Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: hgpYlgOfe58qJf3CSW+NWGAarP7idU0yQsJ5KHYqmNo=
Subject key identifier: 84:7B:24:DD:7F:39:00:5A:00:DA:0A:38:D8:A9:D8:88:5D:ED:C5:5B
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019EC1EDDAEDB8D1FAC257BC1A9868862106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 196B
Signing time: Sat 13 Jun 2026 17:00:51 +0000
Manifest this update: Sat 13 Jun 2026 17:00:51 +0000
Manifest next update: Sun 14 Jun 2026 17:00:51 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: z6RXotpUGl+SLf59v+Iws5xvU5DoQDiMaSvZnWy1ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:da:ed:b8:d1:fa:c2:57:bc:1a:98:68:86:21:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jun 13 17:00:51 2026 GMT
Not After : Jun 14 17:00:51 2026 GMT
Subject: CN=847b24dd7f39005a00da0a38d8a9d8885dedc55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:1b:11:e2:ec:d7:4c:e1:19:48:9c:7e:fb:
cb:52:da:29:77:a5:a1:f8:ac:a2:d3:91:8e:e4:7f:
00:f3:81:3c:89:e3:1a:3c:6c:c0:ff:a6:d3:d9:0f:
eb:36:c8:8b:e5:11:fb:e9:fd:5f:51:d3:94:34:45:
b0:b1:21:64:19:d9:b7:e4:82:c0:e7:2a:05:24:a7:
1f:c1:2a:f7:5d:c5:e7:6d:7d:85:60:a4:0c:6d:8b:
9f:68:d4:71:73:ea:c9:c1:6e:8c:08:27:dd:0c:3b:
6f:44:86:da:8d:ba:f9:95:c7:9a:82:e9:2b:88:b4:
d1:0a:e3:68:7f:75:cc:3f:f8:ab:a5:61:bd:ce:ae:
1f:a7:ef:80:b6:b1:54:5c:ef:0b:db:ab:35:24:2f:
a4:47:6f:a9:3b:92:30:a7:2b:01:bc:d1:4f:00:9a:
2a:91:be:53:6b:7a:61:a2:22:97:d6:d7:3a:bb:8c:
9b:50:7b:60:03:95:95:df:14:91:8f:63:32:39:60:
ff:a7:6b:c1:14:d0:ac:d6:78:ed:93:c4:94:35:cb:
91:65:1e:ee:91:b7:13:8b:b2:88:09:22:61:1e:a5:
e0:b3:14:9f:9b:de:1f:30:49:9d:b3:74:45:66:15:
74:33:93:b7:79:36:01:c8:09:71:28:d0:b6:f0:a6:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:24:DD:7F:39:00:5A:00:DA:0A:38:D8:A9:D8:88:5D:ED:C5:5B
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:73:ad:26:a5:d9:81:e5:e5:87:24:d2:39:b3:3e:ad:34:3e:
70:05:a5:7d:ba:70:d9:a5:5c:ef:6d:e9:c7:26:8b:65:2a:ea:
58:42:34:14:6a:e5:ee:c4:33:f3:06:5f:44:27:d1:7c:2e:dd:
78:d2:47:95:c5:14:5f:21:d7:96:c0:68:31:02:9a:11:87:5f:
67:48:a4:90:f9:9d:1d:88:47:77:be:20:19:72:91:20:65:07:
ea:3d:55:40:aa:07:c0:4f:2b:b6:77:ed:7e:93:09:c8:17:d0:
69:9d:8a:5c:e6:53:a6:2c:ce:87:34:a7:b7:7d:85:c5:c0:18:
6b:88:55:1f:b8:bf:33:ed:d0:9a:95:66:2c:12:18:00:20:87:
f0:3d:85:97:15:20:1b:87:18:f6:7f:01:9a:f9:c3:a0:0d:1a:
bd:82:52:eb:27:ce:da:d2:0c:67:11:bb:9b:cd:50:8e:5a:3d:
cc:9f:89:3c:d9:59:35:db:72:9c:c2:66:36:81:68:c0:f7:3a:
82:80:7e:b0:46:0c:c4:43:c1:19:bc:aa:82:2c:65:14:f7:ae:
54:08:a3:61:21:ff:4d:d0:f4:e0:d6:57:89:12:92:32:33:54:
c4:75:a4:2a:4d:91:90:a2:71:14:2c:f2:42:d3:66:b0:68:95:
40:23:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:50 2026 by rpki-client