Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
File: 1LkIqddLShCqH0wOiu1qhKO3kAU.mft (raw, json)
Hash identifier: gcFgdgl9GjWC7yEZpvhd1eTNd6Zy8+tcuVDKkvmVzJs=
Subject key identifier: 11:24:FF:F2:DD:C9:42:E3:59:11:97:A1:5C:AE:FF:8F:08:B0:95:E7
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 019EC17F80108CD2B57716B187E8D8A2816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
Manifest number: ED
Signing time: Sat 13 Jun 2026 15:00:18 +0000
Manifest this update: Sat 13 Jun 2026 15:00:18 +0000
Manifest next update: Sun 14 Jun 2026 15:00:18 +0000
Files and hashes: 1: 1LkIqddLShCqH0wOiu1qhKO3kAU.crl (hash: HNfRW72ITHiOpGsDClreK1NNeJPf/Lrp2XTEsOmX620=)
2: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (hash: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=)
3: oMAU4cDFxFwhA1NEpG0dXZO6zCQ.asa (hash: WY020cbiNFXtPn2WDWywnrSUq7C1vkRuGv5i2lQyac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:80:10:8c:d2:b5:77:16:b1:87:e8:d8:a2:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: Jun 13 15:00:18 2026 GMT
Not After : Jun 14 15:00:18 2026 GMT
Subject: CN=1124fff2ddc942e3591197a15caeff8f08b095e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:d9:16:f5:9a:c9:07:d3:75:08:5b:6b:86:
2d:a3:38:52:35:3d:b6:e0:3d:eb:b8:b7:5d:ad:63:
3d:12:c7:ce:24:23:fe:f5:9b:61:fd:dd:e9:c0:5c:
52:2f:2a:2d:2f:8a:1c:e9:5c:b1:58:86:67:4b:af:
cc:2b:a8:f4:7b:c4:d6:c0:bd:3b:fa:3b:7c:fd:41:
7d:75:ce:69:fd:c9:99:7b:4f:97:c7:26:3c:1d:5d:
0c:32:41:e1:78:dd:cb:4c:ea:62:c0:5f:37:4a:ba:
6a:35:61:a5:c2:f5:59:63:a5:9a:3f:c6:b6:bf:3c:
9f:ce:f0:4d:72:60:1c:fe:15:52:83:ba:fd:cc:76:
19:c7:87:d6:d6:f9:8a:72:5b:7f:8b:5d:bf:6b:f9:
60:6d:56:0b:46:6c:08:5b:52:67:65:85:56:4d:e4:
62:43:19:a9:b5:76:01:2d:de:5e:ed:79:2d:2b:da:
7d:35:53:bf:4e:89:eb:b0:e9:97:d7:ed:8e:25:6f:
bb:a3:cd:58:95:c1:5c:25:67:44:90:fb:7a:b0:6c:
14:da:16:11:f0:a8:60:4d:52:17:35:5b:58:e4:17:
e4:8f:0a:25:34:70:0d:59:59:35:2a:c8:47:62:c5:
09:c5:13:05:4f:a1:d4:4d:7a:f3:89:5a:e3:13:f3:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:FF:F2:DD:C9:42:E3:59:11:97:A1:5C:AE:FF:8F:08:B0:95:E7
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ee:55:15:b6:04:54:db:e9:59:12:c4:92:2e:e4:b3:c8:ab:
1d:ea:dc:9d:51:71:ea:e1:87:34:ec:7c:4e:78:3c:87:19:ff:
23:e5:fe:f0:56:46:73:5b:56:4f:a6:12:7d:6f:f0:57:a6:ac:
4b:4c:86:e5:af:34:4c:1e:41:47:fa:18:18:1e:3b:a5:86:3c:
41:5b:e7:78:46:c0:cd:d8:9e:04:e6:7c:7c:6f:2e:69:f5:43:
bd:ce:50:39:15:75:57:16:5b:a3:57:e9:7a:ad:e5:1f:f5:76:
1e:5b:fc:17:6e:64:69:60:97:95:2e:c4:ea:0e:d3:ac:95:42:
b0:ce:1d:84:ee:ea:57:7d:97:b0:dd:12:61:4e:32:3b:09:9a:
bb:e3:63:81:32:96:fa:be:39:37:47:ed:6b:4d:99:e6:f9:52:
50:d5:51:40:6e:57:3f:99:f3:c8:a9:48:c6:b7:a9:fe:c9:f3:
15:7a:2e:e2:ad:f6:d5:a3:73:9e:e7:6f:5b:ea:87:d9:e6:24:
f4:6d:86:af:50:92:fb:03:82:19:66:2e:8a:c4:ab:1d:d4:b0:
f9:1b:a6:9f:d3:4e:c6:06:85:d0:29:e5:44:dd:84:b0:4a:63:
b2:8f:ec:11:92:7c:9c:43:c7:c8:c2:44:ff:dc:b6:80:e2:8f:
ec:43:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:59 2026 by rpki-client