Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: l3zHcddsLOTJ0xdliJnjFTlEF8U9n+/1dI0dGoNIMzA=
Subject key identifier: 7D:47:72:3C:C7:DA:CA:D7:AF:C4:DD:D2:C6:2E:76:64:CA:BE:70:5C
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019EDC89BCFB719489C2D0B688BB13E1B70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 196B
Signing time: Thu 18 Jun 2026 21:01:14 +0000
Manifest this update: Thu 18 Jun 2026 21:01:14 +0000
Manifest next update: Fri 19 Jun 2026 21:01:14 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: wL2DqBNLB3nVVbq8X6SgNIXz4D0+snTZxh5GOdSa75M=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:89:bc:fb:71:94:89:c2:d0:b6:88:bb:13:e1:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jun 18 21:01:14 2026 GMT
Not After : Jun 19 21:01:14 2026 GMT
Subject: CN=7d47723cc7dacad7afc4ddd2c62e7664cabe705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:d1:01:75:6d:38:ad:77:6c:89:9f:05:d2:
95:8c:47:63:fd:54:62:ee:51:47:86:41:d6:e2:a3:
ce:42:92:13:80:26:67:7b:c3:d5:b2:39:eb:7b:bd:
a1:3f:e9:24:10:0c:c1:b0:f0:53:d0:5d:3b:24:0e:
f9:2b:6c:ba:b2:f9:fc:13:a4:d3:e0:b0:c5:d4:32:
30:63:d3:70:a5:d0:bf:4e:3f:9d:db:4d:b4:ab:75:
6c:7c:37:5d:a4:28:d1:0d:49:9f:06:26:d4:d3:a9:
48:a8:42:fb:1d:d4:23:9b:3a:4e:48:f1:8c:83:09:
1f:ab:aa:c5:3c:06:71:99:5f:f7:e3:92:5f:ac:69:
c3:69:6e:be:c9:b9:75:54:e7:11:09:a9:88:95:c4:
33:88:c5:0b:42:22:9e:4e:c1:71:b8:be:e9:fc:9f:
6c:55:4e:a7:9f:0b:88:ae:5b:9b:35:42:82:5c:6a:
c2:4e:32:6c:8e:be:b6:3a:0f:e8:14:a6:1b:6a:c1:
10:28:cd:3b:b8:9b:e3:c7:0a:02:03:74:98:eb:5a:
5f:af:93:b0:c2:4d:f1:43:07:b8:4e:b9:65:fa:7b:
3c:df:8c:bb:6c:a7:e4:8e:20:aa:4c:7f:9c:89:9c:
6c:9c:f6:bd:80:35:e0:94:7e:7b:f0:ed:94:f8:da:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:72:3C:C7:DA:CA:D7:AF:C4:DD:D2:C6:2E:76:64:CA:BE:70:5C
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d6:99:89:03:27:a7:67:05:c0:a2:62:46:2a:77:f0:e3:b0:
e4:c1:ef:fd:10:3e:fd:09:57:37:35:51:87:eb:92:36:7b:e3:
e1:3d:17:13:07:d4:09:c1:2a:4e:cb:31:f9:e6:10:a8:5e:02:
25:da:4e:e9:bc:a4:fa:31:a3:60:b0:88:6f:82:13:67:cf:49:
97:c6:aa:db:14:05:be:31:d0:c9:3b:79:f2:f4:dc:cf:fa:ac:
58:75:23:e9:f6:80:0b:50:ba:bc:e1:42:de:bd:e7:8b:29:79:
c5:75:3a:37:53:e7:44:e8:26:39:45:a3:4f:ab:55:eb:76:61:
bf:4d:03:cc:1d:db:82:30:b4:ad:24:b8:ed:53:e0:5d:40:ff:
b8:4c:54:f1:50:f0:7a:0a:60:b0:fe:00:a6:28:5a:2f:84:6e:
36:58:aa:22:77:a1:75:73:4e:ea:e4:bd:9c:87:67:be:b7:fe:
4d:4d:76:07:30:ed:2e:4b:d0:70:24:a6:4e:89:d7:6c:24:5e:
b1:9c:74:66:86:31:d6:ae:d5:9f:52:ae:fa:bd:ae:77:66:01:
34:ee:42:14:29:79:67:79:ea:12:aa:26:c5:13:03:c3:42:4f:
8b:f5:9f:7a:39:ad:e8:11:40:31:01:ad:49:fb:ed:00:92:46:
b7:ba:55:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7cibz7cZSJwtC2iLsT4bcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjYwNjE4MjEwMTE0WhcNMjYwNjE5MjEwMTE0WjAzMTEwLwYDVQQD
Eyg3ZDQ3NzIzY2M3ZGFjYWQ3YWZjNGRkZDJjNjJlNzY2NGNhYmU3MDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sPRAXVtOK13bImfBdKVjEdj/VRi
7lFHhkHW4qPOQpITgCZne8PVsjnre72hP+kkEAzBsPBT0F07JA75K2y6svn8E6TT
4LDF1DIwY9NwpdC/Tj+d2020q3VsfDddpCjRDUmfBibU06lIqEL7HdQjmzpOSPGM
gwkfq6rFPAZxmV/345JfrGnDaW6+ybl1VOcRCamIlcQziMULQiKeTsFxuL7p/J9s
VU6nnwuIrlubNUKCXGrCTjJsjr62Og/oFKYbasEQKM07uJvjxwoCA3SY61pfr5Ow
wk3xQwe4Trll+ns834y7bKfkjiCqTH+ciZxsnPa9gDXglH578O2U+NpKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1HcjzH2srXr8Td0sYudmTKvnBcMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdaZiQMn
p2cFwKJiRip38OOw5MHv/RA+/QlXNzVRh+uSNnvj4T0XEwfUCcEqTssx+eYQqF4C
JdpO6byk+jGjYLCIb4ITZ89Jl8aq2xQFvjHQyTt58vTcz/qsWHUj6faAC1C6vOFC
3r3niyl5xXU6N1PnROgmOUWjT6tV63Zhv00DzB3bgjC0rSS47VPgXUD/uExU8VDw
egpgsP4ApihaL4RuNliqInehdXNO6uS9nIdnvrf+TU12BzDtLkvQcCSmTonXbCRe
sZx0ZoYx1q7Vn1Ku+r2ud2YBNO5CFCl5Z3nqEqomxRMDw0JPi/Wfejmt6BFAMQGt
SfvtAJJGt7pV6w==
-----END CERTIFICATE-----
Generated at Fri Jun 19 04:32:03 2026 by rpki-client