Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: c4sHpQt0Ae9bWNriAxqM0K2RTk47TtBt7lE75H+ajks=
Subject key identifier: D3:AC:DB:34:66:0C:FC:ED:AD:9C:B2:71:2E:4B:2B:8D:86:FF:5E:DF
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019E7E560B21E7B3398FB565594CEAF9772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 16AF
Signing time: Sun 31 May 2026 14:00:28 +0000
Manifest this update: Sun 31 May 2026 14:00:28 +0000
Manifest next update: Mon 01 Jun 2026 14:00:28 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 8hlS5dns0+LLmHnf6Johf3AIzm/kyLkIVWsT6x42wbY=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7e:56:0b:21:e7:b3:39:8f:b5:65:59:4c:ea:f9:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: May 31 14:00:28 2026 GMT
Not After : Jun 1 14:00:28 2026 GMT
Subject: CN=d3acdb34660cfcedad9cb2712e4b2b8d86ff5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:1c:e6:db:05:14:7c:0c:15:4e:63:6b:a7:
ad:c3:d2:d1:fd:e3:23:64:0e:5b:25:52:22:ef:e1:
31:83:b7:a2:e3:cb:cb:de:58:18:32:86:bc:30:b9:
c2:ea:b2:91:11:4e:0c:3b:ea:61:a2:68:94:7f:6a:
5b:a8:4d:30:a6:fd:73:9a:77:46:33:7d:95:1e:d7:
52:22:2e:1c:60:5a:66:b8:5e:70:ba:57:6e:04:c4:
c5:99:85:c0:fb:94:20:e1:30:cf:56:fb:a8:af:be:
36:7d:f6:4a:f3:8c:0f:9a:d8:a6:9e:b8:af:4c:0f:
d9:51:41:ab:e7:5c:73:5d:d6:41:03:31:b3:5f:c3:
0f:26:02:b0:68:d8:37:10:5e:00:22:65:c2:ac:f3:
f0:16:a6:a7:f9:e8:ac:4d:c9:03:4f:4e:43:58:76:
3d:93:41:37:9e:38:0d:b1:7f:cb:a3:3b:1e:a2:c6:
dc:f5:9f:e7:3f:2e:00:95:69:2c:58:67:4b:a6:04:
f0:78:4b:79:09:3a:ee:db:77:87:4d:6e:f4:84:05:
7b:92:7f:ef:b2:ed:d2:6f:22:be:76:7d:78:b4:f9:
75:1f:ab:61:e4:aa:b3:3a:75:aa:dd:e7:a5:b2:06:
16:c6:d8:14:77:32:89:be:15:b1:77:67:a0:91:62:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:DB:34:66:0C:FC:ED:AD:9C:B2:71:2E:4B:2B:8D:86:FF:5E:DF
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d2:a3:99:3c:94:be:dd:8b:9c:a8:10:97:f7:7e:09:c7:fc:
34:94:03:8c:dd:b7:58:dd:49:92:78:41:1a:fb:5b:5e:74:ea:
4f:12:52:06:dc:fc:26:c2:35:2c:5b:0d:ca:ec:23:45:af:66:
9a:7d:31:30:a5:2c:c7:10:1e:db:9f:84:63:86:ff:be:9a:67:
dd:7e:f0:b5:77:59:a8:60:e7:62:99:ee:8b:a3:4b:05:ba:fe:
d1:55:60:24:0a:04:4d:3a:5f:13:4d:04:d3:36:91:2b:8d:8c:
28:99:42:5b:19:31:80:23:2d:9f:48:9b:46:9d:bc:0c:57:5d:
91:9a:ea:61:3a:a4:81:fe:16:27:d4:b1:93:17:b0:41:8d:90:
66:57:5b:6c:85:52:de:1e:25:35:2a:b2:d0:f5:2d:fb:56:10:
02:d8:f9:44:b6:cc:eb:3b:cb:a5:ae:dd:5f:99:ae:1c:0b:32:
98:fc:ee:64:f1:41:23:f4:79:18:b2:69:d5:4f:4e:b0:e6:bb:
a6:73:2f:03:21:39:2c:f1:b9:60:3e:c1:71:6d:c3:14:6d:5e:
3b:15:c7:89:c2:a7:c4:86:e5:b0:25:a5:8a:c7:45:62:68:e7:
3f:0e:17:83:81:02:d5:f9:54:ec:b8:30:b5:54:0a:44:aa:c8:
d7:58:42:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5+Vgsh57M5j7VlWUzq+XcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj
MDkzOWMwHhcNMjYwNTMxMTQwMDI4WhcNMjYwNjAxMTQwMDI4WjAzMTEwLwYDVQQD
EyhkM2FjZGIzNDY2MGNmY2VkYWQ5Y2IyNzEyZTRiMmI4ZDg2ZmY1ZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN4c5tsFFHwMFU5ja6etw9LR/eMj
ZA5bJVIi7+Exg7ei48vL3lgYMoa8MLnC6rKREU4MO+phomiUf2pbqE0wpv1zmndG
M32VHtdSIi4cYFpmuF5wulduBMTFmYXA+5Qg4TDPVvuor742ffZK84wPmtimnriv
TA/ZUUGr51xzXdZBAzGzX8MPJgKwaNg3EF4AImXCrPPwFqan+eisTckDT05DWHY9
k0E3njgNsX/Lozseosbc9Z/nPy4AlWksWGdLpgTweEt5CTru23eHTW70hAV7kn/v
su3SbyK+dn14tPl1H6th5KqzOnWq3eelsgYWxtgUdzKJvhWxd2egkWJkrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOs2zRmDPztrZyycS5LK42G/17fMB8GA1UdIwQY
MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt
MWM5NGNiN2RmZWIzLzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz
LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9KjmTyU
vt2LnKgQl/d+Ccf8NJQDjN23WN1JknhBGvtbXnTqTxJSBtz8JsI1LFsNyuwjRa9m
mn0xMKUsxxAe25+EY4b/vppn3X7wtXdZqGDnYpnui6NLBbr+0VVgJAoETTpfE00E
0zaRK42MKJlCWxkxgCMtn0ibRp28DFddkZrqYTqkgf4WJ9SxkxewQY2QZldbbIVS
3h4lNSqy0PUt+1YQAtj5RLbM6zvLpa7dX5muHAsymPzuZPFBI/R5GLJp1U9OsOa7
pnMvAyE5LPG5YD7BcW3DFG1eOxXHicKnxIblsCWlisdFYmjnPw4Xg4EC1flU7Lgw
tVQKRKrI11hCyg==
-----END CERTIFICATE-----
Generated at Sun May 31 16:30:53 2026 by rpki-client