Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: 7VI/+ZBsCJmQH6WsTnW7TqZk6VSMNoaOwO7aP8+e3hA=
Subject key identifier: 66:EC:60:DA:6A:9B:B8:C9:0C:09:C4:98:CA:5D:6B:BF:66:AA:52:39
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019EC18035F827B085168B4084CA5FD0FDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0E66
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: YuC/Hyf/a07a4xxbbSngbL+f4F2WR7VNAeFhD7d2A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:35:f8:27:b0:85:16:8b:40:84:ca:5f:d0:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=66ec60da6a9bb8c90c09c498ca5d6bbf66aa5239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:ac:d7:ff:9c:1c:6c:71:3b:63:7a:25:0b:
86:17:f2:06:f3:60:a1:0b:a3:e9:57:55:33:22:a9:
a4:46:2b:de:a5:1b:a4:1f:da:67:c2:81:c3:c3:05:
ca:57:28:6e:fa:f7:f3:36:2a:60:f9:f7:bd:89:a0:
b3:c3:7b:d8:b5:4b:84:e1:23:b1:81:63:10:6a:9a:
c1:0d:f1:cd:9b:49:c4:f6:92:bf:60:0c:ad:41:21:
87:18:75:2e:ce:2f:eb:db:52:07:df:ed:cd:70:20:
07:72:f0:be:34:62:09:b1:a1:e3:7b:24:d7:05:c7:
0d:85:8d:be:0e:35:a0:5e:3e:d2:ae:64:73:b2:27:
54:0e:a6:c6:5b:8a:a8:df:5e:d9:77:99:12:4e:97:
50:7e:bc:32:6b:3e:e3:15:92:4c:9d:3b:f9:c1:58:
8f:85:e2:d8:7d:60:12:50:98:60:af:4e:6c:63:2b:
76:db:e2:c3:00:d3:7d:ce:9c:94:d8:8a:0c:56:33:
53:84:f5:c8:c6:27:5c:27:b4:bf:ee:8c:ed:bf:59:
5e:84:8f:95:f4:81:ca:46:93:c8:22:a8:f3:3f:3a:
e1:c5:9e:99:7d:c4:f5:4e:53:4e:73:2d:26:33:9b:
e7:f9:c3:16:c2:eb:ef:cb:6e:4f:e5:d2:71:5e:66:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:60:DA:6A:9B:B8:C9:0C:09:C4:98:CA:5D:6B:BF:66:AA:52:39
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:54:8f:69:da:37:16:ea:df:5b:79:11:69:bf:a7:4f:3e:53:
00:c6:e2:9f:31:76:a2:02:fa:6f:f7:34:bc:98:10:c1:3f:8c:
d1:06:fa:bc:4d:35:20:de:a0:a3:17:55:0b:7e:3d:c3:bd:50:
6a:21:de:82:9e:df:1f:e5:ca:dc:ff:0c:95:00:ed:61:23:85:
e8:5b:f0:45:f2:d0:70:e5:1d:b6:93:f9:07:17:4b:90:2a:95:
88:61:f2:29:02:5e:03:69:e7:c6:3f:55:3c:72:0b:21:d0:d7:
51:a0:15:a1:a7:df:be:5e:ea:26:b4:73:45:06:aa:58:f6:f8:
f3:3c:ba:36:ac:0a:0f:ab:8a:6c:bd:7a:b2:e8:19:c5:fd:c9:
34:7f:3e:28:cf:e9:93:7a:84:ab:57:da:9a:93:9f:62:2e:45:
e4:58:1e:66:28:f9:ee:a3:e6:d2:c3:7c:5a:56:b5:c0:bf:a4:
a3:6b:ce:40:34:7a:60:89:47:91:30:4a:20:12:b3:4e:7e:87:
ed:fb:bd:6a:db:3a:28:c9:a2:6d:4e:af:59:94:1c:b1:e8:6a:
54:c4:bc:2d:29:71:e6:0d:26:f6:06:90:7c:bb:88:fa:42:bd:
81:3c:92:92:d2:57:6c:ae:e6:f6:ba:37:04:b6:08:a5:5b:2b:
d2:74:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:48 2026 by rpki-client