Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: RlSofX2Ercf4geaiWFfAnn0uMQdaAoXyeTS8M+0/Zeg=
Subject key identifier: EC:82:C1:94:D1:76:19:3E:68:90:CF:46:E5:E4:FE:AC:27:8D:54:36
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 019EC36E7A04BD298A326AEFD6EB06BA859F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 089A
Signing time: Sun 14 Jun 2026 00:00:57 +0000
Manifest this update: Sun 14 Jun 2026 00:00:57 +0000
Manifest next update: Mon 15 Jun 2026 00:00:57 +0000
Files and hashes: 1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: v6ai075wVPLWX8aaDwne5xjH/jKaxCFmiTx3rq+BeeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:7a:04:bd:29:8a:32:6a:ef:d6:eb:06:ba:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Jun 14 00:00:57 2026 GMT
Not After : Jun 15 00:00:57 2026 GMT
Subject: CN=ec82c194d176193e6890cf46e5e4feac278d5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:c5:29:42:28:fe:6d:74:d8:46:4c:19:df:
b3:6b:b6:9a:4a:55:bc:a9:3c:87:fa:1e:ba:33:b2:
4b:23:b2:2d:71:c9:d8:76:07:30:db:37:39:26:99:
d6:7d:f3:5a:89:7d:b1:b9:b5:24:7f:c1:f6:30:e7:
5a:c8:56:57:01:6c:3b:51:7b:17:de:3e:23:41:62:
f6:b4:ef:5a:37:67:39:97:34:62:8b:6e:96:ee:ad:
90:08:a1:13:4a:1b:82:79:6b:13:ef:17:f3:3f:40:
0c:89:a4:85:3c:a0:9c:96:d7:48:86:12:5c:c1:fa:
e5:cb:83:be:5a:07:92:c5:76:9a:e9:39:2b:3c:26:
7b:d2:b0:18:ba:b5:50:c3:a2:fe:cc:3e:b9:2b:e3:
9f:03:82:74:06:83:fe:b8:d7:3e:4a:5f:b7:a6:0f:
67:8d:68:c6:dd:fe:b5:55:6f:9e:2d:98:a2:66:c6:
ae:44:3a:93:76:32:05:6c:a0:25:5e:db:5c:f2:40:
58:b6:20:e5:9a:b7:53:83:6d:86:b3:d1:3e:25:8d:
37:f5:f2:bf:1f:f9:1e:7e:7c:41:84:27:bf:52:bd:
99:1d:9e:96:67:55:4f:1a:09:ca:37:9a:d1:06:a0:
78:68:9d:45:dd:3f:0e:96:d7:b5:0e:b0:33:d2:9b:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:C1:94:D1:76:19:3E:68:90:CF:46:E5:E4:FE:AC:27:8D:54:36
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:47:16:08:b4:44:69:e0:e8:f4:e1:94:f1:16:60:3b:22:92:
c9:fb:14:2f:85:ad:0f:be:91:9e:ab:fb:42:5f:ff:97:f5:8a:
f1:75:20:f0:6c:63:a4:74:e5:ed:f0:1f:fe:ba:ad:75:00:02:
cd:19:bd:6b:a6:e3:35:70:6f:8a:51:e4:2a:23:e8:bc:42:a7:
55:da:55:a0:13:58:86:28:7f:09:5e:e6:3b:b6:1a:87:ba:75:
bb:89:ac:80:16:a4:b7:e2:84:ec:82:d2:26:92:49:53:80:d1:
c1:14:21:2b:ac:59:6b:63:e7:49:91:b9:1a:86:91:04:e9:49:
fa:f0:d4:3c:85:f3:11:72:ac:b7:8b:ac:01:bf:23:fc:da:56:
0f:68:2b:fc:58:e9:9e:24:33:15:af:88:55:73:65:2e:eb:61:
e7:1b:28:cc:b0:53:5d:41:2d:e7:e8:d0:db:26:39:cc:8c:fe:
e0:d4:2d:b3:d5:9d:34:df:9d:fc:58:f4:c6:00:78:9f:71:5f:
2f:35:63:f9:b2:1b:80:cf:d0:8f:bd:98:5b:ac:c3:90:7f:13:
77:2b:cc:6e:bc:e6:2e:a7:70:6b:89:e8:68:3f:47:91:ca:cf:
66:84:b8:a4:b1:c3:f4:06:4e:7c:21:d6:fd:1f:2a:69:d1:86:
f3:d7:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:32 2026 by rpki-client