Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: zRvEZzjzYHkD4M6n9bl5Y1lZ+iSmjkVgLu9bUVXQ9dM=
Subject key identifier: E1:6E:F8:9B:2E:13:8B:43:0C:0F:06:66:BA:6D:3E:B2:A5:63:C9:73
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019EE744763A90FB5307569A4F3E23857804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0DAD
Signing time: Sat 20 Jun 2026 23:01:24 +0000
Manifest this update: Sat 20 Jun 2026 23:01:24 +0000
Manifest next update: Sun 21 Jun 2026 23:01:24 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: JRy4pNQuvf7RwMS2WMd7Cebs76R3GijFO0e8wtyrpfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:44:76:3a:90:fb:53:07:56:9a:4f:3e:23:85:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Jun 20 23:01:24 2026 GMT
Not After : Jun 21 23:01:24 2026 GMT
Subject: CN=e16ef89b2e138b430c0f0666ba6d3eb2a563c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:95:62:77:78:e8:99:5a:dc:4b:f1:84:bb:
72:50:35:34:2a:f5:eb:35:5f:da:58:79:0c:b6:32:
f9:eb:2c:5b:dd:4f:98:a9:01:40:ba:d0:fa:4e:1d:
45:b7:e3:81:f3:35:1d:3c:14:f9:ec:79:21:b1:3b:
81:0a:d1:90:7a:26:0e:c6:8a:85:44:9f:ea:88:12:
56:67:17:8a:8f:de:35:33:7a:db:32:85:56:e2:ed:
d3:69:60:7d:1b:1d:12:0d:cb:46:6a:f8:fa:19:b4:
a0:ba:a4:9a:54:3d:76:d4:b6:39:64:f7:e3:39:26:
51:4f:c9:6f:87:5b:2e:78:76:82:3b:fd:2d:e5:fa:
01:29:5b:17:f7:77:18:29:7d:62:fa:26:27:60:c1:
c7:c7:1f:5b:72:62:c2:70:c6:80:83:51:ed:1d:c2:
95:b1:29:05:34:a9:71:ec:aa:c4:d6:3e:72:1b:5b:
5a:33:41:14:e0:42:3f:25:d9:64:c7:e4:a2:e9:db:
74:05:fe:71:be:60:37:a1:92:42:6a:da:2d:a4:e1:
d9:46:dc:e3:77:dd:ae:60:f8:4c:0b:e4:ac:34:b9:
48:44:23:2a:0d:3f:c9:4f:46:0f:dd:46:35:2a:16:
bd:c5:88:00:df:70:d9:5d:ea:01:18:56:e1:74:9c:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:F8:9B:2E:13:8B:43:0C:0F:06:66:BA:6D:3E:B2:A5:63:C9:73
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:ad:b5:8b:fb:03:a7:4d:f1:0d:72:90:3a:13:63:13:c7:
d8:d4:20:f0:b3:c4:01:b5:28:f4:dd:81:07:d4:b9:dc:91:0d:
05:31:d2:e6:fb:14:f8:a9:e8:29:89:f3:68:b7:18:60:20:cd:
1d:5f:fb:b5:39:8e:1e:e7:9a:75:b6:19:22:25:52:df:1b:ae:
c6:07:f6:f1:e1:50:b9:8e:21:2d:8f:ee:f9:ab:71:95:01:ff:
0b:05:c5:cd:f7:5d:cb:23:d0:16:37:72:eb:5d:3e:26:15:d1:
7a:df:cd:3b:51:bb:7b:8e:11:2c:c3:d5:9f:f2:ce:b6:0f:04:
05:30:8b:e6:9f:b7:ab:1b:04:52:9a:7e:c8:49:86:25:b2:95:
d5:dd:5a:27:22:43:2a:95:10:59:e1:ca:47:8c:8c:a9:d8:54:
70:de:7a:7f:d5:c7:d7:e0:63:01:60:3b:dc:76:8a:5d:c4:bc:
db:73:fd:e8:26:ef:4b:5c:2a:83:96:b3:41:cb:19:9e:1f:fc:
06:5f:a4:29:87:d7:cb:49:86:49:f4:47:03:e8:09:d2:70:ee:
70:a3:fa:c2:c0:f5:50:5f:1c:10:9c:f8:88:e9:55:34:e3:d9:
ec:4d:d5:06:2e:4c:42:c2:11:8d:79:09:10:98:47:86:de:4f:
ec:c2:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:24:37 2026 by rpki-client