Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: L3ehBuJA4cNyUj0ydY4ZU/E6aCG058gCWb5MRANx8tY=
Subject key identifier: 65:83:A0:06:B1:C0:80:28:A6:B2:F0:94:03:89:3A:E6:C3:F1:74:00
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019EB7D7D87861AD497D4C0B8C597D50275C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 18:00:36 +0000
Manifest this update: Thu 11 Jun 2026 18:00:36 +0000
Manifest next update: Fri 12 Jun 2026 18:00:36 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: YixPUQsd9ZA4aXMigtGe/o7tDSLZEzsLsM0iHc7LMqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:d8:78:61:ad:49:7d:4c:0b:8c:59:7d:50:27:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jun 11 18:00:36 2026 GMT
Not After : Jun 12 18:00:36 2026 GMT
Subject: CN=6583a006b1c08028a6b2f09403893ae6c3f17400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:0d:4b:75:72:11:0a:8a:6b:f0:d8:6d:3f:
01:e1:32:66:c3:00:65:93:e1:7b:cf:cc:96:37:5f:
5a:13:e1:d3:34:54:dd:fa:f7:8a:f4:13:0c:b2:28:
03:a4:36:76:e8:6e:52:40:fa:f8:38:45:71:1d:e8:
af:e6:15:85:ab:aa:02:48:d6:43:25:6f:1a:e8:db:
9c:12:5c:f3:86:24:4f:6c:43:8e:79:93:5e:3e:c9:
e7:dc:f2:8b:16:8c:5f:68:e8:3b:d2:f9:50:19:45:
06:d0:bd:b2:f1:89:9a:7b:8f:9d:35:cc:9c:ad:58:
aa:56:74:0a:79:aa:34:b9:5f:a2:3d:11:95:2d:9d:
10:d6:e8:44:31:a6:f6:6b:e5:86:f6:75:15:97:85:
61:fe:8b:d3:f3:b3:32:d3:ec:18:a6:3f:52:7c:7c:
bf:1b:b2:5d:e7:29:f0:7b:0f:d6:32:49:8b:3d:82:
24:1b:73:b6:c8:2b:fc:77:28:c0:f1:ce:14:c4:b3:
5f:2f:7e:63:f6:a4:b4:99:3e:85:ff:25:29:72:98:
48:42:b2:4c:77:2d:a8:f3:07:e8:e1:db:ee:b8:e0:
ed:81:b9:b5:a6:ea:ca:09:e5:4d:90:6a:a6:65:fe:
07:fa:46:3d:6f:e5:f7:0a:99:d6:ab:db:59:05:af:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:A0:06:B1:C0:80:28:A6:B2:F0:94:03:89:3A:E6:C3:F1:74:00
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f1:16:3c:84:e2:41:53:dc:5c:f2:86:81:70:a1:04:b7:b8:
a3:a0:df:cf:dd:4e:a6:47:89:33:f1:be:5b:e0:b5:b0:14:09:
4e:3b:bd:9d:93:24:8b:fd:c3:a1:03:8b:fd:11:b4:d6:27:2a:
78:9d:ba:d4:65:8a:23:ac:cd:af:c5:f7:cf:32:ff:72:a5:61:
05:3b:38:a3:bb:a2:8a:fb:6c:b6:3e:8b:9d:45:99:fc:07:1c:
9a:ef:56:b7:fc:40:70:ec:ae:ce:3c:98:5f:78:26:a5:77:6f:
e8:59:cc:bf:50:d2:24:09:08:47:98:65:d1:e2:41:e6:ec:8c:
73:a3:b0:59:e5:00:44:bd:36:38:22:40:eb:37:d6:85:d5:1a:
38:43:0e:7a:34:44:8b:00:cb:73:c1:00:4b:31:cc:3c:dd:a1:
c9:8f:1f:17:3f:12:4b:96:75:3a:3e:1e:85:c6:fd:8a:ad:17:
ef:65:f6:f2:16:eb:f4:45:8e:a9:f1:82:a4:3e:d3:47:fa:f9:
4f:2f:42:05:46:e2:e5:61:84:b3:d8:53:bf:f6:e9:90:bb:a6:
5d:a2:f2:fd:d3:e2:54:3b:5f:72:1f:5b:52:4b:2f:f2:f9:fa:
24:2b:2e:7e:e1:52:6e:82:95:4a:e2:b1:97:0a:43:2c:4e:d0:
b0:2e:ae:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6319h4Ya1JfUwLjFl9UCdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYwNjExMTgwMDM2WhcNMjYwNjEyMTgwMDM2WjAzMTEwLwYDVQQD
Eyg2NTgzYTAwNmIxYzA4MDI4YTZiMmYwOTQwMzg5M2FlNmMzZjE3NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvYNS3VyEQqKa/DYbT8B4TJmwwBl
k+F7z8yWN19aE+HTNFTd+veK9BMMsigDpDZ26G5SQPr4OEVxHeiv5hWFq6oCSNZD
JW8a6NucElzzhiRPbEOOeZNePsnn3PKLFoxfaOg70vlQGUUG0L2y8Ymae4+dNcyc
rViqVnQKeao0uV+iPRGVLZ0Q1uhEMab2a+WG9nUVl4Vh/ovT87My0+wYpj9SfHy/
G7Jd5ynwew/WMkmLPYIkG3O2yCv8dyjA8c4UxLNfL35j9qS0mT6F/yUpcphIQrJM
dy2o8wfo4dvuuODtgbm1purKCeVNkGqmZf4H+kY9b+X3CpnWq9tZBa+3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWDoAaxwIAoprLwlAOJOubD8XQAMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfEWPITi
QVPcXPKGgXChBLe4o6Dfz91OpkeJM/G+W+C1sBQJTju9nZMki/3DoQOL/RG01icq
eJ261GWKI6zNr8X3zzL/cqVhBTs4o7uiivtstj6LnUWZ/Accmu9Wt/xAcOyuzjyY
X3gmpXdv6FnMv1DSJAkIR5hl0eJB5uyMc6OwWeUARL02OCJA6zfWhdUaOEMOejRE
iwDLc8EASzHMPN2hyY8fFz8SS5Z1Oj4ehcb9iq0X72X28hbr9EWOqfGCpD7TR/r5
Ty9CBUbi5WGEs9hTv/bpkLumXaLy/dPiVDtfch9bUksv8vn6JCsufuFSboKVSuKx
lwpDLE7QsC6uCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:51 2026 by rpki-client