Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: CVjD3+vdKXv4E5kB1LhM27U8CHqEN1iZxh76P6zvgqo=
Subject key identifier: 70:C7:7C:2C:18:71:CB:53:B7:79:C7:05:24:F1:F1:A7:5B:39:DE:5F
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019EB8EAA506F6830C6E27F7157CBE36413A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0AEB
Signing time: Thu 11 Jun 2026 23:00:45 +0000
Manifest this update: Thu 11 Jun 2026 23:00:45 +0000
Manifest next update: Fri 12 Jun 2026 23:00:45 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: BlZwZv9Cfqgxk8jOyfeWtCvU6UBh0UytyQOxD7TCc60=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:a5:06:f6:83:0c:6e:27:f7:15:7c:be:36:41:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Jun 11 23:00:45 2026 GMT
Not After : Jun 12 23:00:45 2026 GMT
Subject: CN=70c77c2c1871cb53b779c70524f1f1a75b39de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:fa:a7:91:cc:5a:4c:59:20:a0:23:15:f9:
ea:ed:4d:96:73:c3:9b:8e:52:fe:03:d5:12:ce:15:
0e:d1:31:5c:12:75:e8:53:c7:2a:85:fd:6b:b0:6b:
b3:8a:a5:ec:6c:5b:70:55:35:ff:21:5d:f7:ab:9b:
66:00:1e:d8:71:73:84:18:37:59:da:28:d3:d7:bc:
95:7b:e2:4a:28:9b:58:b9:86:d7:13:22:5d:f8:54:
71:21:9f:42:69:28:cc:4d:52:12:b2:ac:c9:6b:e7:
b5:a7:c0:fc:f7:9c:3f:d7:30:d6:0c:0e:e0:f3:04:
2b:e4:14:31:a4:15:7c:27:34:c8:36:44:8e:50:90:
17:53:c5:12:ae:56:15:62:0d:f3:fb:ae:50:9b:01:
0e:1a:70:38:11:22:5b:6a:48:c2:b3:4e:29:a7:34:
3d:db:86:e3:00:c5:0d:92:c0:94:e2:34:d6:d2:f3:
41:a9:dd:12:78:0c:58:6a:c6:9d:b9:4b:91:b9:91:
9b:45:44:da:48:49:c7:91:2a:9c:cb:8e:50:56:06:
f5:3f:7f:e7:07:5c:08:a7:63:ff:74:1e:fd:1f:8a:
a8:0a:f1:72:65:11:f3:73:e5:cf:06:89:20:2a:c8:
b6:7a:e5:e6:1f:e7:8b:0d:b8:2d:95:6a:f9:d3:78:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:7C:2C:18:71:CB:53:B7:79:C7:05:24:F1:F1:A7:5B:39:DE:5F
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:e3:37:d2:3f:6e:70:ab:34:0a:ac:6c:c5:52:15:11:96:
6d:72:40:82:94:c9:51:13:c8:3b:d0:63:67:37:56:d6:84:80:
bd:eb:63:18:ab:5c:52:8a:9f:98:11:cc:17:3e:0a:f8:f1:aa:
36:c1:9c:a6:a0:56:c0:87:19:de:24:b5:2b:7b:13:89:56:e9:
76:11:bc:e5:ab:b6:b6:57:97:59:a6:60:52:8b:08:eb:e1:38:
9c:71:a4:7b:23:da:3d:a8:c7:56:13:a3:f6:f0:46:14:4e:fa:
db:e9:65:7c:37:ff:da:b8:c8:c9:b8:64:01:5e:dc:8d:09:9e:
59:9c:53:c6:fc:a4:ef:29:ea:e2:a7:80:ee:dd:03:ec:de:2d:
f1:14:61:89:13:d1:34:23:4c:c5:8e:78:fd:c9:5b:21:52:65:
83:05:6a:05:9b:6a:9f:f5:39:e4:ad:35:10:33:a3:ef:9f:8c:
32:22:8d:65:e5:06:b8:3b:52:ee:87:a0:af:56:d9:ae:7d:d4:
3a:15:fc:a8:c6:11:8b:e3:dd:80:d9:76:7f:4e:a6:f6:2d:95:
f9:5e:f7:50:4d:0a:61:70:6b:bd:7e:37:0a:77:bf:5c:0e:41:
d7:b9:1a:ca:08:25:b7:f0:5f:c8:2e:60:c7:25:f3:09:03:2f:
0b:99:d7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646qUG9oMMbif3FXy+NkE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw
N2UyMjEwHhcNMjYwNjExMjMwMDQ1WhcNMjYwNjEyMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg3MGM3N2MyYzE4NzFjYjUzYjc3OWM3MDUyNGYxZjFhNzViMzlkZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2j6p5HMWkxZIKAjFfnq7U2Wc8Ob
jlL+A9USzhUO0TFcEnXoU8cqhf1rsGuziqXsbFtwVTX/IV33q5tmAB7YcXOEGDdZ
2ijT17yVe+JKKJtYuYbXEyJd+FRxIZ9CaSjMTVISsqzJa+e1p8D895w/1zDWDA7g
8wQr5BQxpBV8JzTINkSOUJAXU8USrlYVYg3z+65QmwEOGnA4ESJbakjCs04ppzQ9
24bjAMUNksCU4jTW0vNBqd0SeAxYasaduUuRuZGbRUTaSEnHkSqcy45QVgb1P3/n
B1wIp2P/dB79H4qoCvFyZRHzc+XPBokgKsi2euXmH+eLDbgtlWr503iZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDHfCwYcctTt3nHBSTx8adbOd5fMB8GA1UdIwQY
MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt
NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl
LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ/jN9I/
bnCrNAqsbMVSFRGWbXJAgpTJURPIO9BjZzdW1oSAvetjGKtcUoqfmBHMFz4K+PGq
NsGcpqBWwIcZ3iS1K3sTiVbpdhG85au2tleXWaZgUosI6+E4nHGkeyPaPajHVhOj
9vBGFE762+llfDf/2rjIybhkAV7cjQmeWZxTxvyk7ynq4qeA7t0D7N4t8RRhiRPR
NCNMxY54/clbIVJlgwVqBZtqn/U55K01EDOj75+MMiKNZeUGuDtS7oegr1bZrn3U
OhX8qMYRi+PdgNl2f06m9i2V+V73UE0KYXBrvX43Cne/XA5B17kaygglt/BfyC5g
xyXzCQMvC5nXfQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:46 2026 by rpki-client