Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: j4yQzvqEMiuPVmD2uXvPv4E8EgDUUWOCKpR4koyZVsQ=
Subject key identifier: 9B:F5:74:D7:53:24:F9:7A:64:8D:32:7D:E5:55:87:E6:84:B7:DA:F9
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019EC2249C1AE4177798F89FC5AA9C365DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0D54
Signing time: Sat 13 Jun 2026 18:00:39 +0000
Manifest this update: Sat 13 Jun 2026 18:00:39 +0000
Manifest next update: Sun 14 Jun 2026 18:00:39 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: T70e/52ZFL4LVW8KSkS5GXCvfPUoMJZ/0+839T8LvQg=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:9c:1a:e4:17:77:98:f8:9f:c5:aa:9c:36:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jun 13 18:00:39 2026 GMT
Not After : Jun 14 18:00:39 2026 GMT
Subject: CN=9bf574d75324f97a648d327de55587e684b7daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:bb:2e:65:a5:d7:b3:25:46:ba:f4:c5:dd:
12:ef:93:9e:05:22:8c:21:b8:8d:73:e6:26:ad:8d:
44:44:10:dd:1a:04:19:30:04:da:b6:2d:a9:8e:96:
f1:ab:8f:1a:3b:e4:42:8c:7e:7e:a8:23:0c:a1:f5:
79:52:72:f2:c9:84:25:28:d3:bb:83:5d:98:0e:60:
90:24:b3:40:4c:fb:35:c7:50:d3:37:0d:bf:35:0d:
ba:0c:f6:2c:f0:3d:3b:be:18:7f:44:e0:8a:61:21:
05:3c:bb:49:55:cd:76:29:79:49:23:97:7f:48:1f:
68:14:55:e4:ad:d7:e0:c6:12:c7:4d:db:1c:73:e8:
2f:f7:70:e4:17:4e:22:01:4b:c2:6d:6d:c8:8a:6d:
c7:65:a3:3f:2f:34:b5:68:fd:f5:21:0c:2b:02:6a:
69:94:5c:34:19:64:84:e2:8f:fd:7b:46:80:99:5e:
63:1c:60:15:44:f0:92:a4:9a:bd:9c:0a:3f:a6:83:
e9:e0:4d:90:83:aa:23:cb:dc:e1:8d:8b:05:2a:0e:
37:6b:24:3e:40:98:a1:f2:80:cb:e2:73:66:c9:e9:
2d:db:40:a8:a3:27:a4:61:7b:c9:7f:31:de:bb:dc:
2b:92:6a:b6:d6:19:aa:77:c3:d9:eb:10:b7:1c:a8:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:74:D7:53:24:F9:7A:64:8D:32:7D:E5:55:87:E6:84:B7:DA:F9
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:89:56:08:74:fc:71:21:cf:6a:10:35:90:4f:91:2e:4b:
f1:57:94:08:be:ee:19:05:8e:b5:f5:92:43:ee:4a:91:25:5e:
14:c1:dc:40:6b:1b:9b:ac:4d:0b:68:6e:45:f5:f3:b2:4b:22:
3c:71:69:fa:4b:46:c4:df:3b:57:f9:52:35:7f:9f:f8:ee:e8:
e5:6d:45:38:5c:a4:d2:48:d3:f9:60:20:54:e9:de:1a:ed:64:
4d:b9:be:9b:00:bc:29:d9:0c:0a:13:ca:85:0e:c7:0f:4b:59:
09:f9:e3:e5:4d:f5:3a:37:04:36:83:d5:ad:62:f5:74:e7:3c:
44:14:4d:3a:93:54:1d:64:e1:f9:12:4d:3e:b8:f8:3a:22:f2:
bd:b2:69:4c:15:7d:ce:53:46:ef:83:7e:1f:14:0f:0c:2c:b6:
cf:36:ac:26:51:94:ba:1e:8e:9d:29:0b:34:64:b2:44:27:84:
f6:09:e9:b0:6e:77:b9:c7:33:ae:f7:45:83:15:8e:40:b4:2a:
41:64:01:4f:90:f7:fb:6c:b4:8e:a8:1a:c9:59:22:51:ee:ff:
4a:b4:38:3c:22:a8:fd:9f:a4:69:4c:81:70:b1:5a:cd:a3:b3:
ea:d0:46:34:d9:6f:96:bb:d9:10:f8:52:ad:fc:a6:99:91:8f:
5e:74:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:49 2026 by rpki-client