Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: 2g5p1uXvW67qh9/s98TmaHvETmtQuc5VdZn9+9mCCu0=
Subject key identifier: 60:CA:53:2C:FE:DC:BE:4E:25:15:A6:80:D6:DB:3B:52:91:37:51:6D
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019EC148F7E1BEDDFC9C20015EE8F38DC183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0EB6
Signing time: Sat 13 Jun 2026 14:00:45 +0000
Manifest this update: Sat 13 Jun 2026 14:00:45 +0000
Manifest next update: Sun 14 Jun 2026 14:00:45 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: VyUKKyFsI6pKYXjp1pfKocLsCC/hGMGr6OGqqAgxijQ=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:f7:e1:be:dd:fc:9c:20:01:5e:e8:f3:8d:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jun 13 14:00:45 2026 GMT
Not After : Jun 14 14:00:45 2026 GMT
Subject: CN=60ca532cfedcbe4e2515a680d6db3b529137516d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:35:cf:df:60:6b:d7:b4:87:b6:38:47:06:
aa:56:02:76:86:e7:af:4a:cf:0e:5d:43:06:c3:f1:
68:0f:37:e9:ab:a5:45:25:ff:6a:dd:01:37:6b:2e:
78:a6:a0:e2:18:4a:ee:8a:8c:43:1f:88:dd:91:40:
55:bd:c0:e7:ec:72:5d:e1:f6:44:93:a3:5a:da:2c:
44:90:66:63:0e:07:88:eb:a5:83:f3:e5:b7:dd:7c:
3d:55:44:ad:fc:6c:9e:66:fe:d1:4e:f9:a7:32:d4:
a2:33:e2:bd:ee:a3:fb:62:b2:36:bd:4c:bc:55:e6:
d8:26:9d:01:24:4d:04:8a:e0:0b:93:e7:b6:5e:60:
5f:60:5b:e1:fa:0f:8e:54:52:b7:11:50:f8:78:45:
7f:5b:97:bd:8a:0d:39:1d:94:16:c3:66:6d:4e:dd:
e7:2c:eb:eb:49:90:c8:cb:1b:14:12:73:cc:1c:b0:
3a:d3:ba:f9:c6:b4:39:ca:86:f0:7a:94:cf:c5:85:
11:54:cb:03:d9:ca:eb:35:89:a1:9e:fa:8f:3d:b8:
41:5f:00:d5:1a:48:2f:da:09:a7:7b:fd:ef:a0:a3:
bc:c2:4a:de:7b:0c:84:57:b3:15:bd:5e:0e:f0:49:
8e:ea:74:80:6f:61:6a:51:60:4c:3e:18:2b:f2:3b:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:53:2C:FE:DC:BE:4E:25:15:A6:80:D6:DB:3B:52:91:37:51:6D
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:f4:78:87:b5:e9:13:dc:46:07:c8:c2:55:74:b5:48:03:
d4:cf:e6:b6:29:cc:c3:72:3c:a3:36:f3:64:f7:c6:8c:b5:2a:
87:2c:6f:75:36:16:d0:ce:c7:2b:fb:7a:a2:84:bb:c7:29:e7:
0f:95:07:a8:92:9c:46:4e:95:c3:0b:90:cf:d8:2f:95:3c:83:
96:97:97:48:d3:8a:e6:b6:5e:04:9e:55:3f:9a:bf:65:12:1d:
11:36:f0:f6:0d:bd:5d:c1:27:5a:a0:ad:d7:52:e9:15:d7:d1:
d7:1f:20:05:1b:f9:42:19:72:55:db:96:8c:fb:ec:13:d9:73:
71:36:35:0e:c5:8f:3b:0d:7b:19:89:1b:d0:c2:b9:f1:9f:26:
df:bc:cb:b1:38:28:c5:8a:23:9c:7f:5b:0f:68:37:35:38:4d:
fb:dc:4b:83:63:87:df:32:31:ce:f9:65:16:00:a5:47:69:f1:
3e:19:92:bf:42:bf:d9:43:e7:40:8d:70:3d:ee:9b:d1:ec:89:
77:13:1e:f5:f9:ea:2b:ff:ba:c1:fa:a5:2c:29:b5:58:07:a3:
4c:78:c7:0b:33:59:28:1b:46:8d:65:4c:c9:30:b7:08:5d:cb:
bf:5f:95:1f:f3:41:92:ca:3e:f7:ce:ed:52:b4:f4:f7:b8:b8:
95:b3:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:36:24 2026 by rpki-client