Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: lv+u+JUiEKRYEHISiOOCawFZ/gEifJTiMzTx96BJEro=
Subject key identifier: 5D:4E:1D:4C:A8:18:08:CA:18:7F:1A:1D:0E:DA:EB:CA:E9:8D:93:BD
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019EB845C6EBD0B1A1AD9F48D0CDFF687F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:40 +0000
Manifest this update: Thu 11 Jun 2026 20:00:40 +0000
Manifest next update: Fri 12 Jun 2026 20:00:40 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: +pApvapL0jU1PHlQNWD7peRs2k2CfiGrp2YWwXihlqY=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:c6:eb:d0:b1:a1:ad:9f:48:d0:cd:ff:68:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jun 11 20:00:40 2026 GMT
Not After : Jun 12 20:00:40 2026 GMT
Subject: CN=5d4e1d4ca81808ca187f1a1d0edaebcae98d93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:ad:70:7a:14:8c:95:41:1c:1c:c8:d5:2d:
a7:2b:e4:c2:be:fe:9a:e3:cd:b2:39:11:54:71:7e:
68:79:4e:7f:01:c7:66:5c:62:bc:fa:e6:b2:8a:a3:
cb:b2:42:f7:0c:32:7c:c2:7b:5c:1a:d2:63:8f:89:
cb:47:d9:0c:5a:1d:32:1c:86:ec:31:87:63:b9:94:
9e:ad:8d:e3:85:cc:cf:de:26:03:b6:00:af:ff:60:
af:0e:aa:dc:62:07:7d:b5:63:b4:62:20:ff:ad:a7:
5e:b9:85:21:a6:b5:6a:dc:cc:81:55:20:4e:5b:96:
b1:25:5b:13:9f:1d:a7:f5:3d:df:9e:46:d1:f2:96:
18:4a:a9:66:72:e3:a2:0d:65:0e:ad:d9:a0:7b:28:
e1:dc:25:74:97:78:b1:f1:ba:4e:27:d4:65:0a:f1:
fe:9f:10:47:e8:54:13:66:27:35:15:c4:2b:98:d6:
dd:e6:78:19:d1:88:35:8e:9a:0e:90:41:23:db:d9:
78:91:84:a0:87:23:12:72:9d:bd:1f:3e:e5:d0:50:
cd:fe:d4:4f:c2:af:a9:c9:31:db:e0:3e:e7:f6:6e:
8c:df:6f:96:15:1f:65:1c:e1:82:fe:12:f7:d9:eb:
d3:f7:07:f0:8a:b4:6b:e3:c1:d2:c4:a0:9f:e0:76:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:1D:4C:A8:18:08:CA:18:7F:1A:1D:0E:DA:EB:CA:E9:8D:93:BD
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:80:fe:b1:d0:48:bb:58:f8:34:c3:9d:37:9a:46:c7:8f:
60:f3:88:f1:fe:12:71:bc:5a:45:c3:67:15:61:c9:26:17:6c:
a4:18:3c:74:b6:f1:53:6a:6c:97:f0:67:ca:55:2f:77:1f:96:
6f:45:c0:9b:3a:15:af:c3:e7:52:ce:65:85:08:a4:9c:9c:24:
e9:49:c4:28:d2:33:65:bb:1d:04:c5:68:84:ba:fa:57:68:6b:
f1:ea:97:de:92:c9:2a:c1:39:e1:ba:63:cc:d0:07:ea:6d:c4:
3c:a3:56:f1:f9:e8:31:0c:46:4d:5f:d3:4d:38:db:4e:f8:e3:
3c:bc:f2:da:e8:e9:c9:68:37:9a:a5:8c:3e:dd:11:88:a7:bf:
11:eb:cb:46:00:4a:1e:5e:c8:7c:67:e4:c2:3e:30:f9:9d:a6:
07:db:e3:3c:4b:6e:81:30:53:ef:d9:bc:d5:13:e8:71:71:61:
c4:08:19:b6:3e:a4:6a:92:c2:95:8f:60:09:53:cb:3d:ff:78:
35:c4:77:e5:b7:ea:af:fb:17:ff:d1:ef:0a:d7:81:ad:4c:28:
42:a9:de:ea:37:5a:c7:61:4e:d5:0a:aa:fa:70:23:d8:b6:28:
ed:c4:a0:4a:59:e2:59:86:4c:a1:23:6d:a1:c3:87:9c:8a:64:
9b:0c:e8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Rcbr0LGhrZ9I0M3/aH9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk
MWE5YWYwHhcNMjYwNjExMjAwMDQwWhcNMjYwNjEyMjAwMDQwWjAzMTEwLwYDVQQD
Eyg1ZDRlMWQ0Y2E4MTgwOGNhMTg3ZjFhMWQwZWRhZWJjYWU5OGQ5M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCtcHoUjJVBHBzI1S2nK+TCvv6a
482yORFUcX5oeU5/AcdmXGK8+uayiqPLskL3DDJ8wntcGtJjj4nLR9kMWh0yHIbs
MYdjuZSerY3jhczP3iYDtgCv/2CvDqrcYgd9tWO0YiD/radeuYUhprVq3MyBVSBO
W5axJVsTnx2n9T3fnkbR8pYYSqlmcuOiDWUOrdmgeyjh3CV0l3ix8bpOJ9RlCvH+
nxBH6FQTZic1FcQrmNbd5ngZ0Yg1jpoOkEEj29l4kYSghyMScp29Hz7l0FDN/tRP
wq+pyTHb4D7n9m6M32+WFR9lHOGC/hL32evT9wfwirRr48HSxKCf4HYhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1OHUyoGAjKGH8aHQ7a68rpjZO9MB8GA1UdIwQY
MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct
MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2
LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgSA/rHQ
SLtY+DTDnTeaRsePYPOI8f4ScbxaRcNnFWHJJhdspBg8dLbxU2psl/BnylUvdx+W
b0XAmzoVr8PnUs5lhQiknJwk6UnEKNIzZbsdBMVohLr6V2hr8eqX3pLJKsE54bpj
zNAH6m3EPKNW8fnoMQxGTV/TTTjbTvjjPLzy2ujpyWg3mqWMPt0RiKe/EevLRgBK
Hl7IfGfkwj4w+Z2mB9vjPEtugTBT79m81RPocXFhxAgZtj6kapLClY9gCVPLPf94
NcR35bfqr/sX/9HvCteBrUwoQqne6jdax2FO1Qqq+nAj2LYo7cSgSlniWYZMoSNt
ocOHnIpkmwzo+Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:13:43 2026 by rpki-client