Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: qlJdgHQiB2BDYKZoWpHLkJ8BWoyyo2+KodtVDutYqSg=
Subject key identifier: 25:23:C8:1E:5C:6F:56:2E:09:EC:70:14:09:1C:EC:58:7B:16:FC:56
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019EC300AC704D113F070A003DF2B9F64A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1648
Signing time: Sat 13 Jun 2026 22:01:01 +0000
Manifest this update: Sat 13 Jun 2026 22:01:01 +0000
Manifest next update: Sun 14 Jun 2026 22:01:01 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: Hq6ZNzNJLMtdgved8GJ2mP26D/OM4LISA9lmemUrFt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:ac:70:4d:11:3f:07:0a:00:3d:f2:b9:f6:4a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jun 13 22:01:01 2026 GMT
Not After : Jun 14 22:01:01 2026 GMT
Subject: CN=2523c81e5c6f562e09ec7014091cec587b16fc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:35:d1:41:32:cb:d2:5e:79:b5:12:f1:62:
02:6a:0b:f3:d6:51:d4:46:3c:b3:34:cd:07:79:d6:
df:d0:36:21:de:cb:a9:7d:9b:e1:1a:a8:7f:04:60:
01:39:49:ea:c8:e9:ba:86:23:71:e4:af:2c:2c:05:
a9:dd:85:aa:86:09:eb:7f:98:82:39:bd:3c:51:2b:
0c:60:15:33:57:20:5b:30:5b:16:3a:d5:ac:58:d4:
7d:41:a2:c2:33:5d:61:56:a2:35:24:ee:80:5a:03:
0c:a8:30:e9:56:98:aa:ba:8b:25:f7:7a:54:90:62:
20:29:f5:62:55:96:65:a2:cd:8c:03:04:de:54:ac:
cd:69:e1:98:85:12:b3:f0:81:6c:ac:d5:60:e1:ab:
aa:0e:d4:f8:b6:9e:68:7e:73:5f:49:4a:78:32:4a:
69:35:9c:80:9d:53:b0:76:46:f8:05:06:12:01:f8:
d9:a7:33:1b:d7:11:39:5b:ae:4a:e1:e3:ff:18:56:
7e:e1:24:35:4c:d8:40:39:d0:e0:92:ba:80:49:32:
44:b8:b1:1e:58:8e:3b:26:56:46:7e:ce:64:52:19:
cc:24:7b:f8:89:fc:ca:f1:5f:24:bd:ad:8a:c6:2f:
3c:3f:af:e5:df:2a:36:93:92:c8:6b:05:11:54:43:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:C8:1E:5C:6F:56:2E:09:EC:70:14:09:1C:EC:58:7B:16:FC:56
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fa:bd:44:ff:b7:12:8f:c5:bf:21:7b:ee:38:56:ea:2b:c1:
ee:27:cb:99:3a:e1:18:47:30:0f:62:15:4e:93:a2:75:fe:a8:
82:e1:f0:0b:e9:bf:b3:30:0a:64:4e:d3:48:32:65:63:d1:1f:
47:9e:c6:67:c4:bf:0c:56:dc:e3:ae:dc:39:48:64:30:b2:8c:
75:6e:8e:0a:bc:bb:70:f9:5c:ba:ce:91:ea:95:87:18:69:fa:
67:e6:23:f5:29:da:13:06:1e:84:af:02:96:91:5c:c9:dc:5e:
5a:e9:53:a9:05:5c:10:cd:f5:d3:eb:99:8d:c4:d6:c7:41:be:
c2:f0:11:b7:85:cb:c0:31:36:ab:0f:3e:4d:4c:e5:44:71:cc:
1f:14:e0:ca:71:e3:db:18:00:e2:1c:18:91:95:b4:97:8f:ea:
42:69:8f:51:f4:ae:89:14:37:e1:02:11:d3:74:dd:2d:c8:bc:
36:d6:13:7f:ec:90:e5:bf:c6:a8:04:98:d8:87:aa:74:18:6b:
0e:c3:7c:ea:d3:af:86:41:47:db:53:b8:d9:c0:ff:d2:5a:19:
e4:8c:91:20:14:69:f8:14:95:b6:63:d6:f4:bd:60:98:9b:34:
6e:cb:7f:fb:3a:bc:c8:f0:94:ae:72:aa:93:20:84:77:c5:e7:
fc:26:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:16 2026 by rpki-client