Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: mUNKujvN2RtryHMHMWXy5LL0IaUyJOL44pBksUw3ncg=
Subject key identifier: A8:BE:5F:21:0C:EA:EE:BB:A9:DB:F0:F1:33:3A:1A:19:50:76:99:CF
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019EC06DB296D4882FA81C5A242B9C9B8E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 10:01:15 +0000
Manifest this update: Sat 13 Jun 2026 10:01:15 +0000
Manifest next update: Sun 14 Jun 2026 10:01:15 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: yQ8lmCm//LQyBXdi05NYkxHNJmmfViaH8air2PIzqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:b2:96:d4:88:2f:a8:1c:5a:24:2b:9c:9b:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Jun 13 10:01:15 2026 GMT
Not After : Jun 14 10:01:15 2026 GMT
Subject: CN=a8be5f210ceaeebba9dbf0f1333a1a19507699cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:66:b2:ea:06:e5:6a:bb:30:0d:ba:0b:3e:
df:e4:c3:c3:00:8b:4b:23:8a:07:df:b6:dd:c2:ac:
cf:ad:5c:fc:e9:1d:2d:bb:1f:ab:e3:03:77:7f:8f:
97:ef:15:e3:7f:9a:00:be:d0:6c:92:8a:ed:ac:df:
57:1e:46:85:01:84:ad:95:17:77:97:d9:61:f4:73:
5e:f6:c1:96:1f:7e:4c:68:a1:07:c3:00:95:62:d7:
88:2f:2e:d3:b9:e5:f7:94:c9:a1:79:15:24:dd:65:
5a:a0:d0:da:0d:ed:b7:25:8c:80:66:83:db:76:00:
34:ac:d6:21:5b:33:ce:7b:13:ba:1f:3a:15:0c:52:
b2:b3:c1:45:0b:d4:8b:5b:da:c1:72:50:47:cf:b7:
de:dd:ce:17:38:66:54:90:0d:ab:cc:79:58:83:36:
38:b1:41:72:ca:da:f5:67:84:c7:3b:2a:46:26:29:
3f:54:15:49:d6:f3:5d:bd:04:59:0b:8a:44:5d:3d:
0b:51:af:1d:97:26:88:a6:ea:dc:04:47:1a:40:e5:
6c:07:e0:4c:23:2d:9f:44:99:7a:2b:de:33:34:03:
04:25:e5:48:84:7c:6f:e8:1e:74:15:c4:2b:81:31:
23:16:2a:62:15:89:38:18:21:27:43:81:e9:47:33:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:5F:21:0C:EA:EE:BB:A9:DB:F0:F1:33:3A:1A:19:50:76:99:CF
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e3:06:1a:76:1a:ab:bb:ae:ab:6c:c1:da:dd:0f:1d:9e:f1:
08:75:1c:37:03:36:fe:42:ad:99:67:f1:96:53:6d:a7:17:f2:
7a:0d:c8:83:d1:9e:d7:52:b1:b4:16:8e:32:10:fe:84:9e:c8:
93:a3:63:71:1e:36:31:51:15:f4:f7:f7:30:db:98:d1:60:69:
bb:49:d7:cd:7a:d2:28:33:12:37:04:26:9d:9d:60:12:75:84:
f7:fd:4b:03:24:d2:3b:38:04:79:17:cc:5e:6c:9f:b0:04:31:
64:f5:6c:7c:cc:3e:a2:4f:e6:0f:c4:4e:cc:7d:ab:0b:45:be:
e9:26:25:0f:a0:09:2a:70:34:28:4c:b3:1b:5d:5e:d9:c1:37:
86:30:1e:68:ce:b3:5f:0a:ce:95:4a:ce:0c:ab:f9:b4:a1:cc:
ab:5d:3c:0c:43:f3:92:fb:bd:ee:d1:63:a9:b2:db:02:43:68:
b8:0c:cc:ca:1b:bc:95:87:f9:97:a5:f6:04:6b:ab:ae:1b:10:
64:16:bb:05:0f:a6:d1:f0:6e:2a:91:77:d8:03:54:f0:09:54:
21:da:90:2d:b6:55:3a:19:99:37:b9:65:2f:86:48:5b:8f:3e:
24:ed:f4:5b:de:53:2a:21:5c:75:b6:bb:42:5f:92:3d:92:fa:
27:24:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:22:55 2026 by rpki-client