Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: 5jzyFcnwHSPRT0knlWP0Wr+ZpSKiXDdC+QnkickQ5lk=
Subject key identifier: 34:BF:94:0E:6A:CF:BC:F7:B8:A1:CA:62:FD:AB:B1:56:8E:E2:0A:A1
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019EEFA2627AE229215466A28BB34B8858FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1975
Signing time: Mon 22 Jun 2026 14:00:57 +0000
Manifest this update: Mon 22 Jun 2026 14:00:57 +0000
Manifest next update: Tue 23 Jun 2026 14:00:57 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: TKB91h8WmzKT64hLdzhQYXiuXc5uEqV5GC+0jDeZSkQ=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 13:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:a2:62:7a:e2:29:21:54:66:a2:8b:b3:4b:88:58:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jun 22 14:00:57 2026 GMT
Not After : Jun 23 14:00:57 2026 GMT
Subject: CN=34bf940e6acfbcf7b8a1ca62fdabb1568ee20aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:5a:b8:f7:11:51:fc:de:95:a2:ac:c7:f3:
44:64:17:1e:26:1d:74:b3:0f:24:58:97:6d:cf:e2:
c0:09:49:ce:96:ed:92:0a:f2:5a:5f:ec:28:7a:2e:
82:80:27:b9:0b:70:68:da:cb:e3:a8:94:16:c0:6f:
05:47:99:94:91:63:a9:3c:05:08:d9:b7:c0:8c:94:
d8:2e:cb:eb:b9:2d:01:fe:78:9b:58:6f:0b:c4:97:
4e:aa:85:7b:d6:32:cd:bb:a3:29:cd:15:68:08:ab:
df:f8:75:e2:42:c3:7c:6f:f0:fe:62:11:50:af:95:
ec:75:47:ba:dc:e8:4c:cf:f2:1f:e2:f0:db:11:06:
5d:8f:b2:8c:dd:14:f0:a5:68:ac:32:1d:88:8e:96:
51:3c:98:c5:c8:8b:1c:a5:dc:41:ce:57:72:4c:05:
36:18:bb:0b:b3:90:0c:98:d5:1c:b9:88:ab:fe:7c:
ae:0c:50:ef:59:af:d8:1d:dc:9e:c4:1a:c5:f2:d6:
c7:5c:e9:a1:57:8f:9d:c0:f5:d7:4e:35:f1:34:b2:
85:1b:22:b5:75:a7:d9:d5:34:ae:ac:6d:02:cc:64:
fe:47:bb:5e:66:3b:2e:f6:ac:a7:68:ab:8a:41:8b:
10:b0:95:f5:60:75:83:1b:bf:4a:dc:4e:79:da:1d:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:94:0E:6A:CF:BC:F7:B8:A1:CA:62:FD:AB:B1:56:8E:E2:0A:A1
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:40:a2:29:76:86:12:02:c8:91:8f:ca:50:a1:cb:5d:a6:
51:d7:d4:c5:98:5f:e5:5e:4c:6f:a7:2c:cd:68:00:a9:f1:cf:
81:11:50:1b:5f:b0:4e:48:73:4e:1e:44:15:e0:56:d3:49:b7:
27:eb:f8:49:67:0b:01:b4:8a:30:05:a4:37:72:30:02:79:e1:
67:8e:3a:dc:8a:13:47:47:d2:35:cd:b1:50:f6:e8:c0:9c:53:
f4:34:39:b6:d8:87:a6:7c:29:60:c5:5b:e6:b5:86:2e:f8:34:
d3:ab:46:2a:70:d4:05:4c:53:c3:7b:1f:61:e2:dc:63:44:da:
39:f3:33:64:88:df:ea:ed:03:89:a2:8b:ca:e8:7c:1d:dd:cb:
52:9b:7a:9c:56:1e:f2:8b:a3:88:83:ec:76:e7:a1:73:6d:28:
11:8c:ad:27:d8:03:66:ad:3d:9f:a7:e3:3e:b6:43:d5:31:b2:
46:be:6b:c7:cb:62:a9:e8:0c:71:d0:61:ad:05:1c:ea:88:19:
af:8b:ee:62:67:84:1d:94:fa:6d:e2:1d:34:55:41:ff:5c:66:
f2:72:0f:50:15:f8:a9:54:a2:50:aa:e5:c5:15:b0:10:f6:cd:
26:53:c3:d4:10:f5:3e:16:ec:cd:25:b7:93:82:55:23:85:34:
a1:b0:5e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7vomJ64ikhVGaii7NLiFj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjYwNjIyMTQwMDU3WhcNMjYwNjIzMTQwMDU3WjAzMTEwLwYDVQQD
EygzNGJmOTQwZTZhY2ZiY2Y3YjhhMWNhNjJmZGFiYjE1NjhlZTIwYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp05auPcRUfzelaKsx/NEZBceJh10
sw8kWJdtz+LACUnOlu2SCvJaX+woei6CgCe5C3Bo2svjqJQWwG8FR5mUkWOpPAUI
2bfAjJTYLsvruS0B/nibWG8LxJdOqoV71jLNu6MpzRVoCKvf+HXiQsN8b/D+YhFQ
r5XsdUe63OhMz/If4vDbEQZdj7KM3RTwpWisMh2IjpZRPJjFyIscpdxBzldyTAU2
GLsLs5AMmNUcuYir/nyuDFDvWa/YHdyexBrF8tbHXOmhV4+dwPXXTjXxNLKFGyK1
dafZ1TSurG0CzGT+R7teZjsu9qynaKuKQYsQsJX1YHWDG79K3E552h2mZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS/lA5qz7z3uKHKYv2rsVaO4gqhMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfhAoil2
hhICyJGPylChy12mUdfUxZhf5V5Mb6cszWgAqfHPgRFQG1+wTkhzTh5EFeBW00m3
J+v4SWcLAbSKMAWkN3IwAnnhZ4463IoTR0fSNc2xUPbowJxT9DQ5ttiHpnwpYMVb
5rWGLvg006tGKnDUBUxTw3sfYeLcY0TaOfMzZIjf6u0DiaKLyuh8Hd3LUpt6nFYe
8oujiIPsduehc20oEYytJ9gDZq09n6fjPrZD1TGyRr5rx8tiqegMcdBhrQUc6ogZ
r4vuYmeEHZT6beIdNFVB/1xm8nIPUBX4qVSiUKrlxRWwEPbNJlPD1BD1PhbszSW3
k4JVI4U0obBepA==
-----END CERTIFICATE-----
Generated at Mon Jun 22 16:16:09 2026 by rpki-client