Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: YNKXY+I0FM7hWT26FwRcjj4r0N66W+RPHc8ZQopRLgA=
Subject key identifier: E2:75:EA:9E:4D:27:43:2C:3B:5A:04:F8:18:07:AD:B6:10:E0:B8:CD
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 019F0A75632B18CC72C18670D2918A6D56BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 0421
Signing time: Sat 27 Jun 2026 19:01:33 +0000
Manifest this update: Sat 27 Jun 2026 19:01:33 +0000
Manifest next update: Sun 28 Jun 2026 19:01:33 +0000
Files and hashes: 1: 9Xrlh9UG6YWWGE2DSWpmDwT_iO4.roa (hash: rmGIE8RLPp2ZBEe7jUWomsqx9QMK5jj6TTJjEreNzk4=)
2: XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa (hash: KV414vkbOzOU+S9G8Ie1ETRwhJyk99wklT+FH+pmi/w=)
3: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: yEF61Lxs5VCEieQRSKkyWLQRPeAybIt95QkHf9jPLLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:75:63:2b:18:cc:72:c1:86:70:d2:91:8a:6d:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Jun 27 19:01:33 2026 GMT
Not After : Jun 28 19:01:33 2026 GMT
Subject: CN=e275ea9e4d27432c3b5a04f81807adb610e0b8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:e1:2b:a6:3f:88:b2:8f:ed:62:78:40:84:
dd:8b:50:8e:d2:01:aa:e7:32:6a:9e:a1:42:bb:90:
ef:98:0b:36:8d:a5:19:a9:54:94:e1:5d:39:29:91:
f8:a5:9b:25:10:2d:68:8d:b6:11:bd:3d:91:14:88:
d7:aa:55:7f:b0:43:e3:39:70:56:b4:01:d4:04:6b:
41:e6:43:fc:0e:12:51:15:83:c9:86:b5:42:91:ae:
e9:b6:30:c2:31:5d:c5:8a:6e:18:06:bb:2d:75:3f:
9a:bd:0f:1a:01:9b:a8:98:8c:f0:39:0b:4f:36:42:
ea:28:49:f9:67:a1:eb:69:bf:db:56:9c:47:20:41:
ec:85:1c:6d:42:8b:9e:b9:1b:a2:56:98:0f:2e:5b:
2e:65:0f:61:f5:8b:79:78:fb:93:f4:d4:7e:b3:7a:
63:74:0e:7a:3d:24:b0:2b:06:e2:53:e4:a4:5b:98:
a8:62:d1:48:39:2d:20:73:79:d9:69:44:84:51:03:
31:ad:d1:39:51:ba:44:dc:b2:a0:d5:18:88:0b:c2:
9d:fb:2e:dd:6b:c3:13:d6:54:77:bb:d7:fa:7f:8c:
30:5c:26:bc:36:75:d8:61:4f:45:32:df:32:3c:21:
36:34:f3:b2:e3:4e:70:eb:c7:33:e7:45:4e:71:39:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:EA:9E:4D:27:43:2C:3B:5A:04:F8:18:07:AD:B6:10:E0:B8:CD
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4d:c7:8e:53:d7:a3:c5:49:ae:d5:df:f5:c0:66:02:0b:58:
b7:32:d2:ed:ee:a9:f8:92:b4:28:d3:97:f5:65:75:eb:05:1c:
54:cc:95:64:4e:aa:be:c2:d3:fe:f5:db:8b:40:13:0d:d5:a6:
40:95:66:77:1c:72:08:97:29:21:0b:80:8f:3b:f9:24:6f:bf:
2d:69:4c:f8:92:a2:3d:f0:46:3b:b2:45:27:c5:c1:cc:80:24:
ed:48:b1:e7:5a:0f:1e:7b:20:aa:c7:c6:26:3c:e0:fc:c2:b9:
3c:ab:04:4e:c6:d8:f5:e0:ca:09:50:d6:ee:80:6e:f5:ba:97:
c5:bf:05:2a:e3:df:9e:e5:76:dd:41:8c:27:17:fa:77:e5:a7:
33:be:eb:3f:fd:3b:6b:bd:d8:8b:ff:81:6d:f6:c6:93:74:12:
c4:02:ce:bb:90:70:6e:7a:01:7d:8e:a5:64:1d:3b:6f:7f:28:
ed:87:4e:e2:99:ee:06:02:cf:9f:de:e8:78:67:d9:0f:6e:88:
86:6d:7c:de:6e:c2:d6:b6:1a:1a:7b:95:0a:ac:c5:1d:b4:bf:
f8:5e:08:0e:04:6c:d7:a0:ae:3b:98:13:2f:4a:7b:bc:5e:7d:
cf:a8:5d:f3:20:f8:cf:15:07:00:c2:5b:de:30:3d:ca:d3:55:
cd:25:15:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8KdWMrGMxywYZw0pGKbVa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmMyYmU3YmY0MjgyZTFjZDY5MDhmMjg5YTc5Y2VjMGE1
ZGY0MmUwHhcNMjYwNjI3MTkwMTMzWhcNMjYwNjI4MTkwMTMzWjAzMTEwLwYDVQQD
EyhlMjc1ZWE5ZTRkMjc0MzJjM2I1YTA0ZjgxODA3YWRiNjEwZTBiOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzhK6Y/iLKP7WJ4QITdi1CO0gGq
5zJqnqFCu5DvmAs2jaUZqVSU4V05KZH4pZslEC1ojbYRvT2RFIjXqlV/sEPjOXBW
tAHUBGtB5kP8DhJRFYPJhrVCka7ptjDCMV3Fim4YBrstdT+avQ8aAZuomIzwOQtP
NkLqKEn5Z6Hrab/bVpxHIEHshRxtQoueuRuiVpgPLlsuZQ9h9Yt5ePuT9NR+s3pj
dA56PSSwKwbiU+SkW5ioYtFIOS0gc3nZaUSEUQMxrdE5UbpE3LKg1RiIC8Kd+y7d
a8MT1lR3u9f6f4wwXCa8NnXYYU9FMt8yPCE2NPOy405w68cz50VOcTnPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ16p5NJ0MsO1oE+BgHrbYQ4LjNMB8GA1UdIwQY
MBaAFK9sK+e/QoLhzWkI8omnnOwKXfQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt
MGQ4ZWJjZTg2Y2FjLzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj
LzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk3HjlPX
o8VJrtXf9cBmAgtYtzLS7e6p+JK0KNOX9WV16wUcVMyVZE6qvsLT/vXbi0ATDdWm
QJVmdxxyCJcpIQuAjzv5JG+/LWlM+JKiPfBGO7JFJ8XBzIAk7Uix51oPHnsgqsfG
Jjzg/MK5PKsETsbY9eDKCVDW7oBu9bqXxb8FKuPfnuV23UGMJxf6d+WnM77rP/07
a73Yi/+BbfbGk3QSxALOu5BwbnoBfY6lZB07b38o7YdO4pnuBgLPn97oeGfZD26I
hm183m7C1rYaGnuVCqzFHbS/+F4IDgRs16CuO5gTL0p7vF59z6hd8yD4zxUHAMJb
3jA9ytNVzSUVgA==
-----END CERTIFICATE-----
Generated at Sat Jun 27 23:12:46 2026 by rpki-client