Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: B/JVg3CHC7xINCn2WqrCmMoIdK2ZPSVayrAW7ZEV9XA=
Subject key identifier: A3:AE:A8:CF:66:F2:6F:D7:01:32:CF:31:D9:03:C8:58:8D:E4:A2:01
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019EC03634AE25B3F518902CB36B66ACD00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 09:00:38 +0000
Manifest this update: Sat 13 Jun 2026 09:00:38 +0000
Manifest next update: Sun 14 Jun 2026 09:00:38 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: k72RkMYDlBxcxFUgE9iEcb3OTHYLpSH5+oc5yhBkCE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:34:ae:25:b3:f5:18:90:2c:b3:6b:66:ac:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Jun 13 09:00:38 2026 GMT
Not After : Jun 14 09:00:38 2026 GMT
Subject: CN=a3aea8cf66f26fd70132cf31d903c8588de4a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:1b:89:d1:b9:cb:bf:b9:99:92:bd:e1:80:
7d:d7:ef:76:f2:8d:5c:01:8f:70:62:a6:8e:81:53:
61:91:e0:88:ee:60:6f:18:1f:f1:cd:d4:a5:a2:1f:
4d:2c:0a:91:14:98:25:ec:b9:d9:0d:e9:1d:cc:d6:
92:1d:cf:45:dc:2d:c5:c5:2d:38:3f:f2:72:aa:1e:
19:b4:78:ce:b1:a4:02:d5:dd:26:d8:a2:37:4b:86:
8d:83:f6:17:4a:c9:ad:20:7b:aa:49:aa:f9:97:d8:
0c:e5:40:a3:d0:42:4d:44:ca:56:2c:62:88:f4:82:
15:2b:a4:27:1b:00:0f:11:21:dd:58:48:39:ef:31:
ea:e7:08:98:54:14:24:76:85:09:a9:9d:14:58:5f:
db:d5:04:b9:30:a4:e9:ff:bf:1f:59:0a:7a:17:52:
10:ed:2c:db:0c:2f:14:71:b1:66:e1:1a:8f:93:eb:
c7:e4:bb:10:52:55:3b:c2:4e:fe:dc:22:bd:d1:0e:
96:59:a9:ad:8b:b0:d5:f9:39:81:9c:0b:26:e2:1a:
06:2e:47:4c:bc:c6:61:0d:c8:92:51:a5:ff:63:14:
86:e4:ee:97:f3:bf:f5:93:bb:66:c6:1f:f3:53:98:
0d:fd:08:d7:61:2b:e8:fc:db:3e:90:98:f7:db:46:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:A8:CF:66:F2:6F:D7:01:32:CF:31:D9:03:C8:58:8D:E4:A2:01
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ab:ed:6c:04:df:1f:6e:6e:1e:eb:4c:ca:a1:e7:eb:c5:32:
0d:86:a1:90:2a:47:fc:36:53:d8:48:d7:f4:bc:a2:5a:a4:04:
60:0e:57:4c:72:b3:4c:eb:42:7d:a8:8c:ad:1d:3f:80:1b:d2:
78:27:93:86:23:36:29:58:d2:48:42:34:22:e1:89:20:7f:37:
42:e8:31:a7:e7:26:5b:64:34:5f:3c:aa:b7:a1:55:35:cf:c2:
ed:02:63:c6:36:ef:de:79:2d:c5:be:62:bf:e4:64:2a:c5:05:
12:06:50:a1:07:44:45:73:c8:6e:0d:33:b4:89:e0:2c:5d:fa:
8d:c7:7e:c0:f0:91:25:d8:15:da:b9:51:96:e3:33:30:aa:5c:
fb:f9:e6:c1:81:88:59:a3:d5:7a:c6:1a:5b:25:ec:b7:d8:92:
de:32:e5:c1:18:2c:29:61:fb:a2:81:8d:84:dc:2b:b5:d8:d9:
ca:db:ad:ab:0b:d9:25:79:cb:59:76:96:be:c4:b6:0c:23:96:
3e:f0:d1:9a:ac:4d:89:d6:6d:bd:37:13:31:f8:8f:6c:ce:17:
9b:93:0b:4f:f4:c7:f0:91:37:95:23:8d:54:30:20:80:1c:48:
54:d3:f9:2a:bf:8c:ed:c7:db:63:6d:a7:a2:ad:bd:ef:b9:ff:
f3:57:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:13:44 2026 by rpki-client