Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: KYi6iZUW1QFbGo2qSjv8Reh0AElVl6ktYB0c26bjGnQ=
Subject key identifier: F6:7B:F7:06:08:1C:E8:77:81:BA:9E:D3:26:8E:D3:38:FB:F4:20:82
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019EBEECBC4BF8A14F546542C7D224BE1DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 59
Signing time: Sat 13 Jun 2026 03:00:46 +0000
Manifest this update: Sat 13 Jun 2026 03:00:46 +0000
Manifest next update: Sun 14 Jun 2026 03:00:46 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: uDJv0DNd96TFcPdUavvbftpV58LAD32HOcDNFWmAdF8=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:bc:4b:f8:a1:4f:54:65:42:c7:d2:24:be:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Jun 13 03:00:46 2026 GMT
Not After : Jun 14 03:00:46 2026 GMT
Subject: CN=f67bf706081ce87781ba9ed3268ed338fbf42082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:9e:61:75:44:63:2d:fc:23:3b:98:94:8f:
1f:1a:ed:61:5f:35:57:aa:a1:12:1b:dd:6b:88:94:
a3:fa:e0:e7:e1:17:06:17:77:0c:b5:91:8a:e0:ac:
bd:ef:8b:fa:c4:48:a8:4e:9b:17:2a:39:74:ab:65:
2c:af:14:6e:26:74:8c:5e:72:c4:6c:06:b3:c5:a7:
60:17:c3:86:f2:ff:e8:83:68:86:a7:3e:91:4a:e5:
18:93:82:f4:8c:ee:ae:87:d6:f9:a9:b3:09:ff:61:
a3:a1:b5:74:ef:47:47:13:67:07:dd:95:ab:db:1e:
58:e2:ae:c9:80:18:56:e3:8c:ae:b7:ff:55:14:0a:
ce:cc:67:30:66:66:1e:80:80:dd:c2:7b:3a:ce:c8:
d9:de:59:d6:16:e6:ef:3f:b5:05:d6:3a:41:bf:14:
0f:45:3c:1f:fe:56:86:4e:7e:b5:a0:30:b1:fc:7f:
21:9c:88:d2:55:7c:0f:c8:e4:b8:13:b7:16:32:71:
14:05:77:ae:e6:3d:15:a6:95:1c:71:30:95:7c:f1:
05:7b:85:fb:1c:b4:c7:75:5c:99:46:c5:4e:e2:00:
af:8c:55:58:6b:fc:13:a6:3e:39:43:6c:bb:73:78:
86:ff:2a:b0:7d:41:10:dc:25:e0:31:6d:1e:d8:6e:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:F7:06:08:1C:E8:77:81:BA:9E:D3:26:8E:D3:38:FB:F4:20:82
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:95:5a:96:b9:1c:d6:66:76:7a:e9:8e:c9:94:83:76:97:bc:
83:04:1b:b4:60:9e:5f:a7:8a:8c:26:cb:69:12:97:08:a7:8f:
76:83:e1:c4:8a:a3:c8:22:b8:09:05:e6:f5:32:db:68:a5:bb:
57:2a:54:84:f8:6c:c7:b5:2c:34:31:ac:e2:67:b0:eb:64:a8:
17:84:40:1b:fa:c1:07:eb:3a:33:59:6e:b7:47:f2:09:fc:4a:
6b:fc:38:4e:df:83:8d:c2:45:64:a1:93:bc:4a:f4:91:e7:94:
2a:d3:35:6b:8a:2e:ed:9a:e8:81:24:75:ac:a2:50:f9:06:6a:
aa:79:98:10:91:58:2a:ac:7f:f8:14:95:04:d9:ac:14:4f:3d:
5f:6d:5e:cf:8c:b4:fa:a1:95:46:72:43:51:ea:5c:65:df:3d:
5b:40:2e:b7:e0:ed:e7:25:93:4d:88:3d:6a:f2:2a:2f:51:ed:
16:96:94:81:6e:ea:c5:95:18:5a:e3:eb:08:2e:21:c1:fc:92:
df:14:9d:54:6c:3b:9f:23:c8:4d:e4:33:ea:f3:ea:86:be:c4:
9e:83:d7:9e:d3:b8:8e:ed:ab:65:80:74:4c:7a:af:8f:45:95:
03:bc:78:fa:1d:1c:a9:2e:75:94:e0:06:58:22:31:71:a0:51:
7d:0a:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:19 2026 by rpki-client