Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: 5xexTt16HtZ+yUHzaGk0B6EQ8Y/fmIiqfQkfJIVITRo=
Subject key identifier: DB:4A:64:82:09:DA:26:13:CA:AC:62:98:EE:56:A9:4B:C0:76:DB:51
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019EB9FD01DD23F4CAD6E455223F32BAED05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 04:00:26 +0000
Manifest this update: Fri 12 Jun 2026 04:00:26 +0000
Manifest next update: Sat 13 Jun 2026 04:00:26 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 72mCBYpf/42o7lKnSpF4B5S6FMQYWnW+iXxC3DkunZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:01:dd:23:f4:ca:d6:e4:55:22:3f:32:ba:ed:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jun 12 04:00:26 2026 GMT
Not After : Jun 13 04:00:26 2026 GMT
Subject: CN=db4a648209da2613caac6298ee56a94bc076db51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:92:48:e1:47:8a:0e:fc:d4:c3:47:72:21:
d6:6b:e9:91:f6:94:30:e6:dd:5d:13:15:49:6e:8a:
c5:75:5e:22:68:a8:6e:33:64:6f:f8:74:df:16:d9:
a3:4d:e7:fa:cc:08:8d:3d:04:8d:5e:41:0d:b7:bf:
08:d7:cd:55:b0:9e:2d:a4:60:03:af:60:ab:d7:3a:
43:1a:66:27:06:56:7e:b4:07:4f:ae:43:57:05:49:
e9:18:2e:74:6b:c8:d5:20:60:fd:5a:63:44:de:32:
07:0b:c5:ad:56:a5:a9:ea:b6:39:18:a1:1a:94:92:
a1:82:b5:1c:c6:28:f4:23:c4:e3:9a:58:d8:98:fa:
e0:18:3d:0a:41:ea:f2:0f:7e:93:fd:55:7b:0e:be:
8e:58:d9:43:ec:89:05:d0:fe:eb:bf:81:9c:d2:ba:
f0:56:f9:ce:d1:a7:42:d6:ac:ae:7d:14:f4:d8:a9:
15:b6:0b:4e:18:17:04:8b:c9:32:16:70:62:89:da:
4c:c5:f1:71:09:5c:eb:cf:ba:77:48:c4:0d:a2:0e:
29:e2:ed:ea:94:19:9a:35:45:87:af:87:3c:d8:d8:
71:2c:0c:ef:f9:ef:74:17:83:1b:9e:86:95:7e:07:
a4:b0:3e:db:8f:e4:2d:0d:99:3d:64:82:f2:0e:bf:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:64:82:09:DA:26:13:CA:AC:62:98:EE:56:A9:4B:C0:76:DB:51
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cd:87:a4:f2:4a:f6:ad:9e:75:f6:73:7e:8e:9e:7a:7a:06:
98:3d:1a:bd:c9:3b:32:47:48:65:48:5d:68:06:cf:d3:32:1f:
6e:a3:94:e6:6a:b6:a6:09:99:e7:1e:2d:62:36:8d:37:ca:2e:
e2:46:8f:bb:5f:88:e6:fe:98:4f:2a:6a:5f:62:44:60:3e:c0:
94:91:db:24:d5:75:36:1f:c1:be:40:2d:52:41:40:65:5f:f9:
72:c8:0a:3c:39:d4:19:e1:9c:ef:5b:3b:82:5c:c3:8e:5a:00:
25:35:80:4b:50:74:0e:d4:84:3d:fe:a2:90:e2:7c:f4:e3:23:
ef:e3:ba:99:a9:01:e2:cb:fe:c9:50:5f:52:2c:d7:2d:9f:9f:
ca:ab:0a:41:1d:0a:de:01:77:be:3e:b4:9e:11:79:1f:34:f4:
73:4c:58:1b:23:2a:4c:1c:fe:92:11:52:d7:e1:92:bc:14:bb:
97:c1:de:d9:e9:1b:5f:fe:ac:62:4a:16:4c:a9:17:c6:51:73:
c9:af:2f:d8:c0:1a:63:41:9b:66:42:fa:22:07:53:5c:3a:48:
fc:8c:6a:bf:41:83:bf:ac:90:bf:1d:bf:2a:1c:15:8a:6a:3e:
5e:da:c9:47:14:12:d4:b3:6f:7a:11:27:d6:ac:bf:7e:05:d3:
62:ed:c2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/QHdI/TK1uRVIj8yuu0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4
MDBiMDQwHhcNMjYwNjEyMDQwMDI2WhcNMjYwNjEzMDQwMDI2WjAzMTEwLwYDVQQD
EyhkYjRhNjQ4MjA5ZGEyNjEzY2FhYzYyOThlZTU2YTk0YmMwNzZkYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3KSSOFHig781MNHciHWa+mR9pQw
5t1dExVJborFdV4iaKhuM2Rv+HTfFtmjTef6zAiNPQSNXkENt78I181VsJ4tpGAD
r2Cr1zpDGmYnBlZ+tAdPrkNXBUnpGC50a8jVIGD9WmNE3jIHC8WtVqWp6rY5GKEa
lJKhgrUcxij0I8TjmljYmPrgGD0KQeryD36T/VV7Dr6OWNlD7IkF0P7rv4Gc0rrw
VvnO0adC1qyufRT02KkVtgtOGBcEi8kyFnBiidpMxfFxCVzrz7p3SMQNog4p4u3q
lBmaNUWHr4c82NhxLAzv+e90F4MbnoaVfgeksD7bj+QtDZk9ZILyDr9mxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtKZIIJ2iYTyqximO5WqUvAdttRMB8GA1UdIwQY
MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt
NDczZDc0YTVlMjBmLzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm
LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB82HpPJK
9q2edfZzfo6eenoGmD0avck7MkdIZUhdaAbP0zIfbqOU5mq2pgmZ5x4tYjaNN8ou
4kaPu1+I5v6YTypqX2JEYD7AlJHbJNV1Nh/BvkAtUkFAZV/5csgKPDnUGeGc71s7
glzDjloAJTWAS1B0DtSEPf6ikOJ89OMj7+O6makB4sv+yVBfUizXLZ+fyqsKQR0K
3gF3vj60nhF5HzT0c0xYGyMqTBz+khFS1+GSvBS7l8He2ekbX/6sYkoWTKkXxlFz
ya8v2MAaY0GbZkL6IgdTXDpI/Ixqv0GDv6yQvx2/KhwVimo+XtrJRxQS1LNvehEn
1qy/fgXTYu3CCQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:29 2026 by rpki-client