Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: f9txprd8l7Ep6SnTd/ra3vVDTKRXW2QJ8cUbnhRHVww=
Subject key identifier: CB:1F:D8:A8:A3:FE:CE:A1:BE:00:EC:06:BF:E5:3E:D7:E5:79:14:D8
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019EC3A54DFA939974F0C89B6D8181C36DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1964
Signing time: Sun 14 Jun 2026 01:00:50 +0000
Manifest this update: Sun 14 Jun 2026 01:00:50 +0000
Manifest next update: Mon 15 Jun 2026 01:00:50 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: LfXJXsIH2s5qdMb1oCCLHHpteLXuomNeSKVRzoyDr8w=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:4d:fa:93:99:74:f0:c8:9b:6d:81:81:c3:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jun 14 01:00:50 2026 GMT
Not After : Jun 15 01:00:50 2026 GMT
Subject: CN=cb1fd8a8a3fecea1be00ec06bfe53ed7e57914d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:2c:01:41:3a:3c:06:25:df:f9:70:d6:76:
7f:e4:cc:3e:2c:f7:e7:06:10:67:17:f5:06:3b:e5:
35:19:ba:1d:36:22:84:dd:b6:92:5e:ed:26:6a:71:
ae:e7:25:24:88:d6:22:74:dd:c3:fa:26:f7:ca:56:
e0:8e:aa:ec:fa:2c:88:b7:91:97:34:d5:00:a5:df:
47:2c:b9:2e:e9:87:5f:c9:93:4b:48:40:3f:65:48:
d3:7c:67:5f:46:59:4a:c6:04:26:b5:57:e0:22:ba:
6b:69:d6:3f:25:e5:8c:ef:3c:20:60:81:32:a5:24:
9e:97:57:70:92:81:1c:da:09:a0:50:81:6e:dd:7f:
46:99:f8:88:ae:ed:91:7a:b3:22:7b:e6:15:ba:58:
f9:71:21:cd:f6:66:0a:24:c9:6c:96:a1:19:a1:a0:
82:b9:a7:14:93:95:0c:1b:d7:00:b0:24:4c:dd:56:
b2:37:eb:06:07:0e:7f:0e:50:57:f4:f2:42:43:8b:
42:8f:ac:c3:15:f7:8a:b6:ad:4d:5d:eb:19:8e:d7:
9b:b9:ee:fc:21:dd:12:c2:08:59:86:15:56:2f:3f:
ab:64:01:9d:49:93:6f:41:07:0a:40:15:88:5d:f4:
66:57:ed:4a:32:1f:a6:1c:9f:bd:db:52:65:f9:49:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:D8:A8:A3:FE:CE:A1:BE:00:EC:06:BF:E5:3E:D7:E5:79:14:D8
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:50:a0:c2:6e:d6:3c:78:06:a3:d8:a9:71:1e:9f:dc:a7:
76:f1:00:96:c9:66:aa:84:00:47:ea:80:7f:5a:b2:72:ce:9e:
89:1f:cb:ca:b9:46:29:4d:a5:27:6a:e0:bb:a4:62:e0:21:85:
21:0f:48:ca:6e:1e:f9:c1:4c:51:fa:16:39:87:ed:a9:e4:d7:
77:e4:69:90:aa:a7:67:7a:03:49:03:32:aa:ba:27:d0:22:2d:
12:d7:80:3a:1e:58:64:44:27:45:53:d3:ee:e6:79:a0:05:cd:
20:21:ae:69:3c:5a:54:ad:a0:c5:08:ea:72:dc:0f:ce:dc:d6:
92:e8:56:0d:fa:83:76:22:15:27:c3:7c:01:02:69:20:82:53:
a6:c0:f3:49:42:ea:55:09:1f:b6:3b:74:61:d8:21:ec:a9:f5:
c2:15:25:09:06:fd:09:b2:16:0b:4d:b1:78:df:b0:a2:82:05:
25:f2:f3:bd:32:c2:da:b7:b2:b6:2a:1c:e9:fb:51:dd:84:94:
1f:39:e6:9b:64:78:4f:dd:98:54:ee:b4:57:6d:25:c7:f3:2d:
56:8f:60:2f:c8:13:74:58:9d:07:32:eb:be:49:eb:fa:f5:2c:
9d:3b:21:a3:43:03:e4:26:47:ba:b7:57:34:a5:57:b9:bd:38:
14:08:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:14 2026 by rpki-client