Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: g/dBjGr1bkjQXGPbgeXFJWXzoRV8GOlekZvq5nuwymI=
Subject key identifier: FB:72:01:29:67:CD:01:94:50:95:58:1A:1D:04:C3:F2:BC:78:13:0D
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 019EC300982B121EDBED91B4B88104C31C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 094C
Signing time: Sat 13 Jun 2026 22:00:56 +0000
Manifest this update: Sat 13 Jun 2026 22:00:56 +0000
Manifest next update: Sun 14 Jun 2026 22:00:56 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: wT1wEa+2R4pXe3izFJps+/A7wuJQg/jZw028W8NJevY=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:98:2b:12:1e:db:ed:91:b4:b8:81:04:c3:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Jun 13 22:00:56 2026 GMT
Not After : Jun 14 22:00:56 2026 GMT
Subject: CN=fb72012967cd01945095581a1d04c3f2bc78130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:20:df:7a:45:b5:2f:ca:07:bc:74:a2:be:
4a:e8:38:90:67:53:b9:13:7e:78:b7:b6:3b:41:59:
c2:44:ba:3d:3b:af:41:f2:1f:62:89:6a:29:ac:2b:
f7:25:bc:1a:16:7b:2c:6b:fd:cd:c7:7b:78:6d:4f:
af:bd:fd:06:41:59:57:c7:4b:8a:9d:c8:04:f5:4e:
a3:d8:b7:ba:17:81:5c:83:1d:46:26:a6:69:03:4f:
b0:bf:4e:33:98:ba:f9:75:07:f0:85:5d:1e:44:1a:
ea:8c:37:dc:ab:9c:1e:f4:ec:e7:8c:8c:7c:8c:74:
ea:e5:d9:5b:7d:44:7a:60:9f:e6:b2:36:52:81:cf:
e7:a5:87:5d:55:8d:9f:42:00:a9:76:c1:a4:0e:e0:
83:ec:f7:7c:62:58:06:a8:2b:46:09:6c:bc:e6:16:
5f:95:78:22:db:df:3c:2c:9c:03:43:0e:ee:2b:b2:
cf:a1:0e:ee:6e:eb:d3:54:6d:a1:5e:a9:97:22:e8:
aa:a8:22:55:92:d7:ff:02:b8:e4:12:3b:ef:d4:ed:
7c:8c:e8:d9:8a:90:e8:90:ec:fb:21:33:0a:20:96:
81:32:7f:13:38:17:39:55:14:f2:51:b1:be:8b:7c:
6c:21:9a:59:7c:86:76:8e:13:cd:a0:71:ba:0a:e1:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:01:29:67:CD:01:94:50:95:58:1A:1D:04:C3:F2:BC:78:13:0D
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:46:97:53:c3:05:77:d0:9f:06:7c:f8:f8:54:ee:7d:38:
19:6b:bc:66:d9:ba:63:b4:60:5f:b2:05:2f:6c:bc:90:57:97:
f6:7d:3e:f8:9f:6c:24:01:2d:2c:93:32:71:66:a9:a4:db:59:
51:a1:e5:ff:97:02:51:94:77:cb:d1:53:47:64:da:50:f7:8a:
12:27:17:cb:cb:17:20:40:f8:49:b3:0b:35:cf:eb:b7:74:a6:
05:41:29:7e:74:5e:a5:1c:2d:99:bb:63:0d:d0:2d:42:c1:b6:
ee:f7:c9:1b:c7:a4:6c:19:d4:b0:a5:1b:0e:80:3f:e8:cb:53:
7f:0f:a5:56:14:de:4b:92:bb:9a:f1:6c:70:86:50:5f:91:af:
8c:05:e4:87:aa:6e:db:c2:75:c1:b2:23:1a:fa:92:ff:a1:a5:
f8:4d:6d:33:10:46:a5:31:df:de:59:e6:dd:71:9e:7d:50:00:
df:39:10:6c:93:3e:43:28:a9:fb:c9:55:e3:63:36:4d:3d:cf:
66:d8:d1:94:ad:b2:7f:60:35:8f:dd:90:a3:43:2e:26:8e:67:
35:62:f1:4b:31:65:02:91:52:66:df:2f:77:e1:9b:a6:58:dc:
49:33:be:33:98:9d:37:49:7c:42:ee:ca:45:7d:08:b9:03:c5:
56:ff:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:55 2026 by rpki-client