Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: znCY9ar/pT4U1NTNe/WnXuwnGVt4H8afJCveIOIw0EQ=
Subject key identifier: 6B:1B:BC:60:C4:10:B3:3B:09:52:12:5E:98:CD:CF:A9:37:DE:88:37
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019E1E6CBF2C4BEFC3F618B9C1E2C979C2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 07B9
Signing time: Tue 12 May 2026 23:01:43 +0000
Manifest this update: Tue 12 May 2026 23:01:43 +0000
Manifest next update: Wed 13 May 2026 23:01:43 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: J9wcZ1NAFFKhni6TSiEaIJRD1sYLeu/MHJMavTknNzk=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:bf:2c:4b:ef:c3:f6:18:b9:c1:e2:c9:79:c2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: May 12 23:01:43 2026 GMT
Not After : May 13 23:01:43 2026 GMT
Subject: CN=6b1bbc60c410b33b0952125e98cdcfa937de8837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:27:35:13:18:fb:16:cd:ac:71:29:09:e9:
68:89:e4:06:76:14:e5:44:93:43:4b:c4:c3:c1:2c:
69:d9:aa:9a:fc:f5:eb:87:00:ee:8d:1f:74:eb:78:
43:cd:b7:49:c5:88:c1:c0:01:fc:90:46:e3:a9:a2:
3a:aa:bf:1d:49:d8:35:9d:a4:30:e2:c1:54:be:2e:
38:fb:6a:25:57:19:90:2e:a1:6c:0b:f4:3c:d5:0a:
de:fd:9e:6f:15:a2:1c:ac:1d:42:de:5d:f4:93:d1:
2b:4a:92:25:c3:45:80:a4:4b:7b:7a:97:b6:35:65:
fb:b4:ce:a2:2b:a1:31:71:b9:7f:8e:45:d1:4b:4d:
a2:6b:8c:af:c8:cd:0c:d6:39:14:e1:a7:5e:ad:d2:
48:e1:65:80:73:9f:2f:3c:44:9b:2f:5a:49:01:92:
cd:f3:c3:e2:79:e6:6a:30:e1:57:97:46:50:61:76:
c8:ca:a9:e0:08:66:18:ff:cd:84:64:2a:ed:f5:37:
47:98:ae:cf:b1:1c:50:20:b4:db:2b:30:9e:20:41:
af:c1:a4:9f:a9:c1:7e:37:0f:1f:b3:cd:c5:c8:16:
ae:96:08:1a:eb:31:9f:7c:16:0a:c4:92:e3:5a:5a:
65:8c:25:17:62:29:26:a8:0f:81:bf:ff:70:75:c4:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1B:BC:60:C4:10:B3:3B:09:52:12:5E:98:CD:CF:A9:37:DE:88:37
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:19:2e:ff:be:11:07:9c:d7:ac:06:0d:9c:d5:d6:e9:5e:
77:f4:cd:33:ff:99:bc:56:0d:c9:82:18:c0:2f:4c:aa:f8:41:
25:cd:81:d3:35:11:25:ec:33:a4:0c:7f:90:53:ed:d8:0f:b5:
91:f2:f0:90:1e:79:ee:d1:06:25:26:a0:ea:ce:52:58:41:e7:
63:5b:89:6f:99:e9:d7:92:79:e2:19:90:96:57:21:a8:83:44:
3e:64:64:6a:4b:f4:b9:48:71:81:67:dc:e4:79:19:3c:28:6e:
ca:77:fe:9f:97:13:40:1b:11:28:19:5c:09:81:67:63:4b:b8:
bd:52:0a:3b:d4:99:f2:7f:e8:f6:34:0f:1f:9c:aa:9c:89:1e:
c6:ec:57:44:c1:0c:00:52:6d:88:d0:d5:c1:c0:ab:2d:33:16:
ca:0a:29:d4:35:88:20:9b:0f:4b:d7:d1:19:1a:47:f4:3c:e3:
bb:ef:7c:f5:71:67:2f:79:5e:58:c5:33:89:34:d2:49:7a:80:
ba:f7:a8:ed:83:80:ca:77:21:f8:ca:b8:54:7b:9f:96:ff:e8:
c1:29:06:6e:f5:4d:6c:74:69:e2:76:12:1b:40:2c:0f:e3:dd:
42:49:e6:b1:52:f8:9e:f5:df:65:51:84:f0:ca:4c:29:90:3a:
5d:a3:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:22 2026 by rpki-client