Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: Dr84t+ma1xzywDCyAF7SZuE9K4zYHJYLiKfhYy7C0ZA=
Subject key identifier: F9:19:E5:ED:33:53:96:AF:04:5F:22:47:87:AF:B4:10:40:E7:8E:05
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019E9B84966776079F8E9EF1D17C3AB5FB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 09AB
Signing time: Sat 06 Jun 2026 06:00:18 +0000
Manifest this update: Sat 06 Jun 2026 06:00:18 +0000
Manifest next update: Sun 07 Jun 2026 06:00:18 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: S5nCAt5LKQy7Ghnz/exNsMVVczonz4beZSiGEQ3azgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:96:67:76:07:9f:8e:9e:f1:d1:7c:3a:b5:fb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Jun 6 06:00:18 2026 GMT
Not After : Jun 7 06:00:18 2026 GMT
Subject: CN=f919e5ed335396af045f224787afb41040e78e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:09:8f:36:44:6c:9f:dd:d8:ac:5a:e9:1d:
a2:77:9f:64:bf:ba:cc:6c:2d:bb:fa:57:fe:9c:8e:
c9:99:96:50:4e:4e:77:9b:6f:63:8a:5d:03:1e:df:
0b:8c:d3:05:87:36:87:a3:05:5c:ff:98:5a:c0:8f:
b6:77:77:c0:75:10:48:5e:81:72:7a:fc:22:8d:52:
cd:3d:42:85:70:ce:05:71:a4:60:c3:fc:ce:c9:97:
68:d1:45:52:eb:11:3d:33:a8:5a:b5:76:44:0b:53:
c6:75:28:71:4b:67:d9:97:b8:34:b2:3e:6c:f2:ce:
eb:3a:06:66:e0:a1:7e:aa:11:9e:68:fc:8f:ff:97:
74:de:b0:eb:5f:ac:99:09:33:41:96:36:b8:26:c5:
cd:cc:8d:b3:83:80:55:58:0d:d3:de:dc:4d:58:9f:
3c:f3:f5:35:eb:d1:ca:48:e6:b4:f1:0c:9f:77:ac:
ab:4e:35:8f:f9:b0:36:40:2f:2d:41:a4:e6:4b:14:
b0:fd:cb:30:81:dd:4d:d7:04:15:0b:9d:85:40:13:
a3:a9:01:50:35:ec:47:75:b8:9d:2d:32:b3:8e:30:
5e:96:9f:86:65:8b:1a:7a:46:d4:32:1a:60:5e:87:
a7:b6:ed:c4:2c:9b:26:26:f1:0f:b0:f2:e8:09:f5:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:E5:ED:33:53:96:AF:04:5F:22:47:87:AF:B4:10:40:E7:8E:05
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:30:24:be:fb:41:08:e0:58:87:51:7f:ac:df:a5:42:f0:ef:
b7:39:34:22:75:19:00:3b:2a:1d:42:96:06:b6:62:22:e9:7d:
3a:fc:f1:eb:ed:61:1a:39:36:b7:6b:ba:1e:21:36:da:51:08:
5e:3e:df:22:22:45:23:b4:3c:c8:6e:f7:95:76:5e:c1:85:f2:
47:65:2e:9e:cb:63:e0:21:ff:02:b3:7d:fb:ef:d9:07:23:c5:
17:db:d2:8d:f2:63:30:45:38:23:65:d9:f6:81:8b:82:4c:96:
eb:b4:17:8d:8b:64:44:9b:58:09:81:4b:db:d5:32:b6:e4:cc:
23:3e:45:40:01:d4:fb:b5:fe:15:88:99:9f:96:60:75:28:36:
47:fa:8d:21:9f:c6:7b:a8:ae:f8:0f:55:5a:48:83:56:2b:ee:
aa:88:9c:23:9a:9b:35:46:d4:aa:b9:11:2a:f0:11:80:af:77:
f6:6c:2a:c8:83:42:ff:28:23:91:50:09:7f:2b:a8:a2:26:24:
12:4c:e2:d9:51:f2:56:8b:85:05:7d:63:75:61:9d:1f:d7:0d:
ae:84:8a:5b:01:e1:e6:fd:14:02:b0:b7:e8:8a:e4:40:91:fd:
db:01:ce:cf:66:c3:73:bc:f8:a7:45:73:f8:53:b1:28:c2:bb:
96:fa:66:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhJZndgefjp7x0Xw6tftIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw
N2IzNzMwHhcNMjYwNjA2MDYwMDE4WhcNMjYwNjA3MDYwMDE4WjAzMTEwLwYDVQQD
EyhmOTE5ZTVlZDMzNTM5NmFmMDQ1ZjIyNDc4N2FmYjQxMDQwZTc4ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxwJjzZEbJ/d2Kxa6R2id59kv7rM
bC27+lf+nI7JmZZQTk53m29jil0DHt8LjNMFhzaHowVc/5hawI+2d3fAdRBIXoFy
evwijVLNPUKFcM4FcaRgw/zOyZdo0UVS6xE9M6hatXZEC1PGdShxS2fZl7g0sj5s
8s7rOgZm4KF+qhGeaPyP/5d03rDrX6yZCTNBlja4JsXNzI2zg4BVWA3T3txNWJ88
8/U169HKSOa08Qyfd6yrTjWP+bA2QC8tQaTmSxSw/cswgd1N1wQVC52FQBOjqQFQ
NexHdbidLTKzjjBelp+GZYsaekbUMhpgXoentu3ELJsmJvEPsPLoCfVdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZ5e0zU5avBF8iR4evtBBA544FMB8GA1UdIwQY
MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt
MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx
LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2TAkvvtB
COBYh1F/rN+lQvDvtzk0InUZADsqHUKWBrZiIul9Ovzx6+1hGjk2t2u6HiE22lEI
Xj7fIiJFI7Q8yG73lXZewYXyR2Uunstj4CH/ArN9++/ZByPFF9vSjfJjMEU4I2XZ
9oGLgkyW67QXjYtkRJtYCYFL29UytuTMIz5FQAHU+7X+FYiZn5ZgdSg2R/qNIZ/G
e6iu+A9VWkiDVivuqoicI5qbNUbUqrkRKvARgK939mwqyINC/ygjkVAJfyuooiYk
Ekzi2VHyVouFBX1jdWGdH9cNroSKWwHh5v0UArC36IrkQJH92wHOz2bDc7z4p0Vz
+FOxKMK7lvpmQg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:51:32 2026 by rpki-client