Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: NM7TjEIRo3fesqi+GbTg+mpq8SaVwlC6VjwQlrUDUac=
Subject key identifier: 80:4F:5D:92:B8:2E:3F:C3:CF:DD:CE:1A:46:A4:10:87:2A:CC:22:B2
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019EDCC0F5E607F305BECD9BC62F06595343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 068B
Signing time: Thu 18 Jun 2026 22:01:33 +0000
Manifest this update: Thu 18 Jun 2026 22:01:33 +0000
Manifest next update: Fri 19 Jun 2026 22:01:33 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: 948rzMI2BfZo2klVyz34t50UJVRhlvy9qGJPnz+RFao=)
2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:c0:f5:e6:07:f3:05:be:cd:9b:c6:2f:06:59:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jun 18 22:01:33 2026 GMT
Not After : Jun 19 22:01:33 2026 GMT
Subject: CN=804f5d92b82e3fc3cfddce1a46a410872acc22b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:b5:90:fd:a5:8f:11:d2:88:8d:ba:15:5f:
bf:c4:6c:8b:de:cd:09:52:6b:6f:6e:a8:ee:79:78:
c5:83:17:23:7d:e8:3b:93:41:88:4e:27:f7:21:a9:
01:14:96:17:56:11:6f:92:c8:a9:8d:73:66:33:7a:
7b:59:9b:a0:d4:d9:00:c0:04:a2:42:c6:03:17:4f:
10:c9:26:96:3c:28:b8:ed:74:00:ed:00:fb:55:8f:
ef:b4:8c:01:85:6c:5b:16:72:a0:61:11:0e:9e:40:
3a:73:ed:90:cd:be:34:36:d8:c4:01:1e:fa:0b:a6:
b2:8b:d9:fd:d3:d8:62:9a:5f:b8:87:4e:8a:88:ec:
d9:60:a4:96:6a:e0:90:37:8d:1d:2e:50:1f:72:bb:
40:42:7d:31:7b:d8:16:e2:5d:5c:c8:09:77:39:35:
62:41:0d:f2:17:c8:4b:af:47:6f:cf:14:4d:1a:f3:
fe:b3:36:86:ae:12:75:69:96:be:27:5a:6f:d9:01:
87:99:a4:cd:4c:26:e0:7f:6c:1b:9e:c8:0c:e0:e8:
f4:d5:7e:90:e1:b7:89:f2:92:0e:e0:20:8d:8b:28:
be:84:b9:08:d6:47:15:e0:70:9e:bf:41:00:12:56:
02:74:1d:f9:10:f3:a2:dd:8c:25:9f:ef:04:52:d1:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:5D:92:B8:2E:3F:C3:CF:DD:CE:1A:46:A4:10:87:2A:CC:22:B2
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:9c:4b:b7:68:b1:d6:c2:5e:dc:55:27:57:2a:ac:f8:96:
af:46:4d:39:a7:c6:4c:43:1b:41:b5:49:65:60:0d:3e:73:df:
4b:49:0a:56:b3:d2:e6:40:2b:b1:20:97:c6:85:aa:7d:47:c6:
77:b6:06:5a:8d:f6:36:4b:aa:42:1c:c5:a5:6f:98:da:f3:98:
29:97:d2:44:30:36:ec:ee:4d:f7:a2:df:c2:5f:1c:aa:e9:26:
e5:29:d2:b6:9c:f0:03:a4:d9:4c:7a:12:41:7e:b6:c0:5b:ff:
a8:e2:99:39:32:01:ce:4c:e6:cb:5e:4d:68:66:9e:1a:1a:f9:
dc:7e:89:0f:59:16:50:c7:b3:32:f7:26:1c:e6:75:15:de:ea:
d2:65:c9:9c:5b:fc:9a:85:39:e0:28:d2:d1:90:3b:ea:a2:d2:
27:98:fe:a1:a7:db:ee:e5:b5:b4:d8:57:53:35:2b:54:e6:12:
ad:a7:c7:6f:96:8f:3a:56:e6:6e:c8:46:87:5c:8d:36:7b:45:
15:e2:46:1a:bb:39:a8:a2:06:0a:3c:bd:36:d1:2f:ff:c3:b8:
bb:10:4b:45:40:ab:c3:cb:b9:3b:e6:40:34:eb:a6:96:f6:6e:
8a:f6:28:6b:c9:c1:11:45:f6:75:47:f9:8c:05:9e:a0:42:d1:
e6:4c:bb:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7cwPXmB/MFvs2bxi8GWVNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTEwN2YxNmJjNmIwMGI3NjRjMzlhY2ZkNjMzMzYzNjQ2
ZDU5OTYwHhcNMjYwNjE4MjIwMTMzWhcNMjYwNjE5MjIwMTMzWjAzMTEwLwYDVQQD
Eyg4MDRmNWQ5MmI4MmUzZmMzY2ZkZGNlMWE0NmE0MTA4NzJhY2MyMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkW1kP2ljxHSiI26FV+/xGyL3s0J
UmtvbqjueXjFgxcjfeg7k0GITif3IakBFJYXVhFvksipjXNmM3p7WZug1NkAwASi
QsYDF08QySaWPCi47XQA7QD7VY/vtIwBhWxbFnKgYREOnkA6c+2Qzb40NtjEAR76
C6ayi9n909himl+4h06KiOzZYKSWauCQN40dLlAfcrtAQn0xe9gW4l1cyAl3OTVi
QQ3yF8hLr0dvzxRNGvP+szaGrhJ1aZa+J1pv2QGHmaTNTCbgf2wbnsgM4Oj01X6Q
4beJ8pIO4CCNiyi+hLkI1kcV4HCev0EAElYCdB35EPOi3Ywln+8EUtGRjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBPXZK4Lj/Dz93OGkakEIcqzCKyMB8GA1UdIwQY
MBaAFPWhB/FrxrALdkw5rP1jM2NkbVmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmIt
OWYxY2ZiOGQxNDI4LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmItOWYxY2ZiOGQxNDI4
LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE+cS7do
sdbCXtxVJ1cqrPiWr0ZNOafGTEMbQbVJZWANPnPfS0kKVrPS5kArsSCXxoWqfUfG
d7YGWo32NkuqQhzFpW+Y2vOYKZfSRDA27O5N96Lfwl8cqukm5SnStpzwA6TZTHoS
QX62wFv/qOKZOTIBzkzmy15NaGaeGhr53H6JD1kWUMezMvcmHOZ1Fd7q0mXJnFv8
moU54CjS0ZA76qLSJ5j+oafb7uW1tNhXUzUrVOYSrafHb5aPOlbmbshGh1yNNntF
FeJGGrs5qKIGCjy9NtEv/8O4uxBLRUCrw8u5O+ZANOumlvZuivYoa8nBEUX2dUf5
jAWeoELR5ky78w==
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:34:09 2026 by rpki-client