Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: JOqFGZ3PTTEh5MfGbIX//ysS/9xyCGZk8XhRX6iB6YQ=
Subject key identifier: C9:BA:F2:DE:FE:76:B4:7E:F1:B5:34:58:02:07:98:26:06:BF:FC:84
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019EC1EE0B5538C88E6706B12DB3A9EDDB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 17:01:03 +0000
Manifest this update: Sat 13 Jun 2026 17:01:03 +0000
Manifest next update: Sun 14 Jun 2026 17:01:03 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: 2CNMIzn3j3MAWUJY0vgjgJUwURpskHK0p7oR6Z+fAeo=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:0b:55:38:c8:8e:67:06:b1:2d:b3:a9:ed:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jun 13 17:01:03 2026 GMT
Not After : Jun 14 17:01:03 2026 GMT
Subject: CN=c9baf2defe76b47ef1b534580207982606bffc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:f2:08:b4:4c:df:94:98:52:54:11:81:9e:
4c:3f:ad:db:36:ba:2c:d6:a3:70:8e:5d:30:87:27:
23:72:88:ac:d1:c9:ef:a2:d1:b8:e9:d0:db:18:51:
33:5e:f3:c2:74:bf:ae:8f:8b:a5:40:28:31:bb:71:
13:e8:a7:d5:b5:f2:31:49:a5:0b:c0:bd:2b:51:29:
fa:39:fd:ef:85:7c:71:fd:a3:e8:f0:cb:d3:56:8f:
5f:bf:e2:51:33:ce:8f:18:b1:d8:21:39:6a:19:47:
00:86:01:58:97:b0:02:b3:c9:8d:f2:d8:49:6b:ad:
d2:5a:23:64:d0:18:61:89:a7:17:80:72:16:64:61:
05:ec:b0:f6:2a:6a:54:bf:36:7e:3e:8f:f4:f3:4c:
75:04:26:cc:d1:d9:d6:38:2e:e6:5b:19:dc:a6:43:
d0:63:94:3d:41:48:19:59:ac:bf:aa:62:d5:91:a2:
ae:67:77:95:9a:43:9e:9c:21:84:da:28:1e:94:98:
86:ca:e3:79:fc:85:0e:af:4a:b7:e1:18:c1:36:89:
c6:fe:25:19:0d:4b:dc:0f:f1:4b:d7:72:f2:29:a3:
25:5a:bc:79:53:56:f9:28:13:c1:1f:c3:b4:82:c6:
ef:b3:d9:89:42:03:59:2e:5a:47:96:b7:fe:ab:95:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:F2:DE:FE:76:B4:7E:F1:B5:34:58:02:07:98:26:06:BF:FC:84
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:e0:e2:07:bc:9c:6e:34:a6:53:b0:25:a7:9b:7f:7b:b7:
bf:14:80:3a:a0:03:26:5e:a9:4d:94:86:16:88:58:f1:31:a1:
bb:4c:2e:3a:62:84:43:6a:8f:ee:2a:30:a8:e4:9b:c8:13:66:
76:ec:e3:0d:4f:4c:6e:a8:6e:bb:63:be:8a:77:bf:a7:4b:b2:
7c:31:49:25:8c:96:b2:47:b0:6a:d3:21:0b:b6:f9:5e:40:d3:
89:b1:fa:b6:c0:d4:b3:15:e8:f3:91:ea:66:0c:42:4e:33:d5:
62:05:1b:94:c8:3b:fd:c2:cf:6e:a1:25:fe:d3:0c:0c:af:46:
44:11:34:8a:4a:16:66:fe:c8:37:a2:aa:a9:fb:66:2a:c2:2a:
c9:8f:c2:e4:38:d3:d6:2f:a4:7a:f7:d9:85:92:82:a6:e9:14:
ef:aa:8d:72:38:df:e5:c5:84:cc:8c:f1:a8:c8:7a:5d:34:1d:
72:e9:8f:9c:fc:ae:16:1c:7d:ef:13:01:f9:12:f3:d2:a4:fa:
2e:8d:1f:41:ac:8d:ea:25:0d:63:79:ee:aa:8b:75:5f:05:dd:
29:39:e0:00:fa:0b:af:13:58:61:48:44:63:40:f0:04:b5:7f:
5e:72:48:7a:f6:e9:65:a3:0b:72:a6:8a:ad:c9:c7:4b:0e:2b:
36:d2:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:51 2026 by rpki-client