Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: sNmzg+nDA5Ntm0eFKAOdnt7CGflR0FnAtIEXcsG9Gu8=
Subject key identifier: DD:71:47:40:FD:1F:EE:74:0A:3E:FD:FB:EC:5F:BF:EC:C9:37:F1:42
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019EBEEC51935E97DD387B7998C7975B0E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 03:00:18 +0000
Manifest this update: Sat 13 Jun 2026 03:00:18 +0000
Manifest next update: Sun 14 Jun 2026 03:00:18 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: lFOYm11NgtHnijWLbreryfbNQ9nUMhFxc6LDbOf/+/Y=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:51:93:5e:97:dd:38:7b:79:98:c7:97:5b:0e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jun 13 03:00:18 2026 GMT
Not After : Jun 14 03:00:18 2026 GMT
Subject: CN=dd714740fd1fee740a3efdfbec5fbfecc937f142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:d9:f4:49:b2:c9:37:8a:87:b1:82:d5:fb:
0f:ad:93:41:f2:ac:30:a0:52:81:70:28:87:0a:58:
d6:1f:e2:9a:30:e1:4c:68:3b:6a:84:3c:ba:af:74:
33:3c:32:ad:6c:50:04:a8:8a:b5:77:42:72:8c:d9:
8e:32:a9:ef:d2:a1:d0:c0:d4:19:c9:cf:e8:89:90:
2f:ef:21:51:74:a1:3c:87:53:9d:34:2f:02:de:3c:
82:fe:55:75:e9:42:9e:a9:55:b9:16:58:fb:ff:e1:
34:6f:3f:af:13:64:71:60:05:0c:f4:93:8d:46:58:
27:f3:91:42:54:89:fd:8f:16:95:b6:95:9a:3c:90:
b3:39:ad:08:66:d0:b8:de:d2:17:f2:21:44:1e:73:
d9:b0:56:c2:19:24:ca:e5:35:02:39:d6:8a:9e:59:
0e:e7:96:7e:35:65:01:bc:73:8b:7a:c0:c3:97:f4:
b5:b5:3a:e8:35:65:82:7a:26:8a:42:f6:86:c7:12:
f3:1a:13:27:d0:a7:52:91:5c:31:36:2d:7c:32:90:
fe:30:04:59:e6:f1:3a:0e:c3:20:1d:cf:92:24:14:
cc:54:9e:eb:52:ab:6c:37:c2:ca:d0:29:32:24:e0:
39:45:db:bd:81:85:39:29:1d:49:f4:10:9f:c4:f5:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:47:40:FD:1F:EE:74:0A:3E:FD:FB:EC:5F:BF:EC:C9:37:F1:42
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:71:e8:cf:df:01:7e:67:d8:91:07:27:72:23:f4:9f:09:
36:59:ba:d8:46:02:dc:3d:2a:a8:58:dc:55:29:03:ad:3b:6b:
48:0b:8c:5d:07:05:27:a8:e2:22:fa:a9:fd:f0:e6:18:5e:c8:
66:1a:74:5c:08:cc:4c:c1:64:5f:ed:04:37:58:21:09:ea:8f:
37:4d:97:4a:17:7e:50:90:c5:53:92:6b:9e:ac:f8:71:df:61:
4d:c3:5d:7f:a5:29:b2:de:8f:fc:93:65:1d:f3:52:41:6a:f5:
02:cd:85:45:b0:84:ae:b6:cc:01:60:a2:c3:8b:37:c7:e8:23:
0e:fa:64:1c:e9:6b:8b:7d:e7:29:31:45:ae:7c:4c:57:fa:5c:
ac:e6:ca:85:22:8b:d3:ec:72:34:ed:23:7c:42:92:52:b3:2b:
06:10:e2:97:c7:1a:ca:da:0e:6e:62:9d:2d:4d:6c:e4:d5:1e:
db:83:fd:5c:12:4f:59:4e:1b:e7:22:8b:86:0c:c6:e0:37:2e:
04:ee:d8:94:63:fe:00:8a:4d:67:eb:fb:26:50:1f:97:85:6b:
83:63:dc:4c:02:c9:53:6a:68:df:d3:9f:37:f5:54:81:f2:49:
03:93:c1:44:d5:93:56:46:5c:2f:02:20:9b:78:82:0a:86:e7:
34:a8:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:55 2026 by rpki-client