Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 33FOo48g2i2K+9U/JInFP2FAUKpAE2XR7t9E+7jirAY=
Subject key identifier: 6E:83:96:AF:5E:03:D8:45:D5:CF:B7:20:AB:B3:72:53:7E:11:81:3C
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019EC035F24B87B5A9251CB7811E81BEB3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 09:00:21 +0000
Manifest this update: Sat 13 Jun 2026 09:00:21 +0000
Manifest next update: Sun 14 Jun 2026 09:00:21 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: lSw9uZxwgDZLXVAHO4dWC5xOZw+GRGkN1LcXe5ikGO8=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:f2:4b:87:b5:a9:25:1c:b7:81:1e:81:be:b3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 13 09:00:21 2026 GMT
Not After : Jun 14 09:00:21 2026 GMT
Subject: CN=6e8396af5e03d845d5cfb720abb372537e11813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:f9:dd:50:58:b8:31:9d:7d:10:52:4f:85:
9e:66:0a:a8:22:a1:9b:18:54:0c:3b:62:92:38:9e:
ce:d0:ef:33:65:48:b9:90:0e:76:75:3f:24:ff:ba:
52:a2:ed:b5:ed:f8:0c:44:a2:0f:15:75:5c:1a:35:
93:39:63:fd:c8:34:23:35:d1:a8:31:86:19:dd:02:
48:0e:8c:cd:5f:0d:c0:98:4b:a9:69:02:83:94:a1:
a1:df:a1:24:8f:4d:d3:1c:9b:76:40:17:08:a0:68:
70:83:89:5e:d3:63:b9:49:b2:c8:43:34:bb:44:69:
7e:bf:1d:80:c0:9d:36:6e:e0:79:7c:29:70:71:02:
79:98:a6:e0:5d:a0:be:e3:25:3f:d6:87:77:90:3d:
04:31:20:4a:df:71:f2:07:e2:98:f8:d3:76:63:e2:
52:58:65:65:6a:51:0f:7c:49:10:a6:9d:00:73:26:
5c:36:b5:e4:7f:1c:bc:b3:1c:90:01:99:e1:b0:7c:
c1:a3:fe:57:be:58:ac:c7:cc:a7:13:48:2b:cc:a4:
07:44:2b:61:f8:ae:71:4f:53:38:40:ce:0b:9b:e5:
fb:74:86:e4:99:31:da:0e:f0:3e:21:d4:5b:27:72:
56:23:92:c2:e7:58:ed:5c:df:8c:12:8d:25:c6:a4:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:96:AF:5E:03:D8:45:D5:CF:B7:20:AB:B3:72:53:7E:11:81:3C
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5b:c7:7b:eb:af:cb:30:b8:b2:be:0f:c5:27:fa:07:5a:da:
0c:64:88:3b:e2:5b:a7:95:e8:6e:bd:fc:20:e3:4c:13:12:9f:
bf:95:21:9a:e8:bd:ae:3b:8e:b2:ea:37:af:ec:8d:83:d1:ab:
53:65:b2:fd:48:fb:6b:fb:95:78:c6:da:56:c2:02:73:17:a6:
de:40:0f:06:af:42:42:cc:99:58:55:60:53:58:2c:b4:1c:78:
03:64:95:08:ae:65:a7:e3:20:17:55:a4:e8:47:4b:68:cb:06:
79:fc:1f:63:0a:88:a9:b5:87:52:cf:ea:62:ce:89:de:25:4d:
06:1b:5e:60:4b:42:0a:b9:58:36:68:cd:21:e5:b6:4a:30:f3:
ad:4e:5b:39:2c:8d:e9:89:eb:ac:2b:17:fb:6b:dd:be:9d:23:
7c:fa:6a:3d:2f:d8:1d:2a:b7:ff:94:a9:1d:95:d9:ae:8b:59:
ae:33:f7:43:cd:b4:c7:21:67:1d:6b:97:f0:1c:ff:4f:7b:ff:
b8:4a:6b:5f:bf:23:8e:9e:10:9d:7e:94:ff:68:6b:98:f6:2d:
d1:83:2d:ad:07:98:61:7e:ac:ca:ed:22:37:d8:73:6e:4d:3c:
58:51:0d:ec:7d:9e:3d:b5:c1:d9:7d:09:7e:5c:de:25:8a:7f:
a7:03:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:45 2026 by rpki-client