Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: hXGRlZEa5k22o4W6+d7seRHunMurvfOObGcdlbaYrxc=
Subject key identifier: DE:CB:C2:EA:38:81:97:85:9D:37:2C:55:02:91:AA:29:4E:49:B8:E2
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019E9D3C6D812B04CF2C2CF544E1F9EA96CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 1449
Signing time: Sat 06 Jun 2026 14:00:43 +0000
Manifest this update: Sat 06 Jun 2026 14:00:43 +0000
Manifest next update: Sun 07 Jun 2026 14:00:43 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: 7JElQ5rySuySlo3Pi60KpupI/ROHJxxxU1HtgbZ77iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:6d:81:2b:04:cf:2c:2c:f5:44:e1:f9:ea:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jun 6 14:00:43 2026 GMT
Not After : Jun 7 14:00:43 2026 GMT
Subject: CN=decbc2ea388197859d372c550291aa294e49b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:6f:4a:b8:a5:f4:4c:73:6a:54:bf:15:f2:
4c:3a:d9:59:3c:63:d9:01:0e:0d:7f:2f:0a:03:02:
20:c9:6f:89:b3:10:3b:8e:ea:03:ba:cd:9d:45:50:
14:f3:ad:0e:12:01:85:14:9d:8f:88:c0:0c:b6:f2:
76:93:86:a0:93:cb:3a:3a:64:36:62:a1:61:75:52:
f7:f2:28:d8:96:85:de:fa:e7:86:da:9c:c1:68:b2:
d4:5f:c4:12:80:45:3e:e8:29:48:05:e8:a6:b4:c2:
5f:36:7d:97:d4:29:9a:e1:ed:a9:58:64:b9:da:98:
be:76:2c:2d:cf:fb:02:70:de:56:52:35:ff:ec:5e:
0f:6d:f3:f2:10:50:00:4e:d3:81:ab:42:3f:52:34:
5f:4d:d7:ec:d9:4a:a6:bb:3f:81:25:7f:f2:c2:5e:
99:5d:4d:fd:c0:1c:55:07:40:ca:dc:3a:fe:b9:e5:
98:c7:d0:cd:c6:4d:1d:c1:d8:72:f1:39:0e:57:99:
a2:58:6b:0b:31:24:fe:f6:77:49:4b:49:8f:00:ba:
f6:52:59:17:f7:26:0f:f7:fc:41:2f:84:f3:79:5d:
d7:26:5c:35:57:f5:14:4d:89:90:1d:bb:b4:84:93:
84:60:77:13:00:6f:0b:0b:f6:fb:cb:5f:d0:c7:94:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:C2:EA:38:81:97:85:9D:37:2C:55:02:91:AA:29:4E:49:B8:E2
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:58:9b:cd:c5:35:74:9f:9c:71:f4:76:ba:ee:ac:ce:ce:
93:48:f9:e2:ce:66:6e:e3:bb:10:2e:15:df:f0:7b:7e:64:ef:
99:f7:ac:30:3d:94:44:49:82:64:81:62:4f:b9:fe:a5:2e:11:
b9:18:a6:0d:a9:56:05:9f:2a:8a:9c:cd:a6:a2:d1:9d:a3:74:
3c:2a:f4:7b:d1:1e:19:72:f4:38:2c:dc:3a:23:37:bd:83:d0:
2c:26:69:34:e5:74:83:c4:a9:9e:7b:8d:01:4a:02:57:02:a2:
83:13:6c:01:26:b7:35:cb:f5:8b:21:7c:06:9f:97:fc:c8:b9:
6f:d3:dc:ac:7a:da:0f:a0:f7:a7:cb:28:a6:37:10:5e:79:6a:
5e:e5:41:2f:a5:a3:62:4a:55:d3:49:9f:64:2c:0f:cf:a9:a4:
f4:cc:85:e4:2d:24:4f:9b:6e:7a:ef:22:77:81:70:9c:01:4b:
a9:73:26:28:5e:70:b1:06:6f:c8:9b:d2:91:1b:1f:06:8b:cc:
a9:d7:bf:49:de:0b:a2:97:a0:10:15:96:f0:3a:fc:d9:53:cf:
75:85:fe:bd:3e:f5:08:70:81:09:65:c5:ca:7a:a3:fd:9a:08:
fd:8b:61:6f:8b:5e:98:8d:98:2f:67:a0:26:19:5e:1b:12:22:
92:cc:37:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dPG2BKwTPLCz1ROH56pbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjYwNjA2MTQwMDQzWhcNMjYwNjA3MTQwMDQzWjAzMTEwLwYDVQQD
EyhkZWNiYzJlYTM4ODE5Nzg1OWQzNzJjNTUwMjkxYWEyOTRlNDliOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl21vSril9ExzalS/FfJMOtlZPGPZ
AQ4Nfy8KAwIgyW+JsxA7juoDus2dRVAU860OEgGFFJ2PiMAMtvJ2k4agk8s6OmQ2
YqFhdVL38ijYloXe+ueG2pzBaLLUX8QSgEU+6ClIBeimtMJfNn2X1Cma4e2pWGS5
2pi+diwtz/sCcN5WUjX/7F4PbfPyEFAATtOBq0I/UjRfTdfs2Uqmuz+BJX/ywl6Z
XU39wBxVB0DK3Dr+ueWYx9DNxk0dwdhy8TkOV5miWGsLMST+9ndJS0mPALr2UlkX
9yYP9/xBL4TzeV3XJlw1V/UUTYmQHbu0hJOEYHcTAG8LC/b7y1/Qx5QEzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7Lwuo4gZeFnTcsVQKRqilOSbjiMB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHupYm83F
NXSfnHH0drrurM7Ok0j54s5mbuO7EC4V3/B7fmTvmfesMD2UREmCZIFiT7n+pS4R
uRimDalWBZ8qipzNpqLRnaN0PCr0e9EeGXL0OCzcOiM3vYPQLCZpNOV0g8SpnnuN
AUoCVwKigxNsASa3Ncv1iyF8Bp+X/Mi5b9PcrHraD6D3p8sopjcQXnlqXuVBL6Wj
YkpV00mfZCwPz6mk9MyF5C0kT5tueu8id4FwnAFLqXMmKF5wsQZvyJvSkRsfBovM
qde/Sd4LopegEBWW8Dr82VPPdYX+vT71CHCBCWXFynqj/ZoI/Ythb4temI2YL2eg
JhleGxIiksw3ew==
-----END CERTIFICATE-----
Generated at Sat Jun 6 20:36:15 2026 by rpki-client