Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: L3/YUWBLdDbXOh6oeVUN0j9kfUJBcMqzYAr0xRE58p8=
Subject key identifier: 1C:5C:E9:CB:48:D4:D4:36:99:21:1E:31:DA:A2:7E:77:AE:D7:F5:C7
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019EC0362C2DB6FB820BDF58613FE71E3907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1922
Signing time: Sat 13 Jun 2026 09:00:36 +0000
Manifest this update: Sat 13 Jun 2026 09:00:36 +0000
Manifest next update: Sun 14 Jun 2026 09:00:36 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: W2QALaQ9gECBKpTyrUUaAFLJRMR/93BfjZ0DhDLYJ0g=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:2c:2d:b6:fb:82:0b:df:58:61:3f:e7:1e:39:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jun 13 09:00:36 2026 GMT
Not After : Jun 14 09:00:36 2026 GMT
Subject: CN=1c5ce9cb48d4d43699211e31daa27e77aed7f5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:8a:ee:10:77:a4:d0:7b:f2:43:66:8b:90:
2f:dc:18:b2:7a:31:49:52:b7:60:67:60:2e:97:1b:
48:d4:37:d7:a4:76:d9:bf:c1:65:07:f8:1c:27:c7:
ab:f5:72:83:7d:53:3f:7e:40:9d:c1:5d:73:ee:33:
98:0a:ca:22:4b:44:9f:06:c0:74:68:57:5c:f0:ea:
56:21:83:29:0d:2f:eb:64:0e:a8:db:64:c5:13:fa:
c0:fd:09:ce:60:ef:b3:db:3f:97:7d:f1:f9:05:cb:
b1:ac:a7:d2:06:cf:f0:72:7e:42:93:d2:4b:01:cc:
d9:d2:58:93:91:5c:3e:e4:ed:7a:03:0d:12:b3:45:
f6:21:77:3a:87:d3:0f:16:2c:76:35:fc:c8:bc:4c:
09:af:f5:16:4f:fc:ed:a8:de:60:fc:02:b5:bf:80:
17:1b:c7:84:b1:9d:74:13:65:d0:f2:03:8d:6f:a6:
3c:29:9f:c5:15:14:eb:48:df:57:e8:8d:ce:51:e3:
81:de:7a:9f:2e:aa:98:bd:47:52:fa:3d:9e:97:5c:
9b:3e:f3:1a:b3:e0:7f:6e:0b:8f:97:5c:e4:4e:62:
5b:52:f6:b6:db:27:d2:65:0f:76:cd:aa:74:c4:90:
92:7f:35:1d:16:22:e2:6f:40:69:c9:0c:ac:c0:c4:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:E9:CB:48:D4:D4:36:99:21:1E:31:DA:A2:7E:77:AE:D7:F5:C7
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:67:60:d8:40:e4:60:41:5a:4b:01:f9:f0:ea:df:7c:0b:
43:ab:43:26:8e:22:71:cb:f5:d3:ca:fe:ba:59:41:ba:ac:c7:
07:fa:2d:1b:cd:74:e7:67:4e:76:6f:09:30:f8:a3:d6:0b:04:
79:9c:57:29:c4:39:f4:9b:ad:9d:60:4c:49:53:08:ee:2e:99:
94:45:21:40:92:69:15:72:ef:0b:59:f1:45:6a:83:b6:c6:b7:
f1:bf:2c:8d:f1:86:9e:cd:d2:60:c3:58:5c:89:ac:91:63:a0:
4c:ba:f3:55:98:31:be:8c:06:ed:e3:6e:7e:de:52:6b:ba:8c:
ba:bb:85:c7:e2:a8:1d:45:8c:15:91:0f:7f:a6:16:dc:8c:e3:
05:28:7b:e6:15:e4:b7:67:c4:56:ed:1e:9d:3e:0d:43:f0:0e:
ac:70:98:a8:ca:dd:fc:e0:41:84:ee:91:5d:06:a8:75:ee:6c:
8a:2d:eb:92:e5:05:01:b4:64:b0:83:96:bb:eb:bd:3c:30:8c:
a2:5f:7b:a6:7d:de:f4:75:19:e8:3f:fa:c2:2c:a8:19:df:86:
ac:92:60:6c:ac:5e:5b:b6:1f:2c:5e:d3:c3:30:b9:49:cb:be:
42:d6:99:24:c0:14:c6:e3:7f:91:68:ae:d7:44:1f:47:4a:bf:
7c:79:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:13 2026 by rpki-client