Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: urhfhAfwcXFvNN6PlGoJsRkSVcFeWVwEzMfoyN4HJWc=
Subject key identifier: A1:D1:4F:0C:34:61:DA:16:E0:D5:B9:1D:B3:43:E3:58:3C:2E:0C:99
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019EC3374D6E05BF5FB30A91C789E4C53E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0973
Signing time: Sat 13 Jun 2026 23:00:41 +0000
Manifest this update: Sat 13 Jun 2026 23:00:41 +0000
Manifest next update: Sun 14 Jun 2026 23:00:41 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: MyzleANg3dZVmsPP4q4qf97dpylxuKyc8p6FcJ7Y26U=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:4d:6e:05:bf:5f:b3:0a:91:c7:89:e4:c5:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Jun 13 23:00:41 2026 GMT
Not After : Jun 14 23:00:41 2026 GMT
Subject: CN=a1d14f0c3461da16e0d5b91db343e3583c2e0c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:ea:61:5a:37:13:4a:26:15:e4:33:0b:b8:
3a:cc:63:c0:91:0a:3b:d3:0c:57:b7:02:2a:b5:0f:
28:13:15:ef:bc:12:6b:43:55:59:28:28:f6:54:22:
5f:14:8b:87:0d:cd:20:e7:fc:fa:df:b5:05:5c:ad:
66:1b:2b:59:ab:89:d1:21:e5:28:63:eb:ab:42:5e:
a3:42:63:03:c7:57:4a:c4:41:91:20:bd:ee:bf:d0:
93:17:7c:d9:67:77:fd:cf:33:27:e4:9a:1c:5c:89:
57:b8:9c:3d:2e:50:3c:db:df:cd:b8:91:51:4c:e2:
16:fa:33:a2:53:5e:a2:8b:27:d6:6a:2f:7f:83:23:
9f:22:d9:0a:0c:7b:e7:9b:45:db:ce:4e:7c:3c:a1:
96:10:50:d4:da:ad:de:e5:c2:fa:75:aa:4e:92:4c:
7a:77:e3:ad:f1:38:6b:e1:d4:a7:f5:9a:93:4b:2b:
52:c9:64:df:88:f2:d5:92:35:01:53:ed:13:18:b5:
36:e8:4e:c2:3c:d0:ce:a0:92:7d:f5:ed:5c:9c:5c:
64:60:42:97:ba:8a:ff:b7:08:13:de:e1:9d:71:a9:
73:a2:8e:dd:95:9a:26:16:4b:b3:8a:14:40:ee:d8:
ed:d5:9c:c2:08:0b:3d:ca:85:59:18:a2:87:56:20:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:4F:0C:34:61:DA:16:E0:D5:B9:1D:B3:43:E3:58:3C:2E:0C:99
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d5:48:c9:40:2d:6d:11:61:83:e2:35:61:03:51:38:8e:63:
a3:57:05:13:a1:a9:4b:d9:c1:cc:9e:6f:37:3e:9c:2f:72:da:
8c:cd:86:1e:3c:b9:6e:70:d1:51:6f:b4:d9:60:59:44:fe:36:
8c:39:1b:40:61:c2:da:4d:4f:5a:2b:83:01:8c:43:1d:a2:b2:
bd:df:68:56:10:90:90:cc:58:00:7c:c4:59:09:74:ee:cd:c7:
c6:a1:34:71:5c:c2:f3:4f:97:8b:5c:12:04:d6:3a:c6:bb:3d:
bc:3c:f8:c3:09:50:a3:1f:f0:d0:28:dc:3d:ed:20:db:81:9d:
5b:c7:3d:b6:c1:da:f2:f2:e2:0b:94:5e:4b:4b:aa:00:b5:76:
a8:76:56:aa:9e:e3:73:df:47:81:08:1d:c8:c6:52:36:03:fb:
47:bb:5e:a9:f1:8b:b6:2f:94:df:ac:23:cd:69:b7:9a:2d:8e:
78:6b:fe:e8:06:25:8a:60:0a:96:01:b8:01:18:95:1f:4e:3f:
1e:95:29:39:49:ee:83:c3:e9:b6:9d:75:d2:69:2e:54:d0:b5:
ec:85:61:8a:44:13:61:28:0e:af:d1:16:1c:f0:7e:6c:12:17:
f2:e0:85:85:6d:45:7b:da:49:df:96:5c:04:5f:94:01:0a:d3:
d9:2e:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:34 2026 by rpki-client