Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: zwvBgJVDo8AVj2LHM933JAOD93FGBXnux2A+vevorLQ=
Subject key identifier: F5:B2:76:A3:28:A1:D2:F4:92:4D:EF:C5:CB:80:4E:1E:D0:38:AC:05
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019EB9FD56B4F208D1BDA68A502BD501261F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 195D
Signing time: Fri 12 Jun 2026 04:00:48 +0000
Manifest this update: Fri 12 Jun 2026 04:00:48 +0000
Manifest next update: Sat 13 Jun 2026 04:00:48 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: +4BPPcd1Gn4E+3N11uE+YpvckMFCjsC1QC2io+Da6A8=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:56:b4:f2:08:d1:bd:a6:8a:50:2b:d5:01:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jun 12 04:00:48 2026 GMT
Not After : Jun 13 04:00:48 2026 GMT
Subject: CN=f5b276a328a1d2f4924defc5cb804e1ed038ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:e5:27:2f:a4:18:16:23:de:32:1d:f0:43:
3e:71:28:b9:b1:9c:c5:1f:6c:80:a4:5a:40:76:ef:
2a:d5:bf:5c:7e:99:88:2f:55:ea:0b:ca:03:06:a4:
5b:bd:1b:89:c3:fb:26:0e:ac:d7:3b:e4:cc:71:99:
fe:b4:71:e2:b8:8e:89:cb:98:d8:bb:db:d5:82:3a:
83:d6:03:f2:b8:0d:71:d3:00:78:ad:ed:33:16:13:
53:98:90:ec:8a:20:a3:d8:4e:51:0c:33:8a:4c:71:
b0:71:8f:bc:a9:e9:64:4f:6b:9f:77:68:1c:ee:8d:
20:5d:56:c3:c2:5c:c8:11:7e:5b:98:3d:1f:c1:24:
92:62:6f:d1:be:b5:ff:5a:10:4e:e0:28:83:e9:89:
9c:c0:18:61:54:63:f0:21:94:b1:cf:74:da:a3:f6:
28:9a:ee:23:bc:10:68:84:c3:35:ec:95:e2:38:9f:
bc:29:ed:35:9a:be:98:71:70:2a:f0:e9:3d:96:e0:
8c:31:18:3d:c5:6f:45:ce:66:db:92:cf:2b:f8:ba:
a6:cc:59:13:2a:0d:7b:b8:89:39:db:22:a1:97:6a:
e8:6c:67:87:e8:fe:c8:b2:72:42:aa:b6:b9:e7:b5:
bf:4c:7a:32:6b:63:71:c2:98:45:df:61:71:3b:ef:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:76:A3:28:A1:D2:F4:92:4D:EF:C5:CB:80:4E:1E:D0:38:AC:05
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:b6:1b:93:3e:23:09:0f:b3:33:8c:1c:24:e9:f8:3d:89:
cf:d2:93:3f:43:ed:76:28:ac:36:82:3a:7c:f2:47:83:dc:25:
eb:d1:6a:fc:b5:5b:4f:97:05:ee:83:71:e5:d8:8d:d9:23:b4:
36:b7:cf:ab:0a:1d:c3:a9:dc:ac:82:6a:1f:b8:02:47:22:cc:
9c:4c:dd:c2:92:83:16:80:d8:eb:ea:fa:8e:77:79:5d:2d:96:
5e:03:e3:9f:a4:09:8c:7c:9c:b9:e9:40:7d:67:87:fd:4d:16:
83:a0:28:76:85:a8:f9:74:db:cb:86:ba:38:5b:ab:e4:73:7f:
e6:99:2a:8e:36:d5:ed:a1:a5:ec:d3:14:f4:14:c9:ba:55:d9:
29:ed:c7:14:9e:26:3b:11:d6:9a:e9:e8:f2:5d:56:2c:8b:18:
89:be:df:87:30:ff:83:8b:d3:87:18:a8:c2:e1:be:53:94:6d:
72:69:89:b5:80:e8:cd:79:de:a7:45:91:6b:eb:c4:04:22:c7:
37:f9:97:ba:68:e4:bc:0a:66:e7:3b:b2:7c:ab:fb:36:08:44:
11:47:f2:ac:93:1e:7b:f6:db:47:27:c2:c4:9a:f8:4c:71:94:
d9:a5:e8:52:b8:a4:0b:22:31:e2:27:f7:ba:85:bd:b6:1b:8f:
66:66:1e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/Va08gjRvaaKUCvVASYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjYwNjEyMDQwMDQ4WhcNMjYwNjEzMDQwMDQ4WjAzMTEwLwYDVQQD
EyhmNWIyNzZhMzI4YTFkMmY0OTI0ZGVmYzVjYjgwNGUxZWQwMzhhYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkujlJy+kGBYj3jId8EM+cSi5sZzF
H2yApFpAdu8q1b9cfpmIL1XqC8oDBqRbvRuJw/smDqzXO+TMcZn+tHHiuI6Jy5jY
u9vVgjqD1gPyuA1x0wB4re0zFhNTmJDsiiCj2E5RDDOKTHGwcY+8qelkT2ufd2gc
7o0gXVbDwlzIEX5bmD0fwSSSYm/RvrX/WhBO4CiD6YmcwBhhVGPwIZSxz3Tao/Yo
mu4jvBBohMM17JXiOJ+8Ke01mr6YcXAq8Ok9luCMMRg9xW9Fzmbbks8r+LqmzFkT
Kg17uIk52yKhl2robGeH6P7IsnJCqra557W/THoya2NxwphF32FxO+8TwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWydqMoodL0kk3vxcuATh7QOKwFMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFS2G5M+
IwkPszOMHCTp+D2Jz9KTP0PtdiisNoI6fPJHg9wl69Fq/LVbT5cF7oNx5diN2SO0
NrfPqwodw6ncrIJqH7gCRyLMnEzdwpKDFoDY6+r6jnd5XS2WXgPjn6QJjHycuelA
fWeH/U0Wg6AodoWo+XTby4a6OFur5HN/5pkqjjbV7aGl7NMU9BTJulXZKe3HFJ4m
OxHWmuno8l1WLIsYib7fhzD/g4vThxiowuG+U5RtcmmJtYDozXnep0WRa+vEBCLH
N/mXumjkvApm5zuyfKv7NghEEUfyrJMee/bbRyfCxJr4THGU2aXoUrikCyIx4if3
uoW9thuPZmYeXw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:09 2026 by rpki-client