Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: foLc0zqlG/H22uVh21642VXPfs8zSpSuGzVNbGzZjAg=
Subject key identifier: 98:E1:E4:D1:BA:DD:1F:27:19:F9:BF:76:46:E0:85:5D:F3:57:51:0A
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019EC224B8BE0F08DB316B0D47E60A5A7926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 18:00:46 +0000
Manifest this update: Sat 13 Jun 2026 18:00:46 +0000
Manifest next update: Sun 14 Jun 2026 18:00:46 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: nkcdNC0E8f2HDnvYPAKEIUikY5CRyvXv//7MFPQSHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b8:be:0f:08:db:31:6b:0d:47:e6:0a:5a:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jun 13 18:00:46 2026 GMT
Not After : Jun 14 18:00:46 2026 GMT
Subject: CN=98e1e4d1badd1f2719f9bf7646e0855df357510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:f1:9d:5b:06:8b:37:74:86:9b:78:3e:ce:
5d:bf:1c:a3:53:fa:89:2e:2f:8b:5f:ef:70:40:5b:
41:87:09:82:32:9d:cf:e7:3a:2a:5d:9f:9a:33:4e:
3f:15:39:a9:bd:09:0e:21:70:02:ca:db:e1:f6:4a:
f8:e4:c0:a6:6c:b4:46:16:6b:83:fb:a3:61:0f:ee:
df:58:e8:0f:bf:b7:47:1b:0b:25:47:ae:91:24:a2:
de:5d:bd:07:02:be:ee:25:5d:69:10:53:2c:c3:31:
6d:5c:51:5c:ff:e3:bc:3e:bd:ab:f7:02:ce:88:c2:
07:6e:6c:a8:c3:2e:b0:3f:62:2a:f3:cc:57:42:d2:
21:cd:77:3a:9a:c1:2b:97:e2:bb:17:91:d5:37:8d:
9c:f8:1f:82:52:02:d7:1d:d7:74:42:b7:70:78:8d:
d6:62:f7:3a:f3:1e:5f:5d:d1:2c:61:8c:f2:d4:69:
a2:88:04:b1:bb:a5:c5:e8:9d:99:90:cd:e7:8a:3a:
ac:b6:f2:fc:49:6c:76:70:96:2d:4d:80:f6:55:7e:
1e:8a:90:31:e9:0a:d2:f2:15:60:e9:ee:e4:36:c1:
e1:78:42:a3:7d:d8:47:ba:08:0f:2b:c9:0e:4a:49:
9f:56:3e:3c:48:79:1a:71:e4:9d:dc:d0:90:8f:da:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:E4:D1:BA:DD:1F:27:19:F9:BF:76:46:E0:85:5D:F3:57:51:0A
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f0:e0:5c:25:71:f5:02:bc:8c:6c:91:ba:15:ba:55:05:2b:
8c:89:1b:bf:98:0e:e0:9c:30:eb:e5:7f:7f:38:42:89:4c:94:
d3:b5:8d:65:ba:3e:0c:61:1a:88:e2:69:e2:b0:f8:6b:58:0f:
53:62:15:19:3c:b4:59:9c:52:58:e4:ca:b2:af:13:0e:39:93:
d1:5a:f9:75:51:ba:b7:bb:fe:83:d2:81:a2:7b:cd:47:86:4b:
14:71:e6:b9:da:71:0a:5a:26:8c:46:18:05:e8:60:11:e4:37:
15:ce:60:e9:36:7b:c2:50:22:30:b9:f3:85:7d:57:f3:30:06:
be:68:0b:a9:eb:4b:a8:51:36:77:c6:35:d2:fc:4d:3a:e2:bb:
17:7c:ea:3f:61:6d:6b:28:05:1c:80:ec:a4:6f:ed:c1:29:52:
c6:57:00:96:3f:5f:77:bf:33:90:0f:1b:de:6a:3e:04:d6:57:
d3:28:ad:6f:ff:d6:1f:4c:ec:26:32:ef:a2:16:e8:14:c7:13:
d1:23:f7:2a:33:1c:bb:77:55:ce:97:60:21:98:4c:88:9b:9d:
48:26:bb:3e:23:5f:d1:71:8f:45:81:84:fd:fb:b5:ea:51:f6:
6d:80:0e:89:9d:68:58:f1:bc:bd:de:58:a7:72:e5:c1:9f:93:
f6:24:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:43 2026 by rpki-client