Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: 3LVEN4ylHy0uwary7Q/RBzi8yJdbduNThVuOYrPwl7c=
Subject key identifier: 85:3F:55:CE:9E:50:31:06:4D:B0:98:7C:AF:6D:C6:EE:F4:D0:A5:F1
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019ED461E7C6D9A82EC8C249B82271B0A25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 16B1
Signing time: Wed 17 Jun 2026 07:00:46 +0000
Manifest this update: Wed 17 Jun 2026 07:00:46 +0000
Manifest next update: Thu 18 Jun 2026 07:00:46 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: Pgi0TIFxTBnpGH0Pb+x9uNe1OQQSQ2dkkxuPho9ygrE=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:61:e7:c6:d9:a8:2e:c8:c2:49:b8:22:71:b0:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jun 17 07:00:46 2026 GMT
Not After : Jun 18 07:00:46 2026 GMT
Subject: CN=853f55ce9e5031064db0987caf6dc6eef4d0a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:f4:8b:58:c7:69:a1:34:c6:b4:bf:55:07:
65:db:a0:ad:4a:d6:a0:71:20:f4:bb:ff:6d:f1:fd:
45:ad:29:61:80:6f:27:8c:14:4f:e7:62:38:d7:23:
2e:b4:b6:ba:26:4d:c9:ff:90:d2:47:41:56:b7:39:
4f:6a:03:d1:d1:bf:63:80:13:e5:64:fd:23:46:49:
6f:db:e6:fc:01:f6:9c:b9:07:2e:64:24:98:48:15:
47:92:90:a9:6e:68:31:b1:f9:f3:7e:95:58:4c:92:
9f:03:85:37:1e:2c:be:d0:e0:dd:74:42:b9:f6:39:
e7:56:a6:67:71:dd:9d:dc:04:f8:1c:8d:48:b9:7a:
83:71:5b:93:26:75:17:47:86:ae:68:6d:2c:79:9d:
9f:9d:cb:2b:17:c4:81:79:4e:6b:99:19:eb:cc:2e:
40:c1:b9:d8:0e:89:07:02:6e:c3:fc:1b:c9:77:a3:
6f:d8:b8:02:89:66:4b:60:8d:0c:a6:3f:dd:03:87:
37:ec:06:3d:e7:91:a0:df:89:6e:07:e8:80:77:ec:
eb:50:ad:22:62:32:40:53:c9:45:b6:57:4e:45:ff:
bc:71:12:82:77:69:00:87:2c:92:89:87:c2:ed:c2:
8c:d5:56:cc:e4:d3:17:6b:65:3d:ef:08:2d:e5:e1:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:55:CE:9E:50:31:06:4D:B0:98:7C:AF:6D:C6:EE:F4:D0:A5:F1
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:48:f3:67:a0:e3:a2:97:c5:94:98:ad:ec:b5:eb:a6:4d:f0:
a3:68:2e:eb:c0:98:86:9b:a3:66:7f:bc:ee:55:4f:ba:1d:81:
7a:1c:4b:cd:61:1f:ec:02:b4:a0:d6:5f:fa:5d:d1:b1:00:ec:
fb:71:f1:67:4b:c0:24:83:e1:9f:7a:61:2d:9e:03:93:1b:d6:
46:aa:be:0d:2e:d4:b6:09:bd:ff:88:56:9e:9a:71:51:db:65:
56:ad:4d:ae:fe:40:1e:fe:83:57:2f:65:6b:34:09:0b:6a:b8:
3e:78:01:c5:c8:94:5b:9e:f4:db:2f:9a:81:d4:5f:af:bf:ea:
5f:33:4f:4e:96:a2:a7:09:48:30:cd:45:06:13:e3:da:04:a2:
62:20:77:b7:5e:0a:f5:c8:f0:9a:f4:5f:6e:9b:5f:13:6f:fb:
f8:56:07:49:64:b2:20:ab:16:39:3a:e1:20:7e:86:03:f0:0b:
6f:9f:e6:fb:14:be:73:b4:95:68:05:d1:d5:ce:b9:8d:52:fd:
3e:cc:59:55:a7:92:32:1c:18:40:7e:a6:be:04:50:2a:72:36:
78:b7:98:b0:60:61:70:19:0b:86:bf:a7:a9:a5:53:1a:a8:55:
3c:d4:14:7b:27:9a:eb:ec:7e:a0:eb:cf:e9:0b:38:ce:23:07:
15:a3:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:20:01 2026 by rpki-client