Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: BbuRKXamjOmjNfNOlB2m0rVEXm/QmP7GiX3yUTIxqWE=
Subject key identifier: 67:E9:36:B2:B8:64:D0:4C:64:DE:7F:1D:AA:F5:58:0E:53:6D:CC:F1
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019EBFC870E54CC7606A00627F12C9EBA787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 07:00:44 +0000
Manifest this update: Sat 13 Jun 2026 07:00:44 +0000
Manifest next update: Sun 14 Jun 2026 07:00:44 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: NMl8RwA9V0umXgFE4+9Sll8QR6XSFNqGyjTjdVn/cXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:70:e5:4c:c7:60:6a:00:62:7f:12:c9:eb:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 13 07:00:44 2026 GMT
Not After : Jun 14 07:00:44 2026 GMT
Subject: CN=67e936b2b864d04c64de7f1daaf5580e536dccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:c8:3d:63:6c:dc:91:2e:6c:a1:45:30:71:
1f:d1:ae:88:31:0d:fb:f6:69:4f:4a:21:ce:71:9e:
98:91:11:66:94:7c:9a:82:09:c6:7f:7a:63:65:45:
00:3e:48:e7:84:b2:85:ca:74:e3:c2:c6:31:2e:a6:
f4:a4:52:50:3f:23:a8:7c:82:dc:bb:1b:d8:b5:2f:
ad:3d:75:aa:9a:2d:6c:f6:e9:9b:ff:8a:c9:ff:ac:
08:fa:6c:a1:1f:b5:8e:a2:28:1f:74:38:f4:fa:41:
3a:14:88:2c:2d:82:c9:b6:71:51:65:dd:48:7a:54:
84:df:e5:cc:83:5d:16:f4:10:db:5e:d0:e9:72:4f:
9d:de:70:9c:14:3d:db:32:ba:7e:6a:64:2a:e4:6d:
39:57:d1:f0:e5:87:40:cc:00:07:04:5e:47:8d:9d:
76:e7:ee:24:3c:1c:44:7b:e7:e0:55:d0:09:f4:1e:
06:eb:2b:1d:ea:0d:56:63:2b:2f:89:29:8d:8a:63:
43:02:5a:bd:cf:6a:be:5e:d5:c5:a9:2c:80:97:f9:
de:6f:11:4f:e5:ce:93:8f:c5:96:8a:06:65:e7:4a:
09:f6:77:78:e0:c3:63:c9:0e:21:ed:b9:3f:a0:ee:
1f:c7:a2:52:26:9c:8c:77:16:1d:e9:e2:d8:be:40:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:36:B2:B8:64:D0:4C:64:DE:7F:1D:AA:F5:58:0E:53:6D:CC:F1
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:02:3d:e1:2d:6c:69:c0:32:fe:dc:1b:27:9d:dd:a6:da:
86:2c:24:f1:19:c4:e6:51:20:be:27:d5:dd:e4:61:63:32:12:
40:11:5c:48:1c:73:ff:f0:fb:74:50:e2:bc:16:ca:c1:f5:ab:
7d:32:9a:86:74:9e:c6:78:fa:cf:05:4a:cc:4a:90:25:d5:05:
d6:fd:de:0b:60:a3:ca:a1:4c:56:05:3c:7c:23:2c:62:a0:23:
0d:4b:11:0d:b8:f6:12:19:cc:d5:1c:85:48:d4:60:2d:93:0b:
0b:3d:c6:bc:c8:06:f7:ba:ab:5f:f5:2c:2c:f1:be:5d:64:03:
1c:19:25:a8:e2:d0:4d:86:4f:f0:bd:0f:49:de:ad:6c:ea:25:
9d:99:d3:9c:e9:1f:4c:8a:5b:45:e1:28:6d:37:d4:11:ec:8b:
0a:a5:3c:80:bb:63:fa:3f:8c:fa:36:ea:65:30:92:f0:2b:c8:
e3:96:d7:22:e0:64:05:57:b1:3d:c5:7d:cc:b0:4f:b4:00:88:
c7:4d:3b:95:65:03:9d:be:39:93:fd:98:5f:5a:3e:31:5f:7c:
9f:a0:c4:30:1d:67:3a:3f:d5:78:e1:0e:75:e8:b5:eb:60:23:
b8:f4:4d:31:c7:59:97:7e:d6:ed:74:37:ca:ee:52:da:99:f8:
ef:c0:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:04 2026 by rpki-client