3a:6c:b6:d4:e1:e6:d2:64:1c:e2:ce:f8:46:63:30:
71:4e:47:c1:dd:e8:7f:a6:d5:c3:dd:73:0a:8b:07:
66:1e:65:8c:b1:d5:e8:dd:67:a7:81:3f:73:79:c5:
8b:d9:2f:4e:14:9f:a6:a8:4f:43:b3:8d:4e:e2:3b:
59:0d:7e:47:93:21:1d:05:42:48:f4:eb:4c:a3:0a:
5d:c4:e9:47:5b:93:fc:dd:bd:2c:fc:13:1f:af:ff:
4b:c7:e7:6f:f8:f8:39:b5:6c:ab:73:ee:93:65:d3:
47:69:85:c0:1f:65:ba:b9:75:a5:2d:bf:a1:ec:a4:
60:32:ec:49:e5:7c:bf:78:7a:df:56:f2:cc:5c:7f:
17:7f:e9:0f:18:c3:16:f9:ee:f5:c2:dc:9e:b3:03:
cb:cd:fe:e9:1f:a7:c7:84:c7:61:e8:e8:81:b0:57:
5a:0a:0a:5a:89:02:68:74:ad:50:f8:99:0c:af:d2:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:80:0C:09:E2:7A:9F:F8:CE:67:64:E7:A5:3B:B0:86:29:2C:40
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:50:1b:2d:7f:c9:e8:07:b2:2f:c4:b6:24:68:95:d7:96:2b:
0d:0d:e8:a8:8c:55:c1:f0:85:e0:9b:ac:a4:2d:e0:14:28:81:
64:c5:65:a8:ea:56:83:d4:9e:34:e5:b1:7a:2b:0f:7b:b9:1e:
1a:1a:42:1e:6c:e2:f8:51:99:55:94:14:c1:49:1e:9c:ac:ee:
52:a3:35:6d:78:95:33:79:ee:27:ef:37:e5:32:bc:02:37:af:
37:69:de:cd:61:35:f0:40:00:8a:82:c6:cc:e5:48:72:75:b8:
0a:10:e7:79:0e:4c:e4:41:41:68:54:da:17:1f:93:18:e1:c9:
d7:a1:d2:54:0e:1d:c2:3b:5b:0f:58:1c:57:6f:16:58:69:e7:
98:52:43:4d:da:09:49:11:6a:2e:8d:63:e4:2e:4a:e6:3a:1e:
01:b8:67:2b:d9:39:b0:a3:39:16:4e:8f:e7:a4:bb:b1:08:82:
de:0e:70:cf:f4:aa:9d:36:20:d1:ed:5d:2a:eb:4a:49:c0:7e:
5c:64:31:c2:8d:ce:3b:43:2e:bf:21:fe:e5:11:fb:bd:d0:07:
73:e1:68:dc:62:e6:4c:50:fc:5e:cd:8c:7e:10:d8:2e:12:b6:
02:72:de:dc:7b:70:db:c7:f1:fe:2e:d5:be:46:f1:d8:72:d6:
d6:3e:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:16:14 2026 by rpki-client