Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: yqLbLcvDJJtvX7Tifb44nxJRhMaOPbSTdHZfLU+1L6w=
Subject key identifier: FA:91:D3:55:1F:E4:F3:B6:D7:1C:3E:07:27:16:E6:1B:A2:88:DE:8C
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019E9D05ACA022C40237698EC8DAD6F6EAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0F68
Signing time: Sat 06 Jun 2026 13:00:55 +0000
Manifest this update: Sat 06 Jun 2026 13:00:55 +0000
Manifest next update: Sun 07 Jun 2026 13:00:55 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: JM0Hriu4UQDoHuRWRWgy9bzUOM8iWk8qWqbb7qIqvZw=)
2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:ac:a0:22:c4:02:37:69:8e:c8:da:d6:f6:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Jun 6 13:00:55 2026 GMT
Not After : Jun 7 13:00:55 2026 GMT
Subject: CN=fa91d3551fe4f3b6d71c3e072716e61ba288de8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:0d:04:5b:6f:a7:78:ca:8a:97:b8:92:05:
46:c9:1a:27:91:06:fb:c6:4f:89:a7:b5:4c:f2:37:
b7:56:3f:1c:0a:8e:23:7c:be:cf:fa:84:60:9a:24:
1c:54:34:40:55:9c:a3:76:7c:cb:78:9d:40:27:d7:
46:28:a1:5c:9a:b7:69:d4:74:8c:fc:c1:48:74:41:
ad:16:6f:15:5b:ea:6f:38:77:c3:1a:ed:cb:8d:2e:
f6:3f:85:00:c1:58:a5:d9:6c:98:6c:3c:d3:aa:a7:
d6:62:0c:de:ab:eb:51:03:ba:8d:f3:51:ac:d5:5e:
91:90:48:3d:ab:96:30:9c:c7:09:25:8a:e3:81:3a:
08:49:24:b2:62:96:f5:8b:47:0d:be:7e:c7:d7:2c:
86:f0:af:6c:72:58:a6:38:11:b9:b8:7d:50:f8:23:
10:39:9b:f0:6a:70:8e:08:3d:32:f6:a5:ff:7b:e8:
16:d1:d9:8a:ca:1d:4e:77:87:80:18:be:b7:8f:81:
5b:91:33:77:ed:e5:f7:65:29:39:85:66:74:31:14:
9f:1d:11:ee:aa:9a:ed:a9:f2:82:7a:62:b9:39:3a:
91:76:18:df:08:14:76:a7:28:c4:8f:aa:9b:23:8d:
60:bc:54:bf:6a:c2:89:57:d4:54:cf:f4:44:ca:d0:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:D3:55:1F:E4:F3:B6:D7:1C:3E:07:27:16:E6:1B:A2:88:DE:8C
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:27:0a:7a:65:94:a4:e7:cf:3f:6d:d0:5c:ce:a6:4b:89:
e3:09:51:60:56:09:a1:a6:07:9c:bc:08:c2:e2:e6:97:8e:89:
bb:09:93:38:1c:19:88:b0:bd:48:2d:e6:45:84:31:84:3b:34:
04:48:27:b3:2a:e0:24:06:23:ea:7b:bd:ae:fe:2e:ae:ba:71:
70:46:1c:4b:7c:96:3b:2a:c6:ba:1a:83:7e:b1:2b:b9:b2:88:
6c:d3:fb:d3:b1:53:af:80:8a:a8:b3:b3:29:4a:8c:32:c8:ea:
f2:48:1a:8a:65:ef:2c:69:9e:cb:44:60:5f:ab:13:be:13:a6:
b6:2e:29:01:ca:50:21:09:64:e3:0b:cb:3a:46:1e:27:b6:f2:
b3:e9:a3:38:97:57:ca:9f:63:e0:b7:ea:6d:87:10:cc:84:60:
9b:8c:58:53:62:48:26:fb:21:28:2c:78:e0:4f:f9:d3:e6:b7:
4e:1a:3f:35:3c:53:34:e0:7d:b1:0a:db:e7:9d:0d:c1:65:0e:
0c:63:88:e8:92:65:3d:0e:43:72:aa:43:62:70:63:56:df:66:
56:2f:4d:c2:84:5c:0f:31:01:52:69:0e:4f:6d:85:c6:76:aa:
64:5a:a6:c3:9e:11:5c:d3:8c:90:af:d6:22:90:08:6c:4f:03:
c0:48:69:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dBaygIsQCN2mOyNrW9uqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NmFiYjFhZDU2N2U1YmIxZTQ3NWE3MmEwYTY4NDUzZTNm
YmExY2QwHhcNMjYwNjA2MTMwMDU1WhcNMjYwNjA3MTMwMDU1WjAzMTEwLwYDVQQD
EyhmYTkxZDM1NTFmZTRmM2I2ZDcxYzNlMDcyNzE2ZTYxYmEyODhkZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ANBFtvp3jKipe4kgVGyRonkQb7
xk+Jp7VM8je3Vj8cCo4jfL7P+oRgmiQcVDRAVZyjdnzLeJ1AJ9dGKKFcmrdp1HSM
/MFIdEGtFm8VW+pvOHfDGu3LjS72P4UAwVil2WyYbDzTqqfWYgzeq+tRA7qN81Gs
1V6RkEg9q5YwnMcJJYrjgToISSSyYpb1i0cNvn7H1yyG8K9sclimOBG5uH1Q+CMQ
OZvwanCOCD0y9qX/e+gW0dmKyh1Od4eAGL63j4FbkTN37eX3ZSk5hWZ0MRSfHRHu
qprtqfKCemK5OTqRdhjfCBR2pyjEj6qbI41gvFS/asKJV9RUz/REytAExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqR01Uf5PO21xw+BycW5huiiN6MMB8GA1UdIwQY
MBaAFCdquxrVZ+W7HkdacqCmhFPj+6HNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYt
YmIwZWVkMTNmMjNiLzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYtYmIwZWVkMTNmMjNi
LzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5EnCnpl
lKTnzz9t0FzOpkuJ4wlRYFYJoaYHnLwIwuLml46JuwmTOBwZiLC9SC3mRYQxhDs0
BEgnsyrgJAYj6nu9rv4urrpxcEYcS3yWOyrGuhqDfrErubKIbNP707FTr4CKqLOz
KUqMMsjq8kgaimXvLGmey0RgX6sTvhOmti4pAcpQIQlk4wvLOkYeJ7bys+mjOJdX
yp9j4LfqbYcQzIRgm4xYU2JIJvshKCx44E/50+a3Tho/NTxTNOB9sQrb550NwWUO
DGOI6JJlPQ5DcqpDYnBjVt9mVi9NwoRcDzEBUmkOT22FxnaqZFqmw54RXNOMkK/W
IpAIbE8DwEhpHg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:45:54 2026 by rpki-client