Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: 2qI9YLsBvDs6z02KOrlXNZLCAS0Xwiecf7ycELw2O7g=
Subject key identifier: 2E:97:B3:86:62:87:5F:6C:39:16:0C:5F:F3:C6:88:F6:03:E5:93:B4
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019EC2C99BE3B609FFD41A0AC7E4FE71587D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0DDC
Signing time: Sat 13 Jun 2026 21:00:53 +0000
Manifest this update: Sat 13 Jun 2026 21:00:53 +0000
Manifest next update: Sun 14 Jun 2026 21:00:53 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: GVW8G2IoNg6mW/WBJ7z1sqs57JHEx+FRf2S2OKiiGUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:9b:e3:b6:09:ff:d4:1a:0a:c7:e4:fe:71:58:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jun 13 21:00:53 2026 GMT
Not After : Jun 14 21:00:53 2026 GMT
Subject: CN=2e97b38662875f6c39160c5ff3c688f603e593b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:c3:41:5d:b2:72:e7:70:34:06:6c:aa:2d:
ec:9b:a3:76:a9:2b:16:cd:7b:fc:95:5c:1a:e1:19:
ae:94:2c:fb:aa:0b:d6:98:be:8a:8b:6a:e8:4c:f4:
f3:d1:ca:ea:2e:01:a1:bd:bb:c5:e5:38:0c:90:be:
3a:d2:3c:6a:01:fe:85:c7:22:c4:e4:41:97:f5:d3:
94:fb:a2:f8:51:e1:07:83:0d:fa:ca:26:41:e1:89:
56:6c:86:45:e8:2c:cb:74:20:2e:09:99:94:07:9d:
59:52:5c:66:81:06:9c:0d:8d:93:19:29:5c:04:18:
7e:25:98:e4:81:7c:66:13:6b:62:67:2f:c5:6b:28:
58:af:df:0d:50:06:fe:10:4e:2d:2b:05:f8:54:41:
b7:73:69:71:f7:d6:6f:dc:33:e2:c7:25:7a:b4:1c:
de:bf:49:67:1e:ea:c9:0e:76:34:5b:cb:f5:0a:07:
a4:02:78:d3:8d:0d:e9:8e:9d:a0:22:b3:11:45:27:
72:d0:2d:7d:61:90:e2:20:ce:1a:9b:52:94:91:cd:
6d:e2:1a:0d:aa:ca:1b:8f:78:f3:92:0b:1d:5e:fe:
a4:12:ed:cf:2f:5f:6e:38:e3:2a:a9:0f:38:4a:35:
51:92:b1:00:c4:5e:a2:67:1f:b2:d3:19:9d:64:38:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:B3:86:62:87:5F:6C:39:16:0C:5F:F3:C6:88:F6:03:E5:93:B4
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:5c:85:c8:ef:0d:9c:37:50:89:2f:8b:27:b3:30:e8:ec:
11:f0:27:d7:00:9e:dc:29:6c:0f:f1:04:d5:67:47:da:a6:ca:
57:c4:40:5f:ac:6d:02:b4:74:e2:db:db:76:ec:51:2c:2a:34:
41:90:97:6e:1e:79:ee:7a:30:58:bd:fe:4b:e5:df:b3:c5:6e:
8c:7b:c7:ac:b2:df:98:11:d1:68:94:47:82:51:80:a1:1f:9f:
87:e2:9d:8d:ed:cd:e1:10:22:51:2f:6c:5e:74:84:08:c4:80:
92:52:e1:23:e8:61:6e:69:3b:8a:a2:28:62:51:aa:cd:66:fd:
b5:e9:c3:3d:22:48:73:83:0b:49:c0:ad:95:b7:e7:35:44:16:
de:3b:6e:6f:95:bc:bf:b6:b7:b7:4b:69:63:9d:6f:92:5d:ed:
28:2e:ba:c6:be:29:33:0c:b6:fb:5d:05:d7:71:94:07:f6:00:
ca:1b:33:cb:83:51:ba:2b:52:7a:b9:77:55:fe:22:f7:97:34:
fe:63:d4:7c:27:94:36:34:59:83:a3:45:13:92:1c:be:7d:e2:
ba:bc:82:52:cd:fe:48:57:16:c4:90:de:72:d4:95:a6:d4:64:
5d:47:ea:0c:27:5d:86:37:20:b3:c4:b0:3d:b1:e8:9d:a0:63:
c1:6f:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:18 2026 by rpki-client