Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: MW3c4JJAtfHJRyVzVS2uLLOJ1+Bsony6MrTLDNW8Gq8=
Subject key identifier: B7:7F:50:46:7A:30:76:52:6E:94:98:54:79:65:05:4E:26:8C:81:8F
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019F111C031E9E761055BF7AE5A5AD9C96B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 12F9
Signing time: Mon 29 Jun 2026 02:01:16 +0000
Manifest this update: Mon 29 Jun 2026 02:01:16 +0000
Manifest next update: Tue 30 Jun 2026 02:01:16 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: t8ASwfHIaaVdeGWD4EpV007QbnotIKrK7aJcRbO3SbA=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:03:1e:9e:76:10:55:bf:7a:e5:a5:ad:9c:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Jun 29 02:01:16 2026 GMT
Not After : Jun 30 02:01:16 2026 GMT
Subject: CN=b77f50467a3076526e9498547965054e268c818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:5a:a2:aa:d8:77:43:3a:ad:7a:81:3d:2d:
67:d0:ad:68:d7:14:fc:32:db:21:08:94:74:ea:06:
b1:f0:2c:54:bc:5e:46:ad:d6:a0:a5:55:20:cf:dc:
9e:7c:a7:9a:a0:17:bd:c2:84:ea:03:45:19:2d:84:
4a:e3:25:a3:b4:f6:cc:14:f6:5c:39:e2:65:b3:0f:
20:fc:dd:5e:29:30:5f:ea:54:81:c8:11:98:29:f4:
50:26:d7:12:06:8f:68:f4:1c:88:21:18:5c:c3:8c:
c1:d6:3f:9f:7f:db:9e:4e:b0:d5:da:eb:17:e6:d9:
d6:e9:aa:26:2a:43:76:13:63:75:c3:0b:d1:c1:f4:
6d:f9:37:44:93:9e:47:ca:c5:fa:ec:b2:80:dd:77:
29:2c:3a:16:ab:3a:39:4a:77:21:18:b9:7e:3a:e5:
8a:c6:07:5a:dd:32:67:8b:5e:dc:7a:a5:9b:47:21:
c7:79:00:8c:cc:bd:26:a2:66:74:ac:e0:9d:d6:0c:
4a:cd:a9:31:af:79:a9:8f:f9:5f:bd:77:8a:12:12:
21:f0:9a:ec:62:fb:05:d4:ec:7c:76:38:a1:41:9b:
80:26:84:3a:9c:3e:a2:17:8e:5f:a1:4d:dc:e6:c0:
5c:f5:98:0d:2f:fd:20:4b:40:39:64:17:e8:00:66:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:50:46:7A:30:76:52:6E:94:98:54:79:65:05:4E:26:8C:81:8F
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:98:2c:08:a2:df:3b:3f:dd:92:0e:5b:06:d2:16:51:3d:
4f:c7:85:44:6f:8e:75:24:34:f9:b7:a9:22:ae:77:6a:a0:20:
ee:55:ee:e4:df:93:f1:d1:7c:82:75:92:32:71:ae:aa:52:8d:
10:45:84:23:42:7b:90:fb:a0:47:62:b9:c5:72:c0:96:74:84:
c8:70:1e:14:f1:16:61:53:53:e8:b3:89:6a:c7:41:b3:b0:dd:
83:16:9a:d5:10:74:cf:8c:de:d8:32:a0:22:44:c5:e6:c3:52:
10:69:d9:e3:7b:c6:de:83:aa:e0:de:26:06:af:f8:65:a5:ee:
01:03:2b:60:41:55:93:46:c4:5f:15:2a:e8:91:b6:db:af:e4:
8c:a0:d4:ea:87:49:3c:41:d5:1c:d9:0d:69:7b:0c:16:5e:4b:
17:31:15:21:0e:6d:58:ad:ac:97:53:5c:12:ad:47:66:70:a2:
41:dc:f9:4e:a8:ad:08:c7:da:74:b0:c3:20:7f:04:69:73:a0:
b6:3e:4a:10:40:03:47:85:0b:17:4c:b3:79:f2:31:06:ba:f1:
dc:36:6c:da:7d:e1:fa:31:36:26:8c:5a:ba:17:08:01:54:3d:
69:2e:df:a6:4a:f1:fa:40:5d:3b:2d:93:f2:e2:13:21:04:38:
54:77:5f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHAMennYQVb965aWtnJa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjYwNjI5MDIwMTE2WhcNMjYwNjMwMDIwMTE2WjAzMTEwLwYDVQQD
EyhiNzdmNTA0NjdhMzA3NjUyNmU5NDk4NTQ3OTY1MDU0ZTI2OGM4MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmpaoqrYd0M6rXqBPS1n0K1o1xT8
MtshCJR06gax8CxUvF5GrdagpVUgz9yefKeaoBe9woTqA0UZLYRK4yWjtPbMFPZc
OeJlsw8g/N1eKTBf6lSByBGYKfRQJtcSBo9o9ByIIRhcw4zB1j+ff9ueTrDV2usX
5tnW6aomKkN2E2N1wwvRwfRt+TdEk55HysX67LKA3XcpLDoWqzo5SnchGLl+OuWK
xgda3TJni17ceqWbRyHHeQCMzL0momZ0rOCd1gxKzakxr3mpj/lfvXeKEhIh8Jrs
YvsF1Ox8djihQZuAJoQ6nD6iF45foU3c5sBc9ZgNL/0gS0A5ZBfoAGbzVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd/UEZ6MHZSbpSYVHllBU4mjIGPMB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq+YLAii
3zs/3ZIOWwbSFlE9T8eFRG+OdSQ0+bepIq53aqAg7lXu5N+T8dF8gnWSMnGuqlKN
EEWEI0J7kPugR2K5xXLAlnSEyHAeFPEWYVNT6LOJasdBs7Ddgxaa1RB0z4ze2DKg
IkTF5sNSEGnZ43vG3oOq4N4mBq/4ZaXuAQMrYEFVk0bEXxUq6JG226/kjKDU6odJ
PEHVHNkNaXsMFl5LFzEVIQ5tWK2sl1NcEq1HZnCiQdz5TqitCMfadLDDIH8EaXOg
tj5KEEADR4ULF0yzefIxBrrx3DZs2n3h+jE2JoxauhcIAVQ9aS7fpkrx+kBdOy2T
8uITIQQ4VHdf4w==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:38 2026 by rpki-client