Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: 1lL+TUFlQRPi6KJTDKbjJygaDF96S1yIXGKFh8XPtto=
Subject key identifier: D8:8F:FE:EB:E5:C5:EE:35:D0:CD:C7:71:A5:EE:9B:21:5D:AF:B9:02
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019EBEB653CAEBF15399A947FECBC53D0830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 0640
Signing time: Sat 13 Jun 2026 02:01:20 +0000
Manifest this update: Sat 13 Jun 2026 02:01:20 +0000
Manifest next update: Sun 14 Jun 2026 02:01:20 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: mBqP0tF1A+jdGIFaxVKhmPHI0Ld9cM6EJLe+yIUVLq8=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:53:ca:eb:f1:53:99:a9:47:fe:cb:c5:3d:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Jun 13 02:01:20 2026 GMT
Not After : Jun 14 02:01:20 2026 GMT
Subject: CN=d88ffeebe5c5ee35d0cdc771a5ee9b215dafb902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:ba:98:70:76:6e:a9:71:a5:d4:c4:c3:d3:
bc:90:3c:e8:b5:2e:98:9a:a5:d2:28:cd:62:60:70:
03:aa:9d:24:c3:74:2a:6b:59:06:d1:45:6c:64:94:
b6:7c:b9:ba:08:5a:f6:78:30:91:76:c4:33:52:32:
fc:ba:b8:22:d7:7b:7e:36:f2:6a:7d:13:51:c1:d5:
36:18:ec:bc:52:2c:37:f9:18:06:42:0e:a2:08:5c:
93:43:c9:a0:9d:c7:39:1b:79:e0:2c:4c:a6:b5:5c:
82:6e:59:88:fd:e8:13:6e:56:35:74:86:49:5f:29:
c4:c8:3f:d8:fe:ab:87:67:ae:b9:93:8a:55:8c:c1:
07:89:3f:c9:8f:81:55:30:f8:af:1a:fd:e4:2b:0f:
e7:3d:a9:46:d8:fb:e9:37:a9:24:39:b1:12:96:20:
05:9e:45:6a:b7:65:e1:4a:0b:12:1d:c8:55:41:13:
02:41:45:ec:a9:3c:de:72:84:96:25:e2:97:2a:c5:
e9:3d:7c:eb:c7:c5:ba:25:8b:c4:36:e0:cd:d3:55:
2e:91:e1:a8:fe:48:99:a4:ea:9a:83:72:c9:83:26:
a3:8b:8c:83:f1:ac:81:d2:07:52:55:14:b3:51:0e:
86:62:e0:d3:86:e8:37:6f:2d:75:0e:95:49:01:88:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:FE:EB:E5:C5:EE:35:D0:CD:C7:71:A5:EE:9B:21:5D:AF:B9:02
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:e8:9d:9c:70:67:72:84:f7:e4:22:b7:18:40:65:d0:fa:
26:2f:0c:75:0d:1c:0e:1a:72:49:8a:d2:9b:6c:17:08:43:20:
01:d0:53:98:f5:04:36:8b:dc:2c:d2:2d:ba:5c:99:bb:22:5c:
ed:81:0c:34:7c:d3:50:26:e8:75:3c:ff:4f:28:64:2a:95:34:
50:7b:28:f0:f8:70:32:6b:08:56:88:d7:63:6e:01:b7:d4:ad:
69:76:5a:c0:16:fa:55:c3:6f:0f:8b:a6:9d:75:2b:38:20:7b:
78:ac:ef:81:e2:7b:3b:48:4d:76:69:49:0b:a4:76:85:b3:94:
fb:03:30:ea:a9:8e:f8:82:5b:51:33:e9:bb:b1:a8:a4:07:3f:
9f:96:97:3d:76:d4:db:fc:4c:3a:75:66:38:d0:cf:de:51:24:
c4:93:ae:b4:79:4e:51:e5:0c:3d:ed:3d:be:84:6c:4e:a3:1d:
7c:75:f2:14:56:3f:f6:8f:2d:6f:d9:e8:35:72:26:45:a7:63:
c7:f2:59:39:41:d2:98:d9:ed:34:01:67:02:5a:83:cc:39:3c:
cd:43:ad:88:d0:ff:dd:9c:6c:ef:0d:0a:a1:c9:45:9d:d5:67:
35:b0:d7:bf:15:de:98:47:09:19:6f:bd:e0:c1:7d:72:46:83:
8a:7b:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:54 2026 by rpki-client