Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: 0WpmVgVYaeAmyI0+iLm3rlSxSjn/kXudpO/tZQ+aus8=
Subject key identifier: DF:C4:42:E6:A0:4D:8B:0F:28:F9:FF:DF:B7:E0:73:E2:6D:3F:09:90
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019EC3002E6D668C2DE14622A6B83C0CFD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 22:00:29 +0000
Manifest this update: Sat 13 Jun 2026 22:00:29 +0000
Manifest next update: Sun 14 Jun 2026 22:00:29 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: VyvKObuvvNlxq+18/ufAX3Gq66s19ikMCI8OuzjsRgU=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:2e:6d:66:8c:2d:e1:46:22:a6:b8:3c:0c:fd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jun 13 22:00:29 2026 GMT
Not After : Jun 14 22:00:29 2026 GMT
Subject: CN=dfc442e6a04d8b0f28f9ffdfb7e073e26d3f0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:ce:e8:0f:2f:27:bc:04:70:ed:f7:57:93:
cb:5c:36:43:46:5b:f8:01:db:c4:21:86:c6:e3:4b:
85:f3:c0:1a:58:76:0c:38:48:2c:89:13:78:7e:e6:
fe:6e:a7:f5:d8:f1:90:7b:b3:57:c8:b5:d7:a6:ed:
be:2b:8f:1f:52:47:47:fd:fa:8a:a0:e3:71:82:30:
8e:9b:07:4b:f5:e7:bf:15:6d:08:61:74:80:c1:8c:
17:19:75:1f:a5:09:36:5b:90:a2:fc:98:17:c9:45:
ad:aa:59:f0:47:36:ce:43:f3:fc:88:9e:ce:12:25:
2e:e2:75:fb:66:9b:ba:9f:84:06:ec:ec:f9:5b:8a:
06:65:40:36:22:5a:98:95:52:c4:08:c6:ca:02:2a:
f4:ef:36:12:c6:d6:c3:1f:d2:bd:0a:ba:32:53:44:
43:83:d0:6c:cc:5e:37:d4:98:fe:35:a1:66:55:ef:
ba:6b:a6:82:ca:3c:8c:6e:50:12:9a:36:1c:b5:03:
52:82:d2:b5:bd:cf:63:a8:5b:a1:b7:88:56:c6:85:
8f:bd:42:cb:85:46:27:7e:67:f4:26:84:38:44:0d:
f9:a4:c3:06:41:7c:dc:d4:56:70:96:c8:f5:1e:d1:
e1:6e:6f:87:8a:8e:99:d7:6c:d5:71:69:3f:3d:f5:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:42:E6:A0:4D:8B:0F:28:F9:FF:DF:B7:E0:73:E2:6D:3F:09:90
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:01:88:a2:01:55:c6:c7:5f:16:93:75:45:65:56:f2:99:
ff:c6:64:9a:89:ad:2a:88:a6:51:2f:e0:62:3e:f5:af:54:d4:
7d:51:a4:0d:11:f0:b9:16:57:fe:6c:f4:01:72:ba:ea:38:bb:
64:05:6c:f6:ca:4b:2f:9d:15:02:cd:e8:11:51:2b:49:bf:df:
ad:f5:ef:8c:c5:1d:18:85:af:a4:16:f6:61:04:5f:62:03:76:
8f:5d:09:af:73:1a:3c:86:46:2f:e6:2b:2e:29:9d:8a:f5:2e:
30:c0:45:05:9c:56:4e:6a:83:3e:e5:4d:e9:26:c1:df:12:a2:
9e:a8:74:fb:c0:51:10:03:b2:12:3b:26:85:c8:5b:35:9f:68:
1f:e3:22:0d:72:ca:82:68:05:4f:4a:b2:03:a7:2c:32:48:69:
04:f5:22:25:6e:e8:4d:1f:f8:43:da:76:a7:e6:17:c4:1c:35:
dc:1f:b3:ae:ca:57:2a:0a:12:7b:02:e6:be:84:00:5d:fe:d1:
5f:fe:78:df:65:8c:c6:91:f3:69:f6:e2:de:a3:5d:b5:55:d5:
23:51:95:82:e5:f8:d9:25:40:5a:c2:2c:e9:27:5d:77:05:21:
e8:ea:bf:e0:ff:52:09:47:bb:54:b8:5d:d8:09:ab:67:40:8b:
b1:7c:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:16 2026 by rpki-client