Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: B3Wq/VPezg1iTD4qSZFOl6vPDlSTS0dbeCcdA+S2aSY=
Subject key identifier: F7:8C:54:CE:23:07:FA:F1:66:A4:D4:39:69:CD:63:ED:48:34:18:0F
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019EC44AA5A05104BE351689704C027B59BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0908
Signing time: Sun 14 Jun 2026 04:01:26 +0000
Manifest this update: Sun 14 Jun 2026 04:01:26 +0000
Manifest next update: Mon 15 Jun 2026 04:01:26 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: 2RoSvaINVX6AP8OHqDZT9jwCTq4Sm3LrcEb3SZ+MW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:a5:a0:51:04:be:35:16:89:70:4c:02:7b:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Jun 14 04:01:26 2026 GMT
Not After : Jun 15 04:01:26 2026 GMT
Subject: CN=f78c54ce2307faf166a4d43969cd63ed4834180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:6a:51:79:37:36:bc:28:d8:66:27:a6:95:
35:b2:c9:b3:40:9c:9b:e2:5d:95:1d:c6:d8:5e:c7:
1c:29:92:f3:bb:36:b2:5f:f1:49:a4:6b:a1:9e:c8:
05:ad:e0:2f:5c:5b:77:88:4a:3b:c4:19:8f:09:c9:
a3:4a:e1:dc:11:eb:37:79:8d:66:09:4e:1f:62:a4:
49:10:b8:83:89:ad:3f:47:fa:ec:3e:a5:2d:1d:fc:
5f:f0:7d:4b:9e:10:56:ae:0f:cf:a4:63:9d:bc:a4:
59:ec:5e:c6:15:7b:4e:1f:60:26:c2:b0:a8:2a:62:
78:78:d7:57:57:f0:a7:6f:43:4c:b6:98:ca:6b:8e:
b4:78:9f:b5:2b:79:b9:06:bd:9a:cf:b7:9a:f4:5e:
35:7e:4d:96:b8:1d:2f:22:41:a1:b0:a6:5e:c0:b7:
03:03:01:12:de:e9:d8:0e:cd:64:cc:18:f0:6b:5a:
79:3c:85:55:85:02:22:19:cc:ce:5a:56:51:cd:c0:
d8:e6:d0:75:33:f2:47:1d:22:1e:90:bf:11:23:e3:
9a:d1:d2:22:d2:ee:f2:60:eb:61:b5:72:05:94:8e:
98:bc:fc:d0:9e:4b:45:0e:b1:4f:1c:80:41:40:97:
eb:db:ff:2f:f5:24:de:e2:7c:24:e0:bd:cd:c6:42:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:54:CE:23:07:FA:F1:66:A4:D4:39:69:CD:63:ED:48:34:18:0F
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:00:31:81:34:92:7b:ad:ca:1d:69:7e:cc:c3:58:91:34:ab:
7f:23:77:cd:83:e4:cc:66:ea:23:73:28:78:66:bf:57:1b:6f:
4d:86:34:b5:f9:8d:5d:0f:e3:e8:8e:8a:9d:47:be:a5:c1:ae:
d9:a3:1a:8b:7f:a9:15:ba:5d:e7:f9:f0:14:d6:ae:df:5f:fa:
32:4d:93:47:35:40:0b:c5:0b:31:51:1e:6b:fd:5f:90:76:9c:
33:b1:a4:8e:4e:6a:b0:74:0b:c6:69:78:6c:6d:ce:b4:21:b1:
0f:81:f5:fc:db:65:11:bb:b5:3f:f6:48:59:6d:9e:43:3a:06:
4d:74:09:15:14:c3:7d:72:6f:08:42:31:92:24:56:5e:8c:84:
15:8c:0e:af:5a:b7:99:6f:59:e8:5e:88:9c:24:32:9f:f2:1a:
4e:d3:ab:17:9f:69:6e:62:ce:8e:64:4f:c7:1d:db:84:59:9e:
28:c3:00:42:cf:f7:f1:8c:5d:55:93:ed:f4:9a:10:41:ed:4a:
4d:2d:6a:15:0d:27:c6:45:45:d1:10:42:7e:0d:6f:ac:61:1d:
e2:c0:0a:90:20:88:b6:f4:c4:60:fd:c3:0d:73:8a:1a:1b:ef:
33:98:d8:07:52:94:cf:02:c6:47:20:63:06:18:3b:90:9e:5f:
88:84:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:23 2026 by rpki-client