Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: Nb8nQ665KawuSl9HVZ5pd9jzgNP2TYi2GU6CDzHBuPc=
Subject key identifier: E3:43:81:03:53:00:7E:EE:16:4F:28:B1:BF:0B:7A:81:AA:22:2E:D4
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019EC0361D7CDCCBA2996ACC3883BD5A738F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 09:00:32 +0000
Manifest this update: Sat 13 Jun 2026 09:00:32 +0000
Manifest next update: Sun 14 Jun 2026 09:00:32 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: 8Pxg37k0hKhyZ9ksRX8TBxYru9l7vZKQ6IbFycVTp3I=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:1d:7c:dc:cb:a2:99:6a:cc:38:83:bd:5a:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jun 13 09:00:32 2026 GMT
Not After : Jun 14 09:00:32 2026 GMT
Subject: CN=e343810353007eee164f28b1bf0b7a81aa222ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:8f:7d:14:fc:89:2c:b2:8d:c4:52:9d:4c:
39:3b:6d:00:3c:13:f8:a1:be:2a:39:b4:12:fe:75:
e3:66:ba:62:65:6b:1f:bf:e3:f4:66:be:2a:32:de:
78:c4:a4:52:26:34:7f:af:65:9f:1e:80:a5:22:22:
97:42:e8:eb:7a:68:c1:9b:de:00:af:e3:6e:72:4d:
8d:04:18:56:d6:bd:6a:e8:f9:7d:46:5b:89:02:61:
a3:f2:97:21:f0:18:27:c5:5b:7c:39:60:f3:63:86:
fc:1d:28:27:9a:7e:59:5d:4f:5e:2c:98:42:5f:9e:
5c:80:b1:1d:3e:45:be:11:03:fe:b3:df:bb:25:e4:
d1:66:39:34:1d:14:59:5a:c3:b7:ea:e4:21:37:2f:
0d:6d:f6:fa:19:86:cc:4c:41:63:f1:eb:82:a1:3a:
7b:eb:91:3a:5e:03:38:a7:b6:0b:cb:ab:a3:19:78:
41:c1:60:0e:28:c8:d4:11:89:03:18:5e:b6:71:ca:
1c:6a:2c:00:e2:a5:d9:3b:71:e9:fe:f9:20:b6:ed:
9d:05:47:67:85:ec:86:e2:d6:ce:4c:6f:3e:18:67:
06:66:a1:4d:8d:2d:32:a4:33:3f:96:c1:5c:b0:d1:
fd:b5:50:24:9a:ee:b2:58:3e:13:7e:de:fb:e2:55:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:81:03:53:00:7E:EE:16:4F:28:B1:BF:0B:7A:81:AA:22:2E:D4
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:d3:9a:59:1a:ba:a9:5e:74:43:9d:4f:74:94:8f:a1:0d:
50:43:13:15:69:25:9f:c0:38:e9:7a:e6:b6:ab:a2:8d:2e:cd:
83:86:3f:67:24:c3:71:5e:ce:90:2d:2d:bb:3e:88:bc:e4:c9:
2f:22:ba:05:a8:bb:32:87:8b:a2:56:83:2f:f6:a7:0e:76:9d:
2e:6e:7b:0f:02:fc:15:65:59:c7:42:26:ee:1b:c9:b8:b6:41:
17:33:04:f4:98:8c:7a:d9:8e:ad:31:2d:71:f7:2e:57:c9:87:
1b:89:ea:b8:b2:82:dd:68:b5:68:20:45:3b:a8:b2:89:cc:b3:
ba:ad:d4:67:59:f3:a7:01:96:2e:c0:8d:91:b2:20:a4:8b:89:
63:6c:f2:af:72:dc:5b:b2:7c:b4:51:88:b8:0d:d6:7f:34:cc:
3d:75:6f:1e:73:9e:26:46:0c:8e:ef:67:31:fb:24:7f:fd:2c:
da:21:b6:17:f5:cc:0d:5c:eb:2b:93:3b:1e:f8:fe:f1:f7:9e:
3c:08:14:44:c7:0b:98:c5:f2:41:90:b3:e6:49:44:a6:45:ec:
c0:f5:4f:e8:03:75:36:e0:90:88:0f:28:0f:1c:93:46:c0:dc:
b5:e5:e2:18:b8:5d:ad:26:65:d7:20:a2:68:c1:bd:84:19:73:
fb:91:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:17 2026 by rpki-client