Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: zkDmRAQxzK6iTds7BaHIeNceG/x37BF4Bg4cxAq/Qcs=
Subject key identifier: BE:80:B8:3E:14:18:83:74:5E:B1:D5:66:37:4D:B9:15:EB:3E:97:94
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019EBDDA1B79884D702F2F4435BB5618BDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0A74
Signing time: Fri 12 Jun 2026 22:00:48 +0000
Manifest this update: Fri 12 Jun 2026 22:00:48 +0000
Manifest next update: Sat 13 Jun 2026 22:00:48 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: ay74BfM+UnFn594MZzqJoNgMOSqnk091+vuEkEpsixI=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:1b:79:88:4d:70:2f:2f:44:35:bb:56:18:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 12 22:00:48 2026 GMT
Not After : Jun 13 22:00:48 2026 GMT
Subject: CN=be80b83e141883745eb1d566374db915eb3e9794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:d4:f3:f0:59:cb:46:c3:6e:98:a5:0f:a1:
95:33:2b:d6:98:e0:4d:8c:f9:67:36:ce:8d:56:d7:
02:6c:5c:5b:75:62:58:68:29:f4:c0:61:2d:a2:aa:
b1:01:62:ed:16:8b:6d:94:d1:63:a3:2f:a3:9e:06:
12:cd:89:35:1d:79:c5:e6:ab:6d:21:d7:91:ad:f1:
fe:b1:26:03:d8:65:23:b3:e0:39:1e:a1:9e:1a:1e:
b7:e8:c8:c6:f3:b3:fb:e1:52:a6:2f:a7:4b:28:b4:
ad:bb:75:93:04:18:44:b1:18:2b:6f:63:5c:d1:39:
66:78:13:7f:8c:20:82:71:6e:bf:e6:8f:5b:6b:21:
c9:ff:1c:ee:c4:b5:90:a6:69:e4:48:7d:0a:08:e9:
db:8d:86:8a:84:6c:df:f6:17:41:e3:88:af:ff:f9:
7a:1e:c7:4e:8d:93:b7:c4:63:79:65:66:17:a2:09:
44:ff:e1:01:03:4a:89:40:b9:65:21:96:c3:c6:a2:
5a:20:81:32:0b:a1:1e:cf:bd:3a:53:14:b9:64:a7:
76:d2:3d:d6:b8:7c:2b:6d:5c:be:51:96:8b:b6:82:
c5:d1:70:fe:de:7e:f4:94:99:fe:17:27:ac:4a:86:
83:9b:b4:72:42:9e:ce:fb:50:3d:0c:c9:bf:e4:6a:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:B8:3E:14:18:83:74:5E:B1:D5:66:37:4D:B9:15:EB:3E:97:94
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:c6:1a:92:f5:02:a2:a4:0a:53:07:c7:b0:a6:56:4f:a4:
11:a2:95:a2:d6:71:9b:50:91:08:25:28:73:b2:50:95:3c:14:
04:0a:b3:1e:65:f3:92:49:f1:59:8f:21:89:44:79:52:6a:06:
bc:13:fe:f7:ac:bb:f8:c6:4b:fc:5e:2f:90:3a:5a:e3:68:f2:
84:dd:60:7d:b6:93:7e:c6:a1:de:65:46:93:93:c3:7d:1c:2b:
56:8e:d3:ca:2b:5d:53:fb:0c:71:0e:de:3a:c7:58:f7:78:43:
6c:8a:84:7b:63:02:a2:77:37:2c:28:18:4a:0f:90:4b:32:3f:
9d:1d:1c:54:9e:72:81:69:3b:31:ae:7e:69:bd:dd:14:75:d9:
5e:bd:c0:0a:cf:7a:bd:88:54:61:bc:f0:c3:f0:f2:0b:7c:9c:
2e:fc:37:ea:38:1c:0c:25:11:5f:dd:2c:2e:24:32:eb:66:f9:
c6:06:c6:ff:12:59:79:bd:8e:83:8f:3a:50:67:42:9a:b4:c1:
85:0f:92:fd:2b:21:5c:b2:57:85:bf:53:d7:e6:be:fa:50:71:
ac:27:ba:1e:5a:26:ea:f5:23:13:9e:78:93:d6:f4:13:74:d2:
ba:b7:62:e1:ed:d1:a7:fb:65:bc:65:65:f5:1d:dd:80:62:20:
84:5d:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:42:52 2026 by rpki-client