Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: ei0JJ5D0VU+iufPxD8zayygN5hJgSeBocw6p4czgBMs=
Subject key identifier: 44:22:7E:F1:16:A9:42:7D:16:F6:7D:25:50:28:B2:DE:57:50:14:4E
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019EC0DBB458F818FA3360E007D5A270162A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 12:01:24 +0000
Manifest this update: Sat 13 Jun 2026 12:01:24 +0000
Manifest next update: Sun 14 Jun 2026 12:01:24 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: 2Gq47zHZyEZOHGzHsvrpfILL0RaZrfhS2idTP1/kr5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:b4:58:f8:18:fa:33:60:e0:07:d5:a2:70:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jun 13 12:01:24 2026 GMT
Not After : Jun 14 12:01:24 2026 GMT
Subject: CN=44227ef116a9427d16f67d255028b2de5750144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:0a:ef:ad:d4:1e:97:e0:e7:c2:07:15:3f:
8b:65:f0:4b:d8:02:43:3b:17:46:66:0b:5c:ee:05:
da:b5:b1:e5:e3:21:4a:48:82:76:02:58:c9:f2:a1:
e3:e3:27:f8:e2:03:1d:21:f4:26:92:8d:0a:09:35:
5e:94:6c:d8:19:57:82:d6:94:dd:a9:a2:ae:28:8a:
b5:b3:1a:fc:aa:b9:5a:6f:bc:e9:72:91:f2:e1:02:
87:41:50:ce:04:7a:60:cc:90:08:2b:c5:e5:41:70:
14:c1:de:e8:d1:85:1f:90:d9:73:5a:47:39:c1:87:
a7:78:f0:1c:77:cd:99:dd:40:e8:40:dc:60:38:05:
c8:64:6c:40:dd:2f:fc:92:17:5b:7c:4e:89:bb:b2:
10:fa:4b:a4:09:8c:96:f0:1b:eb:26:b3:27:4c:e4:
30:61:73:fd:4b:da:32:ef:3f:10:78:97:39:4a:3d:
c5:54:e4:24:cf:3d:48:c3:2d:a2:ea:c6:58:bb:fe:
c5:a9:97:00:84:0c:87:d1:8c:71:ea:6a:45:45:a8:
11:06:8e:6b:31:5d:d8:63:1c:c7:23:4f:7c:cc:8e:
b7:46:27:77:0b:45:a9:4f:c6:3f:3e:23:ba:87:db:
22:31:3e:ef:cf:56:a1:61:91:22:28:9c:0b:2b:6b:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:7E:F1:16:A9:42:7D:16:F6:7D:25:50:28:B2:DE:57:50:14:4E
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:e8:6d:ab:31:96:a9:a5:a4:04:7d:6b:65:53:52:dc:e8:
21:0f:b0:e3:30:78:77:d8:9c:74:01:6b:01:4e:72:73:ee:06:
1f:87:e5:bb:67:29:25:c2:84:15:26:a3:d1:07:61:c8:02:5e:
69:be:ee:cb:de:cf:e3:32:28:53:cf:94:88:2b:35:1c:e3:ed:
ef:dd:ca:a8:2e:91:64:83:98:a5:f0:87:44:99:5b:ba:9d:e6:
e8:ec:85:d7:e5:20:4a:96:bb:ec:80:78:32:e3:0d:c7:74:46:
6a:b9:68:19:cd:14:b7:cb:cf:3b:66:17:7a:fa:ac:e0:a8:fa:
e3:ee:cc:67:ea:b3:bc:47:f6:ac:d9:77:0a:af:dc:7c:80:06:
37:6a:9e:c7:e0:3d:3e:6e:15:7b:12:14:5f:5c:45:d9:89:5f:
e4:6c:4a:85:7c:70:b8:97:4e:08:a9:a6:cb:2f:14:0c:e1:1a:
38:f4:88:98:60:24:ab:38:2c:4b:85:48:24:e8:f9:67:a2:66:
52:c8:b3:2b:6d:75:12:6d:23:64:44:ca:e3:57:c5:74:d0:04:
7f:07:8a:ee:90:2b:8c:e8:c7:2d:6a:7e:c1:df:2f:fa:7a:7c:
ef:3c:7f:e8:a9:a2:63:4c:b5:c1:2a:22:ad:11:6d:7f:39:ee:
6e:5c:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:59 2026 by rpki-client