Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: CIi8jmqUGEOatmtztq30zCP2U339qUygD9Hfo4oOb+0=
Subject key identifier: DF:6B:AC:A3:94:17:FC:CE:20:4A:F5:B3:84:FF:76:21:32:B7:9E:92
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019EC300DE284DB898CE1ACDCE320941342B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 22:01:14 +0000
Manifest this update: Sat 13 Jun 2026 22:01:14 +0000
Manifest next update: Sun 14 Jun 2026 22:01:14 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: +xXJpiynqfOdwfdYREGMOjeqzBxsSbLlebUG4n1frLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:de:28:4d:b8:98:ce:1a:cd:ce:32:09:41:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jun 13 22:01:14 2026 GMT
Not After : Jun 14 22:01:14 2026 GMT
Subject: CN=df6baca39417fcce204af5b384ff762132b79e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:79:05:b5:5f:04:ce:4f:8a:54:a6:c4:da:
fe:49:80:50:8c:7f:86:81:7e:9d:a0:83:94:74:94:
65:7d:b6:1c:dd:a5:b1:68:33:60:f1:bd:e9:f6:08:
bb:54:20:ce:53:2e:95:bb:fb:ce:3e:39:fe:39:a9:
73:80:41:fd:1b:6a:d9:9f:ed:c9:f1:90:0a:be:e6:
c8:55:a8:11:8d:20:4f:32:40:48:e0:ec:d3:91:3c:
a7:6d:5f:da:9d:96:db:3c:16:60:26:ec:ab:59:70:
6e:d0:4c:bb:d3:15:6e:1e:f2:e7:34:b7:44:0f:37:
94:ff:39:20:43:44:b7:66:a4:53:98:d8:91:bb:0f:
3d:31:89:a8:06:42:5b:cc:aa:fd:c6:d6:8f:58:33:
79:eb:31:48:02:34:75:bb:1d:7f:96:29:b9:78:0d:
65:d0:77:15:59:11:d9:49:ff:35:29:c3:14:18:84:
d2:79:ec:7a:8e:23:c8:b0:42:85:03:e4:bc:39:bd:
59:28:04:69:99:bb:40:27:03:ef:d5:35:68:bb:02:
0d:63:54:fe:34:26:19:5c:77:d7:ef:2d:94:f1:4b:
6b:d5:63:4f:5d:b0:80:ed:be:36:13:c9:1d:c0:45:
c9:35:59:81:cb:81:1c:40:7e:b4:d2:22:ad:3b:9d:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:AC:A3:94:17:FC:CE:20:4A:F5:B3:84:FF:76:21:32:B7:9E:92
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e4:c8:74:c1:c1:b8:c4:81:c6:9e:07:b9:6c:73:1a:80:00:
9b:be:64:57:8a:b6:61:af:08:28:0a:56:3e:f2:07:4a:d3:74:
65:d5:4e:76:df:78:ee:9d:e1:78:ba:dc:bc:ea:5a:91:19:12:
01:9f:24:7f:ba:af:61:d5:7a:f8:2c:bd:33:e3:f5:49:21:28:
8c:08:34:41:04:f6:cb:ff:2c:0a:fc:4f:89:6a:30:25:60:14:
12:13:46:09:af:42:e4:7b:1e:fc:2b:b9:e5:99:aa:1d:41:1e:
69:b2:07:8e:75:ed:89:6e:10:d9:82:f4:49:00:0d:8e:ba:27:
c0:8c:9a:7b:52:3d:40:d1:2f:17:44:54:27:ae:1a:d3:41:04:
87:4c:9c:e1:9f:63:d8:c0:94:c4:81:be:4a:df:a4:f3:03:ae:
9d:6d:72:53:dd:00:c3:b9:33:cc:63:ad:36:52:c7:50:0e:40:
8c:a0:f4:cf:6d:30:c5:33:5b:3c:d4:7f:70:67:da:da:5c:b6:
d4:34:e0:29:3e:30:69:78:4e:0d:cd:c4:eb:2c:0f:72:e5:2b:
c8:29:8b:3f:e9:07:e9:83:05:bb:9e:06:9a:73:ff:80:c2:0c:
77:23:35:66:22:d4:b7:19:87:f5:fb:f5:3e:e7:05:d9:e0:04:
3d:98:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:17:44 2026 by rpki-client