Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: PStMEFGnVxn454c9Spc+KZKPdXx+vThyfMRMh2509HM=
Subject key identifier: 39:C3:F0:AF:E2:0F:CD:2B:3A:98:3B:F1:F3:62:E0:75:F5:F1:2D:49
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019EE7EA2BA4A8CF83FD71EBEC4D183B680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 1970
Signing time: Sun 21 Jun 2026 02:02:23 +0000
Manifest this update: Sun 21 Jun 2026 02:02:23 +0000
Manifest next update: Mon 22 Jun 2026 02:02:23 +0000
Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: VdYifh/vmE4enNUis02B4MwE+5bQ/5pz6rcm+Yf9D4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:ea:2b:a4:a8:cf:83:fd:71:eb:ec:4d:18:3b:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jun 21 02:02:23 2026 GMT
Not After : Jun 22 02:02:23 2026 GMT
Subject: CN=39c3f0afe20fcd2b3a983bf1f362e075f5f12d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:5f:ff:bd:2c:34:06:99:0f:46:f7:67:e4:
28:c9:75:c9:f4:93:44:b1:7f:2a:bd:85:74:f8:b4:
b4:55:d8:91:52:94:7c:a6:1f:09:b8:b0:65:11:b3:
d6:cb:f7:58:8b:6b:54:fa:c2:ec:44:a3:ef:11:f1:
ec:2b:a4:32:ed:4a:3c:b6:ef:b1:a8:1d:f4:24:ea:
bc:44:f3:6f:45:df:47:4f:26:d0:48:a9:de:2d:53:
49:e2:3e:07:21:12:e6:3f:6a:79:bc:0c:1a:4a:fc:
61:48:97:80:67:cf:f6:82:b9:c7:bf:01:e8:34:17:
c1:86:c9:fd:b8:18:86:f4:db:4d:be:5b:15:1e:51:
5f:49:e0:79:2e:21:d9:b5:87:63:25:bd:cc:01:4b:
64:d1:59:4b:3e:0c:89:86:25:cb:e5:6e:51:82:ac:
bc:58:76:3e:fc:cf:82:68:8d:dc:b4:b8:73:d5:a1:
b9:c4:35:b4:dc:4d:49:5c:2b:c1:73:fa:fe:6b:d4:
1c:01:d0:bb:16:d7:0e:d2:55:4a:37:92:f5:8e:f4:
19:c7:c6:f4:22:12:72:84:5a:f0:39:06:9b:0c:c4:
57:6e:f8:52:30:47:84:e1:e5:46:b5:13:72:c1:85:
89:8e:21:a9:be:fa:98:a4:a2:b9:27:fa:0c:8e:f8:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:F0:AF:E2:0F:CD:2B:3A:98:3B:F1:F3:62:E0:75:F5:F1:2D:49
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:68:3f:d5:bd:74:3d:4a:82:7b:08:11:11:aa:80:2d:fd:0e:
87:4e:00:ef:20:56:e7:70:e7:9b:db:fa:60:84:a8:f7:61:69:
da:0a:55:04:b3:6b:e5:98:b7:7a:d3:e2:7f:94:92:4d:da:54:
fc:aa:73:f1:ba:24:45:ca:cb:35:4e:d6:4b:dc:02:37:50:4f:
1b:a4:e3:72:26:41:9c:d1:0f:f7:b8:74:f0:c3:11:53:10:77:
e9:af:3b:dd:aa:3b:7c:d0:04:92:8c:c8:34:b3:76:1a:62:86:
34:c1:10:5f:ef:3e:12:5d:1c:7c:9c:06:28:95:c5:9e:bc:fc:
d9:53:f4:21:56:90:26:46:e1:4a:c7:6b:0e:e9:e9:aa:16:98:
8c:c5:ad:39:d4:44:a5:e7:61:aa:a5:b1:44:22:27:59:21:3b:
f4:26:79:6a:cb:fc:76:20:e8:7c:8f:0c:8b:5d:e2:6d:db:c6:
70:f5:84:33:cc:f1:dc:b6:40:ab:05:7d:6b:05:24:e9:29:4d:
bc:b0:ca:5d:10:1b:f1:59:bf:31:bf:2e:42:15:3e:de:2e:04:
35:69:19:5c:01:87:3b:b5:99:ea:64:34:6f:97:61:e7:d1:02:
6f:76:64:50:59:d1:22:8d:dd:bd:ca:71:15:ca:2a:36:d3:c6:
86:d3:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:22:33 2026 by rpki-client