Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: VoIZTK4OC/n2cmpUytBObrl0xVfRTrs2BAFGugnqQ/s=
Subject key identifier: B1:05:48:D7:65:3A:A3:A0:FD:68:8F:7D:59:53:8F:C2:60:C0:0E:8F
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019F11899A002D8A736D5F0034E635D9A83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 16C6
Signing time: Mon 29 Jun 2026 04:00:58 +0000
Manifest this update: Mon 29 Jun 2026 04:00:58 +0000
Manifest next update: Tue 30 Jun 2026 04:00:58 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: 8g/7RmiESs0OR2Z0+U1H+1xira0/2Hx4L2qpcsVh4YU=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:9a:00:2d:8a:73:6d:5f:00:34:e6:35:d9:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Jun 29 04:00:58 2026 GMT
Not After : Jun 30 04:00:58 2026 GMT
Subject: CN=b10548d7653aa3a0fd688f7d59538fc260c00e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:1e:ad:93:a0:b2:7e:06:3f:9a:e3:51:bf:
e8:35:2c:a9:48:82:0c:f9:e4:09:b6:d0:b5:e4:b6:
c4:16:81:a8:b1:d9:05:f4:68:75:49:15:36:cb:c9:
1e:38:f5:9a:b3:cc:0c:61:1d:d7:06:ca:78:4a:90:
e3:de:c2:f5:5f:96:e4:5f:fa:f2:41:7c:b9:fe:a9:
72:4a:83:fd:0b:f9:49:82:76:99:df:7b:f6:11:30:
d9:78:fa:99:8e:1b:98:8f:f1:e0:7e:72:5b:aa:f8:
21:d9:e9:5f:ef:0f:58:85:43:47:11:58:e4:50:ce:
e1:87:d9:b4:c9:9b:ec:eb:2f:d3:8c:6c:62:3a:43:
7a:61:a9:08:ba:0c:f3:cc:78:cf:78:d4:91:e3:4a:
e1:52:e7:b3:02:fe:27:04:61:e1:bd:ac:5a:1e:b5:
ae:56:d9:12:c7:a3:a6:eb:91:63:18:83:bb:c3:a9:
e3:94:9c:b8:f2:ca:5d:d4:10:a4:b4:62:22:bc:51:
dd:97:cf:9c:72:26:6c:6a:f2:54:70:9d:fc:e4:14:
ed:9e:52:f5:a9:d7:7f:53:71:75:2b:4b:09:79:40:
b9:54:c4:d3:89:c9:be:ae:a4:16:8e:d6:bc:70:cd:
af:f0:30:d1:4c:19:13:4a:15:d7:d5:68:11:49:e5:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:05:48:D7:65:3A:A3:A0:FD:68:8F:7D:59:53:8F:C2:60:C0:0E:8F
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:08:3b:91:51:85:d2:5a:40:f1:56:23:63:4f:ce:59:12:
aa:78:ae:e6:13:63:6c:ed:b6:43:1d:ee:19:d6:19:96:5c:6c:
04:4f:8f:7f:60:18:12:5c:f1:90:8c:eb:42:99:ea:42:3c:1d:
41:32:78:ab:3f:68:24:e8:00:75:c0:3f:60:93:dc:34:1b:3b:
2c:0a:e6:3e:be:86:65:88:67:87:ee:b6:3e:74:ae:99:0c:aa:
59:8b:da:9c:b6:a2:10:e7:18:ed:4e:70:9b:b1:3b:f2:49:bd:
03:ba:f4:bb:f7:fd:d5:e1:fc:cc:b9:dd:0f:db:53:48:9b:3c:
58:31:d8:7e:3a:87:d6:b2:6d:e2:f9:85:64:3d:e7:f9:b0:ae:
ee:7c:d3:76:a9:7e:31:c1:11:9a:73:7e:45:a9:f0:05:63:b8:
1d:2d:9c:c4:71:a3:f5:53:77:04:0c:f7:0d:47:88:bc:ba:3c:
92:90:a0:32:ec:24:d5:5b:6a:b2:26:2f:3e:c5:c2:5c:9f:98:
b1:23:b6:76:ce:ed:67:0a:91:a0:85:49:02:a8:f3:71:34:18:
9d:70:41:3b:63:38:8c:b3:18:aa:bf:bf:de:8a:73:45:0c:82:
91:46:2d:bc:6e:08:eb:78:4d:3f:e2:df:cf:14:40:81:1c:94:
89:62:57:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RiZoALYpzbV8ANOY12ag8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3
Mjc3YzAwHhcNMjYwNjI5MDQwMDU4WhcNMjYwNjMwMDQwMDU4WjAzMTEwLwYDVQQD
EyhiMTA1NDhkNzY1M2FhM2EwZmQ2ODhmN2Q1OTUzOGZjMjYwYzAwZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA4erZOgsn4GP5rjUb/oNSypSIIM
+eQJttC15LbEFoGosdkF9Gh1SRU2y8keOPWas8wMYR3XBsp4SpDj3sL1X5bkX/ry
QXy5/qlySoP9C/lJgnaZ33v2ETDZePqZjhuYj/HgfnJbqvgh2elf7w9YhUNHEVjk
UM7hh9m0yZvs6y/TjGxiOkN6YakIugzzzHjPeNSR40rhUuezAv4nBGHhvaxaHrWu
VtkSx6Om65FjGIO7w6njlJy48spd1BCktGIivFHdl8+cciZsavJUcJ385BTtnlL1
qdd/U3F1K0sJeUC5VMTTicm+rqQWjta8cM2v8DDRTBkTShXX1WgRSeW67QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEFSNdlOqOg/WiPfVlTj8JgwA6PMB8GA1UdIwQY
MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt
ZmZhNDk1MGExY2NiLzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni
LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+IIO5FR
hdJaQPFWI2NPzlkSqniu5hNjbO22Qx3uGdYZllxsBE+Pf2AYElzxkIzrQpnqQjwd
QTJ4qz9oJOgAdcA/YJPcNBs7LArmPr6GZYhnh+62PnSumQyqWYvanLaiEOcY7U5w
m7E78km9A7r0u/f91eH8zLndD9tTSJs8WDHYfjqH1rJt4vmFZD3n+bCu7nzTdql+
McERmnN+RanwBWO4HS2cxHGj9VN3BAz3DUeIvLo8kpCgMuwk1VtqsiYvPsXCXJ+Y
sSO2ds7tZwqRoIVJAqjzcTQYnXBBO2M4jLMYqr+/3opzRQyCkUYtvG4I63hNP+Lf
zxRAgRyUiWJX/A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:55 2026 by rpki-client