Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: 4xirvX3zgAelyvkvx5vXT8mgIY3+44G4+qLAy+Nfz/4=
Subject key identifier: 6B:1E:9F:5C:85:8A:AC:8E:FB:9B:2E:57:56:59:51:37:1F:9A:E9:DA
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019E9D3C8C62A81410FC2C23BF085FB78761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 07C9
Signing time: Sat 06 Jun 2026 14:00:51 +0000
Manifest this update: Sat 06 Jun 2026 14:00:51 +0000
Manifest next update: Sun 07 Jun 2026 14:00:51 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: c8SPprv+KiwfLdoCihND0nx2URhBqOUYWoyzdmdJ+Hg=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:8c:62:a8:14:10:fc:2c:23:bf:08:5f:b7:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jun 6 14:00:51 2026 GMT
Not After : Jun 7 14:00:51 2026 GMT
Subject: CN=6b1e9f5c858aac8efb9b2e57565951371f9ae9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:f8:dc:78:f3:a6:68:a7:d9:85:bd:fe:cb:
95:88:06:83:7f:a4:7e:26:15:44:cc:f7:e2:dc:16:
04:65:1c:68:a7:50:e6:75:d3:c8:da:73:06:54:77:
6c:e2:a9:ae:a4:1d:9f:4e:c7:a7:aa:12:b2:ac:58:
af:c8:ad:25:75:0b:d5:25:85:57:d5:67:01:37:4d:
53:b1:4d:0e:4d:69:24:06:d7:2c:10:97:30:7e:9e:
75:95:01:f1:74:ad:5f:48:f6:e9:59:d5:3e:7f:cc:
d2:fc:7e:bc:01:e5:2e:5a:1a:0e:9c:b4:50:21:24:
d8:7e:5b:d3:8d:89:d5:a7:a2:cf:ea:6d:e5:29:79:
44:8c:6d:ae:a5:90:b7:d9:76:1b:c5:aa:db:51:49:
ce:81:d3:f3:84:6c:70:eb:ef:3a:71:f7:94:54:be:
d7:ff:d9:8d:c7:9f:8c:8d:e3:e0:10:b2:b3:80:77:
5e:61:78:fb:f9:4b:34:78:ba:47:0d:4e:4f:4d:48:
95:d8:b5:e9:e2:af:c6:2b:f1:c8:9a:75:22:c2:cd:
43:79:9a:07:bd:b8:cc:ba:a6:51:4a:c8:9d:c1:05:
5f:50:b2:4a:89:e9:63:e2:89:3b:e3:d3:44:0c:ad:
4f:42:36:7a:51:42:29:9e:0d:6a:05:c2:5b:16:ca:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1E:9F:5C:85:8A:AC:8E:FB:9B:2E:57:56:59:51:37:1F:9A:E9:DA
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a2:f1:e3:ff:35:9f:95:87:c4:77:58:35:2a:14:06:2a:d7:
55:e3:d9:41:14:b0:b2:aa:72:11:34:01:bc:c4:ad:ba:cf:c1:
2f:18:1d:66:2c:76:40:ad:8f:7a:1f:ee:11:90:59:1e:48:e1:
b6:28:e8:1c:cc:58:64:51:3c:81:8f:46:d7:9f:5d:0e:3b:f5:
b4:f5:73:b3:77:32:ce:a9:4a:0e:87:51:e2:c5:45:9c:1a:52:
a3:23:bf:74:e2:42:a2:ac:1f:14:56:64:9b:99:8b:2c:01:72:
d4:7c:09:fd:bf:cb:c0:4c:a9:f3:03:71:70:d6:a2:a1:6c:bc:
32:af:cb:2f:d6:d5:9f:6a:44:d3:da:fd:35:40:9b:f5:b3:e9:
61:cf:12:0b:e8:45:a3:86:4a:e9:9b:1c:de:86:0c:c5:cb:04:
ca:4c:d5:bf:d5:18:5b:97:d7:9e:86:39:02:b8:11:e9:cd:5c:
3c:14:c3:f0:0f:20:0f:83:16:6b:5d:ff:0a:20:49:ed:09:c0:
27:67:28:b1:3a:97:d8:55:54:02:be:05:92:4b:a2:da:25:b7:
14:b6:65:29:ae:c1:11:70:1d:7f:41:6b:0a:23:1f:c7:eb:5e:
7c:a4:83:c5:9d:9d:16:01:48:25:2c:7a:52:9a:f8:e3:a5:04:
79:04:7e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dPIxiqBQQ/Cwjvwhft4dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi
ODU0ODEwHhcNMjYwNjA2MTQwMDUxWhcNMjYwNjA3MTQwMDUxWjAzMTEwLwYDVQQD
Eyg2YjFlOWY1Yzg1OGFhYzhlZmI5YjJlNTc1NjU5NTEzNzFmOWFlOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsn43Hjzpmin2YW9/suViAaDf6R+
JhVEzPfi3BYEZRxop1DmddPI2nMGVHds4qmupB2fTsenqhKyrFivyK0ldQvVJYVX
1WcBN01TsU0OTWkkBtcsEJcwfp51lQHxdK1fSPbpWdU+f8zS/H68AeUuWhoOnLRQ
ISTYflvTjYnVp6LP6m3lKXlEjG2upZC32XYbxarbUUnOgdPzhGxw6+86cfeUVL7X
/9mNx5+MjePgELKzgHdeYXj7+Us0eLpHDU5PTUiV2LXp4q/GK/HImnUiws1DeZoH
vbjMuqZRSsidwQVfULJKielj4ok749NEDK1PQjZ6UUIpng1qBcJbFsqkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsen1yFiqyO+5suV1ZZUTcfmunaMB8GA1UdIwQY
MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt
NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2
LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaLx4/81
n5WHxHdYNSoUBirXVePZQRSwsqpyETQBvMStus/BLxgdZix2QK2Peh/uEZBZHkjh
tijoHMxYZFE8gY9G159dDjv1tPVzs3cyzqlKDodR4sVFnBpSoyO/dOJCoqwfFFZk
m5mLLAFy1HwJ/b/LwEyp8wNxcNaioWy8Mq/LL9bVn2pE09r9NUCb9bPpYc8SC+hF
o4ZK6Zsc3oYMxcsEykzVv9UYW5fXnoY5ArgR6c1cPBTD8A8gD4MWa13/CiBJ7QnA
J2cosTqX2FVUAr4Fkkui2iW3FLZlKa7BEXAdf0FrCiMfx+tefKSDxZ2dFgFIJSx6
Upr446UEeQR+cw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:22:38 2026 by rpki-client