Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: 1KQlRz1hRjAz8qsSuVuyELgutzQtL49+V+7iESWeRNo=
Subject key identifier: 0C:1C:15:0A:80:E1:E3:93:B6:48:33:18:8C:B0:CE:85:9C:F9:5A:EE
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019EC22450E1783A97C596897E03BE31B8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 126B
Signing time: Sat 13 Jun 2026 18:00:20 +0000
Manifest this update: Sat 13 Jun 2026 18:00:20 +0000
Manifest next update: Sun 14 Jun 2026 18:00:20 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: MhHJCvahtvHua3eqxfeXeuQcGITNWmy+Mln2p5bz7AM=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:50:e1:78:3a:97:c5:96:89:7e:03:be:31:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Jun 13 18:00:20 2026 GMT
Not After : Jun 14 18:00:20 2026 GMT
Subject: CN=0c1c150a80e1e393b64833188cb0ce859cf95aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:a8:59:24:ed:f8:e7:41:2d:7a:80:04:0c:
15:3f:06:77:b0:5a:94:32:e9:22:b6:ff:3c:a5:b0:
1b:61:54:ab:a5:70:fb:64:a4:66:e5:0c:11:a3:97:
d2:ca:01:63:d2:c5:f2:cf:84:09:8b:47:43:bc:ac:
a1:31:d5:43:72:36:79:48:10:87:e5:4b:c8:72:34:
66:e5:28:1a:89:51:00:79:59:e1:9d:f2:22:26:12:
93:40:34:46:f5:3c:8a:a2:e6:04:c8:97:75:50:c4:
89:2a:01:6c:53:2f:f0:dd:eb:3e:5b:88:4e:f8:d5:
63:14:4f:3d:52:c8:fe:62:bf:b7:0f:8c:57:c9:87:
50:25:6b:bb:b9:c2:01:ac:1d:49:9c:f2:51:ab:7d:
1d:d8:ef:c4:fe:dc:bf:63:d3:c7:13:75:fb:45:3f:
dc:6c:46:f7:7c:c0:3c:b5:41:b4:10:26:80:47:c0:
00:21:7a:1a:70:df:b3:c4:b7:10:ca:4a:a4:50:35:
83:74:ee:64:a4:7e:c3:01:18:a5:35:a2:44:b2:e2:
c1:c7:1e:55:ca:74:32:bb:6b:84:d4:a0:e3:39:f4:
01:92:50:09:4c:2b:35:42:26:e7:45:83:ae:f5:07:
7c:e6:38:68:f5:ff:44:0a:53:90:84:68:d3:7f:d0:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:15:0A:80:E1:E3:93:B6:48:33:18:8C:B0:CE:85:9C:F9:5A:EE
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:71:78:82:0b:45:55:b5:0f:0c:96:7b:30:92:c6:8d:57:
81:25:7d:df:b9:b3:e1:2d:bd:92:14:1b:d4:14:92:b9:5f:e6:
94:06:41:2c:a5:53:07:36:95:9c:27:ce:c2:25:c4:b2:fc:de:
51:0e:8f:95:70:99:34:48:7b:b6:90:cd:48:8e:91:7b:91:af:
65:74:ca:f4:3d:5d:b8:3f:7c:fa:a2:ad:b1:cb:be:f1:2a:6d:
98:b1:3f:b9:40:42:b3:88:44:68:a6:f3:d1:42:75:66:9a:a5:
03:04:c5:74:c6:57:73:6d:be:43:d7:9f:ea:8b:47:25:d0:d3:
79:5b:73:65:0c:f3:18:8f:c5:58:2c:ba:c7:ff:ba:5d:dc:94:
92:f6:d3:d1:ee:98:ea:7f:94:d6:f4:99:fe:42:60:4f:e8:9e:
0c:2f:e2:9f:18:ee:1f:42:24:0e:5f:ba:e4:36:9e:b8:f8:0f:
6b:87:2a:54:62:5b:e9:9d:4d:96:b3:cc:28:f0:fc:57:e6:c6:
b0:b6:f2:9b:b5:5e:ec:76:56:3f:0a:ae:57:62:f1:71:cf:8a:
72:34:01:c1:0c:60:13:0e:f0:d5:45:f7:8d:cc:3f:e3:3b:55:
5f:43:23:e3:fd:fd:6f:53:b7:3d:3e:aa:ed:3e:a8:3a:8b:71:
c4:4e:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:10 2026 by rpki-client