Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: mmLhm3O7wwgTpCC1O472yEe9XHy9+WeFjrWXXKkqU/M=
Subject key identifier: CE:F4:AF:D5:BF:8B:70:1B:2D:6E:27:C7:82:DF:85:EA:99:CC:5C:6F
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019EC25BEBCDE6B9363DB470358C1C33A671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 19:01:04 +0000
Manifest this update: Sat 13 Jun 2026 19:01:04 +0000
Manifest next update: Sun 14 Jun 2026 19:01:04 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: alv1prKiCxZZmSs4QANSUdSjrqG8jVYwQdjGi1kTfRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:eb:cd:e6:b9:36:3d:b4:70:35:8c:1c:33:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jun 13 19:01:04 2026 GMT
Not After : Jun 14 19:01:04 2026 GMT
Subject: CN=cef4afd5bf8b701b2d6e27c782df85ea99cc5c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:95:95:2e:33:ad:75:28:16:4f:28:fd:99:
a4:f3:89:4e:12:c4:ed:ba:b2:b3:6f:4c:1e:99:4e:
15:fa:4d:81:8c:5d:07:52:8a:de:73:53:a2:78:1f:
2c:07:9b:d6:c9:90:79:7f:e9:fd:d6:ec:4a:3c:86:
44:66:c9:1e:0f:06:53:62:7d:1a:e8:ec:8a:af:8b:
b4:f4:5a:12:d1:1d:84:a1:93:0c:47:91:7c:62:67:
64:9c:44:33:b6:de:bb:f1:17:72:5b:b5:b4:58:0a:
c7:00:15:0f:bd:06:99:2c:ac:14:e9:1a:e3:c4:61:
88:1c:6b:63:a7:11:13:a4:63:5b:cf:2a:ef:7d:0b:
46:8d:91:9d:43:5f:d6:75:18:5e:6f:eb:a0:f4:5d:
f8:03:d6:f4:62:34:f0:60:67:81:bd:02:72:dc:3e:
82:f4:8e:9a:3e:ba:76:e5:6d:a1:f1:00:0b:21:9a:
f0:03:19:f3:5f:b7:b4:38:13:59:2c:75:79:59:4d:
98:33:ae:1c:d5:50:7d:39:3a:1e:40:c6:15:25:2d:
f6:69:c4:0b:c9:b3:57:04:71:8f:d8:da:53:5e:2a:
c8:1c:84:a1:6f:ba:c3:f0:d7:b1:72:1a:7d:43:67:
63:a0:d2:cf:f5:a2:7f:b8:cf:09:96:59:c6:1b:b5:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:AF:D5:BF:8B:70:1B:2D:6E:27:C7:82:DF:85:EA:99:CC:5C:6F
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b9:36:31:f8:2e:f4:c5:b3:37:e8:90:a5:d8:cf:81:db:25:
b0:75:24:80:4d:84:8e:e7:d2:fa:25:b2:a2:e1:76:ae:53:32:
72:ed:6f:78:cb:f3:ab:fa:a8:0f:cf:56:c9:7f:a3:59:71:56:
1b:53:a0:6f:97:32:6b:a7:99:8a:d7:de:2b:5f:c2:68:6b:d4:
7a:46:b3:23:81:d0:54:d8:78:b3:3d:cd:e4:96:8f:2c:3c:da:
34:8d:c5:ca:41:fa:00:02:11:0b:9f:66:b3:57:3d:9e:85:90:
be:2c:f5:76:f4:af:c2:6d:75:09:cc:8d:60:4b:b4:d1:58:3c:
90:15:db:04:77:d3:99:b4:5e:d8:8b:a8:2e:09:1a:4a:a5:4d:
39:65:22:be:53:63:a3:2e:af:90:c0:1f:f2:6d:f3:bd:31:0b:
6c:47:45:c2:f2:1e:a6:ac:95:c0:f3:8e:f2:76:cf:a9:94:47:
ea:b4:54:67:b8:5d:bd:a0:e7:03:54:aa:28:b4:cd:0d:93:f0:
a3:70:0b:8e:e0:1c:81:e8:f6:a5:40:d6:dd:8f:4b:0f:91:90:
bc:b2:ce:ad:c5:c8:4f:7e:46:3e:a4:b7:c0:06:87:7b:15:55:
96:46:72:06:1d:d6:96:c4:2f:e5:4b:66:fd:51:f8:6b:01:74:
d9:b4:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:48 2026 by rpki-client