Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: PxIR7Ox9f2GvjU6vmxg/n6zHtB0zEn0hmq4knZ8Xj2Y=
Subject key identifier: B7:2B:5E:AF:5B:EE:C1:F5:A7:3B:88:0C:FF:59:58:AC:C1:B6:C4:0E
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019EC3003D81C4911C334F35671C4B2228F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 22:00:33 +0000
Manifest this update: Sat 13 Jun 2026 22:00:33 +0000
Manifest next update: Sun 14 Jun 2026 22:00:33 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: D7kaBvcWkdj8hm6T77YyLCDH6+PKMn6+Nt26Oqa+r0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:3d:81:c4:91:1c:33:4f:35:67:1c:4b:22:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jun 13 22:00:33 2026 GMT
Not After : Jun 14 22:00:33 2026 GMT
Subject: CN=b72b5eaf5beec1f5a73b880cff5958acc1b6c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:d6:39:f8:b7:8a:b1:e3:f3:5f:6f:23:00:
19:25:09:58:7c:f6:2a:16:f3:9c:02:f2:bf:37:fd:
ff:41:de:fd:62:6b:97:8e:06:d8:db:9e:70:a5:7b:
90:9d:96:19:b5:28:21:d8:fd:f7:fd:8f:df:65:66:
2f:70:4e:73:29:f6:82:70:4c:7f:c9:6c:4b:5f:63:
6b:b7:7b:a2:76:2b:3e:7d:91:2c:a9:7b:e8:fa:89:
b0:a7:88:13:09:67:f9:93:02:4e:08:8e:50:9c:08:
f1:d5:07:f4:e5:7f:18:71:b5:47:cb:92:9a:43:40:
1f:23:1c:1e:d1:bb:e1:cb:08:ac:d1:24:54:b3:89:
7f:90:e6:92:f5:14:5a:0e:4e:47:df:06:c6:ad:c5:
b9:df:b1:b9:97:7f:1a:bf:b2:0d:73:1c:ed:ec:7e:
93:b1:e2:86:a4:a7:53:6b:7b:90:32:ee:c8:29:86:
1e:e5:1c:4c:b3:06:ed:17:3f:ed:c7:77:24:bb:0c:
bf:f0:ff:c9:32:3b:70:09:70:6d:a9:f7:fa:4b:07:
8f:d8:a4:69:a7:6d:68:37:53:19:10:3f:e6:0d:12:
ab:5c:2c:9e:93:a2:48:b4:8f:e1:c9:eb:52:23:ab:
97:0b:f7:72:f5:fa:dd:2c:3e:c8:4a:60:cc:a9:1a:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:5E:AF:5B:EE:C1:F5:A7:3B:88:0C:FF:59:58:AC:C1:B6:C4:0E
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b1:a0:60:f0:28:9a:48:8a:e7:4e:85:f4:62:b0:8c:3f:0e:
46:fe:c8:10:4d:cc:f1:0a:ad:14:cc:4c:28:d1:0e:98:75:d4:
09:8a:f3:62:57:33:ea:53:39:0b:96:25:2d:38:76:e7:fa:22:
c7:6f:15:2b:f7:b3:d8:36:fe:85:24:e5:53:9a:7a:91:80:87:
4b:a5:1d:d4:14:37:5a:6a:b7:29:21:e6:bd:2e:a9:dc:11:e0:
e9:e5:ce:66:27:95:48:2c:b5:6d:43:e1:2b:8b:98:b7:89:d7:
38:76:29:98:45:86:0e:4a:de:5c:a4:e3:57:84:5b:bf:d2:24:
aa:77:70:a5:35:e5:f8:04:b7:f8:b5:52:2c:20:88:dd:d6:62:
79:bf:50:72:3c:6a:d5:67:a8:e7:f3:50:67:06:22:ae:63:b4:
58:68:58:5c:4f:52:a0:bf:92:36:51:1f:74:f6:a1:76:c0:e4:
fd:e1:20:67:d4:53:a9:85:24:44:a8:12:1d:aa:48:e8:10:6b:
04:fa:c2:60:a1:b3:ca:29:9e:41:93:c7:d8:c0:27:e2:71:b2:
4a:3d:08:3a:35:a6:75:f0:3f:c3:cd:e8:ef:86:7e:63:10:11:
5c:5f:c4:f5:d7:34:01:a0:21:55:ba:d1:f1:0d:41:20:01:34:
e2:de:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:44 2026 by rpki-client