Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: o8LIBieXIYyEisgcoUuFiwz4M/jgH3YvQEPx0qczou8=
Subject key identifier: F2:4D:4B:E6:E0:07:B6:3A:3F:4D:00:EE:85:C1:C6:D4:F8:B0:F1:7E
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019EC0A3DB97AAB4668BF31BB46C59CC2978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 11:00:24 +0000
Manifest this update: Sat 13 Jun 2026 11:00:24 +0000
Manifest next update: Sun 14 Jun 2026 11:00:24 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: jkP+cCZc/WXpBMEg1Vv+6jUB9TKFyuwSkg/k50aHWvQ=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:db:97:aa:b4:66:8b:f3:1b:b4:6c:59:cc:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jun 13 11:00:24 2026 GMT
Not After : Jun 14 11:00:24 2026 GMT
Subject: CN=f24d4be6e007b63a3f4d00ee85c1c6d4f8b0f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:39:00:78:8b:b3:c8:ff:e4:30:d6:02:a0:
5e:50:80:2f:8a:c5:ed:9e:75:ea:ce:22:c1:49:df:
05:74:40:5f:b4:a7:b1:1d:76:2c:32:35:c7:ab:6a:
65:ea:40:95:7f:9d:09:c2:49:91:05:f0:b9:a7:d9:
4b:93:07:63:a2:84:f1:e0:34:17:80:03:53:41:ff:
72:46:f0:8c:52:0b:57:c1:1b:dc:af:2f:0c:1e:19:
47:24:c4:14:93:92:09:1c:c8:9c:52:77:09:88:31:
6f:c6:1b:4f:38:e1:d5:d9:84:0b:db:cd:56:5f:6d:
67:36:97:29:8d:00:03:05:26:7e:7d:76:4e:05:f3:
a0:5e:c7:a8:89:70:1f:48:66:50:9d:76:aa:86:36:
4c:56:f7:a0:be:29:c6:67:02:3c:3f:61:9f:4d:4a:
75:b4:1e:5d:15:e4:af:2c:19:16:6f:25:a7:4e:cc:
5c:21:59:69:7e:10:a3:98:9e:9a:05:14:16:c7:49:
fb:d5:0e:84:44:8f:0b:35:d7:67:a9:6f:08:62:8f:
60:c5:bf:21:ea:71:5f:f4:e2:52:36:a6:41:55:7c:
fa:9a:27:8a:f3:a9:2e:0b:6f:42:6f:cc:d7:bf:8c:
8c:be:6e:22:34:ad:81:20:16:b1:b1:e0:72:ce:f7:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4D:4B:E6:E0:07:B6:3A:3F:4D:00:EE:85:C1:C6:D4:F8:B0:F1:7E
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:88:f2:bf:77:ae:36:31:7f:1a:87:59:4b:55:ad:36:c1:e8:
09:a2:22:5d:17:bc:95:81:a9:d8:8a:9b:83:4e:54:82:f0:b1:
f8:55:2b:25:c0:52:89:3c:5c:85:04:a9:bf:26:e8:df:97:eb:
e6:0d:78:d8:82:b3:8e:47:04:53:05:63:e7:82:a6:fb:c5:de:
d4:b4:19:d5:19:35:44:19:94:a8:95:df:e4:98:a5:bc:bc:76:
a7:9a:66:e4:aa:08:66:9c:11:ed:01:f4:86:62:72:a0:a7:3c:
91:bb:73:09:9b:f3:05:ca:26:b9:8f:3e:a4:3e:fe:26:ff:be:
b2:4e:8e:5d:53:33:dc:c4:ab:cc:da:c0:9e:3d:94:d9:82:02:
bf:f5:59:0b:e6:01:33:b0:ff:47:ae:f1:af:5a:bc:b5:6c:a5:
7f:35:cf:31:65:09:6e:e6:15:5d:b7:34:fe:f0:f1:3c:02:54:
da:ae:35:72:49:6f:40:0a:4e:04:e6:8b:f1:7b:a9:79:d0:28:
5b:d0:4f:cc:b8:d1:59:7a:68:a0:91:c2:22:ef:ab:4d:b3:00:
cb:d9:59:a2:24:6e:18:8f:60:2a:b4:b4:0f:a1:78:8a:26:01:
67:ed:69:0b:3a:f4:c1:15:80:b1:17:d9:e9:41:13:7c:00:e3:
98:77:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:16 2026 by rpki-client