Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: oJuwM5F2JWs+3bz1bhiUwLsBdi9/n4lWgcTd6f77Qdk=
Subject key identifier: 71:99:79:2E:CC:B3:32:08:F3:9E:50:07:4C:89:8A:58:88:7A:57:14
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019EC0A3BF9EF2A71955B7216665FC8AD342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0890
Signing time: Sat 13 Jun 2026 11:00:17 +0000
Manifest this update: Sat 13 Jun 2026 11:00:17 +0000
Manifest next update: Sun 14 Jun 2026 11:00:17 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: pDDWpoqoROQu3actdDIL/LXLdNs2lB0QkuxAOVvoAFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:bf:9e:f2:a7:19:55:b7:21:66:65:fc:8a:d3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jun 13 11:00:17 2026 GMT
Not After : Jun 14 11:00:17 2026 GMT
Subject: CN=7199792eccb33208f39e50074c898a58887a5714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:76:fd:0c:2c:f2:71:fe:b2:7f:81:ef:10:
6a:29:f0:75:52:d2:21:77:e8:a2:a0:99:f0:28:6a:
35:7e:43:81:03:cc:1a:82:7a:68:89:50:f6:12:ac:
88:55:d3:c9:7f:1e:f9:a3:18:3b:a9:6e:7a:93:88:
b3:8e:47:f8:f9:ce:65:33:41:83:60:99:bd:82:e7:
3a:a6:70:85:92:fe:b9:3c:b8:08:1e:78:a4:b3:51:
9e:3e:57:2e:c9:34:81:24:a2:49:50:d6:87:4b:a1:
0b:14:e9:c6:66:64:fb:fe:39:60:9f:31:95:ba:8c:
84:7f:c5:62:dc:2b:a5:9b:7e:8e:8d:a7:e4:8a:19:
04:41:ca:3b:51:93:ec:7c:a5:bf:3c:ce:72:d4:56:
e4:0b:ca:8a:89:e1:28:8a:4d:53:42:8f:84:70:e2:
7e:8c:0f:8a:10:19:86:9e:7c:12:14:e6:5a:d5:fa:
af:13:13:9e:15:97:d0:b9:0f:3b:4e:ee:ac:0a:8a:
f2:6e:44:a4:74:50:55:25:67:1f:85:d2:c2:e2:29:
b4:97:5f:50:a1:e9:5d:5b:7f:58:bf:65:b1:ec:ab:
59:7d:d5:54:a1:24:cd:5e:39:c7:ae:e2:af:4a:ae:
8b:a5:56:5a:94:08:8c:9c:aa:3c:29:42:e1:d9:dc:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:79:2E:CC:B3:32:08:F3:9E:50:07:4C:89:8A:58:88:7A:57:14
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:af:a4:90:92:b6:2a:ba:c6:2e:ae:ba:2c:78:e2:82:89:5f:
c4:7a:58:ca:c0:b7:2d:ad:11:d3:d5:08:37:56:9f:e7:2f:c1:
94:0b:78:c9:e5:da:83:74:aa:f5:39:b5:35:b7:aa:ec:f5:47:
83:11:84:a9:b3:2a:fb:b1:43:b6:38:4e:7f:27:66:4f:18:6a:
8d:83:e4:72:92:fa:3c:1e:2b:ce:8e:71:31:83:57:98:c2:bc:
38:aa:02:1c:8f:e4:fd:e5:13:4f:6e:cf:ed:a9:cf:59:e2:7b:
ad:c3:04:c4:01:69:eb:74:e5:3a:cd:9f:05:b1:a4:b5:3f:e6:
91:a7:58:0f:ed:7b:f4:7e:33:af:80:fc:d4:00:df:b1:22:76:
77:31:8f:3d:3f:18:d4:a1:ce:9e:c3:71:1f:8b:6c:84:1b:9d:
1e:a5:f4:7e:40:bd:52:93:c6:5f:30:40:17:af:f3:05:d2:1d:
55:05:b0:e9:6e:9c:80:d6:36:dc:e3:16:15:22:8d:fa:97:0f:
dc:f0:19:2d:a7:26:29:e3:e2:c9:e7:91:a2:58:cb:ba:86:0f:
61:92:ed:a2:32:eb:bf:02:f6:f0:b6:fe:af:6c:da:eb:2d:aa:
93:a4:6f:db:7f:39:55:4c:8f:52:74:03:ff:6b:dd:c9:e2:8d:
3e:5b:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:35 2026 by rpki-client