Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier: Nrm/dK8iYkp1QDbCoiLpODf1qKDIpQ1jYFJqi77nrBs=
Subject key identifier: A2:95:AE:C2:7B:11:9B:B4:94:7A:F2:31:C6:86:A8:E0:5E:D8:1B:C5
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 019F17F96DE23E29370038D5A24284F1C87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 10:00:50 +0000
Manifest this update: Tue 30 Jun 2026 10:00:50 +0000
Manifest next update: Wed 01 Jul 2026 10:00:50 +0000
Files and hashes: 1: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (hash: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14=)
2: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: hDbQ7NS/eorzZwbUJVfVsuS9Sf1U8BjPxIpGKiRGct4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:6d:e2:3e:29:37:00:38:d5:a2:42:84:f1:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Jun 30 10:00:50 2026 GMT
Not After : Jul 1 10:00:50 2026 GMT
Subject: CN=a295aec27b119bb4947af231c686a8e05ed81bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:87:00:a6:3f:d6:1c:e7:8d:9f:5f:be:a9:
15:76:21:70:27:f5:dc:3a:d8:6d:c5:a6:68:af:0f:
47:60:71:cc:33:57:da:41:91:41:5b:c4:9d:38:b7:
51:2f:81:34:33:42:84:31:df:a1:a8:aa:50:a7:7a:
b3:a4:87:51:b0:04:03:1b:fe:22:2a:2e:49:d2:22:
2b:40:d1:fb:6a:52:a8:9c:99:b5:f3:da:d7:17:8e:
38:5a:de:5d:41:ca:1b:48:e4:67:34:66:78:d0:1f:
cd:3b:07:b8:bd:54:f9:9c:94:59:1e:5f:46:82:d0:
0a:2e:6a:b8:cc:6f:39:27:77:ee:56:52:e3:07:d1:
3e:84:3f:05:b7:9a:60:5b:7a:08:29:b6:d4:0f:56:
35:3c:3b:0b:49:b5:ff:e3:7e:4d:8f:c5:a8:00:6d:
c4:28:3e:5c:ff:9e:f2:50:fa:70:cd:21:14:21:e1:
9e:bd:72:86:d4:d9:d1:82:0a:a7:7a:e1:22:e6:0f:
42:85:b8:74:85:14:5a:b6:09:4d:db:07:be:bc:3b:
01:e4:ec:86:33:7b:97:c1:6b:82:30:f3:5f:a4:d5:
d0:09:b0:02:a3:dd:df:3d:c3:28:6b:5c:14:f2:cf:
f1:0f:cb:59:4e:5a:f4:6f:80:8a:d4:ec:da:b8:f0:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:AE:C2:7B:11:9B:B4:94:7A:F2:31:C6:86:A8:E0:5E:D8:1B:C5
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b9:6e:0e:44:8d:ee:f3:07:cf:ee:bf:a2:ac:f2:68:a1:1c:
b9:84:d2:16:ba:43:df:a4:d9:f4:af:5c:b1:49:9e:41:72:4b:
db:b2:c6:81:1c:18:cc:5e:b9:24:90:7f:b3:e8:a7:8c:f3:34:
55:99:9e:8b:3a:e5:a5:18:e9:c0:48:1e:89:3a:7b:fd:3d:7f:
35:0d:44:3d:6a:eb:38:81:20:8e:83:76:ba:94:c1:3f:89:af:
02:cc:24:cc:25:df:1f:ec:6e:97:98:11:04:70:3d:2d:99:0b:
eb:b6:e9:23:88:0e:f4:92:4c:3f:29:45:d1:54:e7:2f:56:81:
3d:06:7f:8d:db:70:9f:6e:0a:3b:99:62:42:28:1e:a3:30:38:
3f:31:5f:0a:2a:2b:e2:43:c5:79:c6:b3:53:c3:66:b9:0f:02:
bc:88:c2:36:9e:fd:5b:05:20:9d:86:aa:30:a9:2a:25:2b:2f:
03:66:93:6c:4c:eb:8a:6a:60:ad:fd:d1:8d:69:42:69:48:f2:
f8:3a:22:74:b4:bf:54:b5:20:ff:a2:8c:a5:3a:b2:5b:76:38:
69:ef:41:63:3e:97:a2:e0:19:4d:cf:b7:27:1f:01:94:a8:25:
5e:c9:2d:3a:fe:26:c3:56:b8:47:59:96:e2:0c:fd:5d:1c:c2:
73:43:1e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+W3iPik3ADjVokKE8ch8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2NGRjZjcxOWVkODk5OWRhNzkyZjZmYmZjM2ZlOWJj
NzA4OTgwHhcNMjYwNjMwMTAwMDUwWhcNMjYwNzAxMTAwMDUwWjAzMTEwLwYDVQQD
EyhhMjk1YWVjMjdiMTE5YmI0OTQ3YWYyMzFjNjg2YThlMDVlZDgxYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBSHAKY/1hznjZ9fvqkVdiFwJ/Xc
OthtxaZorw9HYHHMM1faQZFBW8SdOLdRL4E0M0KEMd+hqKpQp3qzpIdRsAQDG/4i
Ki5J0iIrQNH7alKonJm189rXF444Wt5dQcobSORnNGZ40B/NOwe4vVT5nJRZHl9G
gtAKLmq4zG85J3fuVlLjB9E+hD8Ft5pgW3oIKbbUD1Y1PDsLSbX/435Nj8WoAG3E
KD5c/57yUPpwzSEUIeGevXKG1NnRggqneuEi5g9Chbh0hRRatglN2we+vDsB5OyG
M3uXwWuCMPNfpNXQCbACo93fPcMoa1wU8s/xD8tZTlr0b4CK1OzauPAYdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKVrsJ7EZu0lHryMcaGqOBe2BvFMB8GA1UdIwQY
MBaAFOYAZNz3Ge2Jmdp5L2+/w/6bxwiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMt
ZThiOGZjYzQxZTg1LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMtZThiOGZjYzQxZTg1
LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7luDkSN
7vMHz+6/oqzyaKEcuYTSFrpD36TZ9K9csUmeQXJL27LGgRwYzF65JJB/s+injPM0
VZmeizrlpRjpwEgeiTp7/T1/NQ1EPWrrOIEgjoN2upTBP4mvAswkzCXfH+xul5gR
BHA9LZkL67bpI4gO9JJMPylF0VTnL1aBPQZ/jdtwn24KO5liQigeozA4PzFfCior
4kPFecazU8NmuQ8CvIjCNp79WwUgnYaqMKkqJSsvA2aTbEzrimpgrf3RjWlCaUjy
+DoidLS/VLUg/6KMpTqyW3Y4ae9BYz6XouAZTc+3Jx8BlKglXsktOv4mw1a4R1mW
4gz9XRzCc0Merw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client