Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: ngBgakF4Rl/lI8JvawJV/vnMwU5xygL4YaeBttyOvyU=
Subject key identifier: 05:A7:AB:16:6D:76:63:F7:CD:D2:23:1C:8A:E4:CB:21:E3:EB:DF:AF
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019EB9224A92FF256D52F38A31A491D2263C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 10FE
Signing time: Fri 12 Jun 2026 00:01:32 +0000
Manifest this update: Fri 12 Jun 2026 00:01:32 +0000
Manifest next update: Sat 13 Jun 2026 00:01:32 +0000
Files and hashes: 1: 8xA9g6st8q1ZO7p8fBgY7k3h940.roa (hash: es+n+A0JT354CmSRIsGHstM8RZuYiz9SAi6sT3RamMM=)
2: Fq7TOkYyouHC8xR1kjrAsL5urTc.roa (hash: 6GYjOmrjXmmr24z+aC3KxZOdFr1vqqY/PhQW/qHR3M0=)
3: U3uskgBenRf6gNmvfw00tQrNEBw.roa (hash: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=)
4: We9ajpgv-KMWtCNehj5200Ms4KE.roa (hash: yAe9WyOmZWrvcHTRYvIZ0zYpeNqUkrBR9gUrKL3DkRg=)
5: Z_UkflDweGnz8zM_7oi509EJZ5k.roa (hash: hSzmu9iIssf6q8RWNHjOF5etDQN6C9VPkQzbrxInqjA=)
6: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: kP21SeytdgSquCa0TdfyKg316+q39RedvS3Nd8FhgmI=)
7: kKLGgE3fyTVxx91dU2mQiyqGm10.roa (hash: ZqNmuP4152Y5l4OYoFJ5inMC8KhvOltpWeQnsy5c5So=)
8: xenLsKPBBzBMqRcg-OjXqeVukQ8.roa (hash: b82QWnmVuqMrn+VvITgqUIemhL5L20gAU9zx2kZtgG0=)
9: xkcxmbV395wD6Bpm8A0maelgxXQ.roa (hash: 6jEjfrEoAEHIt6C6bZR7XXWE/0hdr4gv+O/JcJ+oWEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:4a:92:ff:25:6d:52:f3:8a:31:a4:91:d2:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 12 00:01:32 2026 GMT
Not After : Jun 13 00:01:32 2026 GMT
Subject: CN=05a7ab166d7663f7cdd2231c8ae4cb21e3ebdfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:b1:23:aa:17:71:fe:0d:a4:bd:4d:e4:4e:
cd:48:68:32:b8:6e:5f:38:97:f3:b5:03:21:e7:85:
12:ff:a5:91:b7:06:5e:b0:19:cd:52:36:58:cc:6a:
c5:36:f4:01:3a:f1:1f:c2:8a:7c:2e:e5:c2:c6:3e:
a7:7c:7d:1f:00:ff:b5:8e:8f:c7:fb:dd:7c:a7:07:
95:b3:19:ae:df:ea:55:0a:53:10:3f:e0:c9:fb:fa:
ad:c7:c6:dd:3a:fd:7d:5f:e2:27:8d:59:c8:9c:02:
53:1c:e9:f3:c6:a3:ec:b9:8b:de:48:87:d1:ec:b1:
c3:28:b4:89:66:0e:5e:89:4f:c7:65:12:cc:75:b8:
b7:8f:15:09:c1:10:f8:f2:0b:47:1d:1e:ca:9f:f3:
38:0c:52:d0:89:ea:f7:df:c5:2f:66:bf:1a:0f:b5:
ef:67:8b:44:03:b1:bd:af:90:30:de:cf:de:6e:a0:
6b:80:a1:93:de:6c:1e:64:14:5a:90:09:eb:43:1a:
88:20:1d:92:19:6a:1c:38:f8:80:8a:68:2d:3c:38:
97:49:a4:42:0e:02:fa:8f:ce:b7:c7:0e:52:a7:0c:
b8:ae:f8:f8:58:cb:4d:54:49:be:a4:38:45:46:8f:
31:46:68:fb:f9:5b:15:da:94:bb:ec:d4:01:0b:7c:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A7:AB:16:6D:76:63:F7:CD:D2:23:1C:8A:E4:CB:21:E3:EB:DF:AF
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8a:ce:e2:a3:09:70:1d:eb:3f:fe:7e:3d:96:90:82:dc:c6:
e6:87:ac:a5:a5:96:49:12:48:a8:06:76:af:9a:5d:c6:0e:9a:
46:d2:c4:bf:e2:a7:b3:e4:3d:f9:c2:64:55:30:1e:a2:8d:76:
00:62:3d:19:db:cc:d3:57:1e:7e:c6:af:57:f5:0e:07:d5:ac:
d9:fa:2f:ff:54:0d:e3:64:c7:db:4f:73:4c:55:9d:cb:c8:fd:
88:a3:f0:4d:7c:7d:c0:be:90:f0:8f:8d:27:90:dc:00:07:b6:
d8:b7:b0:52:d2:db:b1:d7:b5:7f:cd:59:9e:6c:26:37:36:8f:
74:55:10:db:84:d7:82:87:6c:5c:08:62:66:f1:36:18:93:3e:
ba:ad:67:ad:43:bd:e6:6d:29:6d:03:51:72:a8:50:06:87:c1:
b6:44:ed:cf:9c:4d:74:cd:a8:c1:c6:31:f8:25:0f:b6:7f:a3:
ae:3f:cd:66:04:47:2e:18:f8:e6:ed:60:9e:83:93:8e:d8:bf:
a8:08:17:c1:f5:4b:0c:8a:9b:20:1f:18:a4:c1:1d:e1:cf:9c:
01:53:ca:da:5b:ea:f4:13:17:9b:e2:72:4a:6e:36:20:9f:00:
be:4c:1f:9c:79:01:a2:99:b7:8d:03:e0:be:a2:c2:40:7f:59:
f6:dd:e6:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IkqS/yVtUvOKMaSR0iY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwNjEyMDAwMTMyWhcNMjYwNjEzMDAwMTMyWjAzMTEwLwYDVQQD
EygwNWE3YWIxNjZkNzY2M2Y3Y2RkMjIzMWM4YWU0Y2IyMWUzZWJkZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssyxI6oXcf4NpL1N5E7NSGgyuG5f
OJfztQMh54US/6WRtwZesBnNUjZYzGrFNvQBOvEfwop8LuXCxj6nfH0fAP+1jo/H
+918pweVsxmu3+pVClMQP+DJ+/qtx8bdOv19X+InjVnInAJTHOnzxqPsuYveSIfR
7LHDKLSJZg5eiU/HZRLMdbi3jxUJwRD48gtHHR7Kn/M4DFLQier338UvZr8aD7Xv
Z4tEA7G9r5Aw3s/ebqBrgKGT3mweZBRakAnrQxqIIB2SGWocOPiAimgtPDiXSaRC
DgL6j863xw5Spwy4rvj4WMtNVEm+pDhFRo8xRmj7+VsV2pS77NQBC3w4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWnqxZtdmP3zdIjHIrkyyHj69+vMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAorO4qMJ
cB3rP/5+PZaQgtzG5oespaWWSRJIqAZ2r5pdxg6aRtLEv+Kns+Q9+cJkVTAeoo12
AGI9GdvM01cefsavV/UOB9Ws2fov/1QN42TH209zTFWdy8j9iKPwTXx9wL6Q8I+N
J5DcAAe22LewUtLbsde1f81ZnmwmNzaPdFUQ24TXgodsXAhiZvE2GJM+uq1nrUO9
5m0pbQNRcqhQBofBtkTtz5xNdM2owcYx+CUPtn+jrj/NZgRHLhj45u1gnoOTjti/
qAgXwfVLDIqbIB8YpMEd4c+cAVPK2lvq9BMXm+JySm42IJ8AvkwfnHkBopm3jQPg
vqLCQH9Z9t3mqw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:52 2026 by rpki-client