Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: BsvH4w+p+VpWPQY2N5bDKAKyv5WV2YCBleHmfhxNBAQ=
Subject key identifier: 2D:C4:20:28:44:BD:D2:CD:D3:70:70:06:92:89:B8:8A:46:6B:61:1C
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019E9B8535EBC96437759C254DA3B1EB4B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0A45
Signing time: Sat 06 Jun 2026 06:00:58 +0000
Manifest this update: Sat 06 Jun 2026 06:00:58 +0000
Manifest next update: Sun 07 Jun 2026 06:00:58 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: H2tIYJC83s3KQp1lPla6oWe99aumAsES3U1oRCGmFhE=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:35:eb:c9:64:37:75:9c:25:4d:a3:b1:eb:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jun 6 06:00:58 2026 GMT
Not After : Jun 7 06:00:58 2026 GMT
Subject: CN=2dc4202844bdd2cdd37070069289b88a466b611c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:6d:fe:11:1b:4c:d4:60:4f:a7:01:47:0b:
18:07:c4:61:c4:b8:54:b4:87:62:1b:4d:d1:7f:93:
d5:fa:bb:b9:0b:b2:fb:29:78:87:0e:47:e1:31:7f:
99:bc:3a:74:99:9b:52:19:86:93:5d:ed:2c:2e:a5:
eb:97:8b:82:04:9a:22:12:ca:2f:ce:3a:7f:57:0a:
2b:dc:65:8f:a9:92:29:71:da:1d:74:ca:24:1c:f7:
1b:4a:04:15:a8:bc:44:3f:69:69:2a:52:02:0c:af:
32:93:6a:4f:0d:45:25:5a:95:34:ef:52:aa:9d:25:
20:a7:b6:02:f2:4c:41:97:61:80:fc:90:8e:fd:ac:
ad:af:46:d5:63:b5:72:95:89:e3:10:69:9d:6c:0f:
b4:5b:33:93:8a:9b:ba:14:94:69:5f:51:69:76:9b:
14:83:75:d8:5c:ac:bd:4e:c4:40:2b:4d:26:25:26:
1d:88:eb:60:94:1a:6a:0b:82:9e:22:04:b3:60:2b:
0a:e3:34:54:78:51:78:92:80:9a:89:7d:24:33:17:
1c:3c:8d:85:81:04:26:52:d9:0e:64:cf:2c:59:af:
55:87:4c:76:40:e0:69:8d:ba:4c:7c:dc:e0:0e:c1:
30:da:1f:f0:67:59:fd:74:fb:9e:af:9e:41:76:3b:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:20:28:44:BD:D2:CD:D3:70:70:06:92:89:B8:8A:46:6B:61:1C
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:bf:32:48:9a:c5:1e:d7:6d:55:6d:aa:c6:f7:a4:5d:d5:
1f:6e:96:d4:8b:46:49:ec:3b:a2:5f:45:8d:5b:47:7c:e7:10:
78:91:07:b9:c5:ed:81:a1:58:74:61:a1:f6:b1:fa:4d:74:bb:
f5:38:71:da:62:b2:d3:c5:8c:5f:fe:28:17:11:6e:32:97:1e:
57:5e:cd:90:85:ec:fc:99:7d:91:77:9e:39:6f:2b:b4:75:d1:
74:54:2d:56:c5:73:24:fb:7d:87:dd:4a:1c:6b:0a:8a:f7:8e:
50:a2:cd:4b:b8:75:07:d2:d4:21:93:61:dd:4a:54:5f:b8:e5:
48:1a:1f:8d:96:b2:79:57:da:11:3d:a8:55:90:b4:7e:18:e1:
77:f7:b9:76:15:97:9b:40:dc:38:86:18:f8:ac:7c:36:9d:d1:
31:cd:71:90:13:f2:ca:79:6d:c6:93:25:8f:df:fa:3c:f8:dc:
d5:0d:0f:f7:26:c7:d9:dc:80:ef:3e:83:f3:6a:5c:83:95:37:
31:76:16:e6:ef:d0:8e:21:66:d1:9d:71:fb:fb:0d:d1:d8:cb:
50:ca:f3:99:4b:86:5c:91:0f:b8:85:63:b3:4c:a3:13:41:12:
1f:b0:f9:30:7d:07:83:95:f0:c5:96:47:ae:a8:65:76:57:b2:
4f:b1:47:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhTXryWQ3dZwlTaOx60tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTUzOGFhYzMzNzc4NDYwZTE5NzAxYWFiNTk1MmM3YWEy
NWYwNWMwHhcNMjYwNjA2MDYwMDU4WhcNMjYwNjA3MDYwMDU4WjAzMTEwLwYDVQQD
EygyZGM0MjAyODQ0YmRkMmNkZDM3MDcwMDY5Mjg5Yjg4YTQ2NmI2MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyxt/hEbTNRgT6cBRwsYB8RhxLhU
tIdiG03Rf5PV+ru5C7L7KXiHDkfhMX+ZvDp0mZtSGYaTXe0sLqXrl4uCBJoiEsov
zjp/Vwor3GWPqZIpcdoddMokHPcbSgQVqLxEP2lpKlICDK8yk2pPDUUlWpU071Kq
nSUgp7YC8kxBl2GA/JCO/aytr0bVY7VylYnjEGmdbA+0WzOTipu6FJRpX1FpdpsU
g3XYXKy9TsRAK00mJSYdiOtglBpqC4KeIgSzYCsK4zRUeFF4koCaiX0kMxccPI2F
gQQmUtkOZM8sWa9Vh0x2QOBpjbpMfNzgDsEw2h/wZ1n9dPuer55BdjsXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3EIChEvdLN03BwBpKJuIpGa2EcMB8GA1UdIwQY
MBaAFKelOKrDN3hGDhlwGqtZUseqJfBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEt
ODdiMDEwZWE2MjM1LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEtODdiMDEwZWE2MjM1
LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGy/Mkia
xR7XbVVtqsb3pF3VH26W1ItGSew7ol9FjVtHfOcQeJEHucXtgaFYdGGh9rH6TXS7
9Thx2mKy08WMX/4oFxFuMpceV17NkIXs/Jl9kXeeOW8rtHXRdFQtVsVzJPt9h91K
HGsKiveOUKLNS7h1B9LUIZNh3UpUX7jlSBofjZayeVfaET2oVZC0fhjhd/e5dhWX
m0DcOIYY+Kx8Np3RMc1xkBPyynltxpMlj9/6PPjc1Q0P9ybH2dyA7z6D82pcg5U3
MXYW5u/QjiFm0Z1x+/sN0djLUMrzmUuGXJEPuIVjs0yjE0ESH7D5MH0Hg5XwxZZH
rqhldleyT7FH/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:02:06 2026 by rpki-client