Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: +MRirWpN/KK8iutO438fEmm2VIlhZLhUDVrJJOiTdW4=
Subject key identifier: 94:8D:41:AD:38:22:58:29:B9:85:91:CF:EF:95:5F:89:40:34:A1:23
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019F1A1F6450AEF7354CB66F2C60C38ABF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 109D
Signing time: Tue 30 Jun 2026 20:01:32 +0000
Manifest this update: Tue 30 Jun 2026 20:01:32 +0000
Manifest next update: Wed 01 Jul 2026 20:01:32 +0000
Files and hashes: 1: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
2: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: lD8JHyKUdR374IsK+NxB+CcY01mm/F2ZX57kptz0Ip8=)
4: iAcU8TmU3XO9pInkys3o4nP2d1o.roa (hash: 8kLlqWjTG7qODVMxiGmAdLlFMj+sGZZsSvd11HBghdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:64:50:ae:f7:35:4c:b6:6f:2c:60:c3:8a:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jun 30 20:01:32 2026 GMT
Not After : Jul 1 20:01:32 2026 GMT
Subject: CN=948d41ad38225829b98591cfef955f894034a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:4a:7d:72:f9:7b:dd:27:f6:54:7d:0d:41:
23:0e:37:61:5c:7c:8a:4a:11:89:2f:1a:91:ec:ca:
53:02:50:7e:fc:ba:aa:7c:fa:4a:2c:57:0a:d5:7c:
1d:53:f6:f8:6e:36:04:5e:dd:74:0d:04:14:21:4f:
9f:40:e0:2e:0b:4d:0d:c7:3d:b5:94:49:19:be:b7:
25:8b:ae:51:e2:b8:be:88:94:66:ce:e6:b9:1b:66:
39:cd:ef:35:50:fb:b1:b9:3f:80:b5:98:99:01:85:
89:45:8e:0c:16:87:7e:20:66:a0:cf:7f:5b:9f:8e:
1d:8e:15:e1:34:19:01:b5:ff:04:d4:a9:cc:37:63:
d8:5e:8a:d0:1a:1b:5f:22:07:1a:0f:b1:0a:60:ae:
c2:1b:f7:ff:03:32:35:8e:5b:5c:ff:ca:b8:4f:73:
92:b8:6b:44:32:6d:c4:21:cd:dd:65:ff:32:03:30:
2a:94:fe:3f:79:e9:9b:37:ed:fd:a3:bd:9f:ab:71:
38:34:ff:84:6f:89:cb:cf:6c:bd:36:98:40:80:ce:
98:7f:60:f0:12:e3:f5:71:47:27:d8:42:d6:d3:0a:
62:53:53:06:b0:ac:f4:14:72:7c:61:99:71:bf:fb:
1b:3d:b5:b3:40:99:e0:98:9c:7d:27:ae:3f:3f:1b:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:41:AD:38:22:58:29:B9:85:91:CF:EF:95:5F:89:40:34:A1:23
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b6:3d:4f:74:02:f0:ba:af:5d:78:2c:ba:9b:31:2f:1c:eb:
2b:b6:e5:36:d8:e5:06:3c:5d:e2:b1:38:ca:12:10:60:80:7c:
e7:a3:6f:1b:66:ab:11:8d:44:cc:8b:96:09:fa:d5:2d:34:3f:
5d:88:d6:5f:79:e8:40:6a:ab:80:6d:85:24:01:14:04:22:52:
d8:e4:5a:92:68:72:52:e6:02:38:86:34:55:3f:da:ad:35:71:
9e:5c:35:b3:ae:d0:c0:05:2e:5e:c7:55:0f:2a:3a:1d:58:65:
d6:7b:57:c2:05:27:1e:56:a1:d3:12:d5:80:54:8c:bc:26:0e:
a3:0b:d2:49:f6:8b:81:47:42:d2:f7:d5:53:4e:d6:f6:d7:b6:
15:53:a7:07:70:d6:c4:ed:2b:cc:8a:98:c5:50:7b:9a:df:3f:
07:d1:e5:75:d5:f3:5a:95:f3:a5:d1:ed:9e:f3:30:e4:fc:0b:
a6:43:95:db:d0:f1:0b:6f:04:f3:72:84:de:ce:a4:5a:a0:55:
4b:fa:fc:b5:35:e5:4d:02:7c:be:69:07:1b:c2:c5:ac:d5:f7:
ae:41:88:cc:61:a3:69:0b:15:e8:9a:0a:35:86:d9:af:26:b3:
11:f1:ae:6b:43:9c:c1:91:02:39:98:e2:c4:24:e9:b9:35:de:
33:76:5a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH2RQrvc1TLZvLGDDir+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjYwNjMwMjAwMTMyWhcNMjYwNzAxMjAwMTMyWjAzMTEwLwYDVQQD
Eyg5NDhkNDFhZDM4MjI1ODI5Yjk4NTkxY2ZlZjk1NWY4OTQwMzRhMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCFKfXL5e90n9lR9DUEjDjdhXHyK
ShGJLxqR7MpTAlB+/LqqfPpKLFcK1XwdU/b4bjYEXt10DQQUIU+fQOAuC00Nxz21
lEkZvrcli65R4ri+iJRmzua5G2Y5ze81UPuxuT+AtZiZAYWJRY4MFod+IGagz39b
n44djhXhNBkBtf8E1KnMN2PYXorQGhtfIgcaD7EKYK7CG/f/AzI1jltc/8q4T3OS
uGtEMm3EIc3dZf8yAzAqlP4/eembN+39o72fq3E4NP+Eb4nLz2y9NphAgM6Yf2Dw
EuP1cUcn2ELW0wpiU1MGsKz0FHJ8YZlxv/sbPbWzQJngmJx9J64/PxvslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSNQa04IlgpuYWRz++VX4lANKEjMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7Y9T3QC
8LqvXXgsupsxLxzrK7blNtjlBjxd4rE4yhIQYIB856NvG2arEY1EzIuWCfrVLTQ/
XYjWX3noQGqrgG2FJAEUBCJS2ORakmhyUuYCOIY0VT/arTVxnlw1s67QwAUuXsdV
Dyo6HVhl1ntXwgUnHlah0xLVgFSMvCYOowvSSfaLgUdC0vfVU07W9te2FVOnB3DW
xO0rzIqYxVB7mt8/B9HlddXzWpXzpdHtnvMw5PwLpkOV29DxC28E83KE3s6kWqBV
S/r8tTXlTQJ8vmkHG8LFrNX3rkGIzGGjaQsV6JoKNYbZryazEfGua0OcwZECOZji
xCTpuTXeM3Zaaw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:22 2026 by rpki-client