Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: ewSU3GdvynjFXrW8zQmKr/++ucW1HrXIXSLidXak0Bg=
Subject key identifier: 59:68:B0:7A:C0:B6:D2:82:A6:C0:53:7F:3C:4B:62:3F:EC:2A:84:B8
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019EB845B70B1C54A99F2EAB57CD8C610E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 04CA
Signing time: Thu 11 Jun 2026 20:00:36 +0000
Manifest this update: Thu 11 Jun 2026 20:00:36 +0000
Manifest next update: Fri 12 Jun 2026 20:00:36 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: D5HO9Sj7wR1Bf2C9fycPbNiZpIUTuqNIUTmkHVYARYk=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b7:0b:1c:54:a9:9f:2e:ab:57:cd:8c:61:0e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Jun 11 20:00:36 2026 GMT
Not After : Jun 12 20:00:36 2026 GMT
Subject: CN=5968b07ac0b6d282a6c0537f3c4b623fec2a84b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:db:1d:05:fc:24:68:5e:b3:d6:43:bf:f8:
17:0f:c0:e8:a6:af:25:c5:33:97:d1:39:5d:19:96:
78:2f:43:3b:b8:9f:d9:31:cd:7e:d3:b5:84:50:03:
91:2e:36:73:87:2e:8b:ca:4e:89:ce:8e:d2:e8:59:
b4:3c:9a:1e:fc:c4:fb:7e:93:5b:d4:8e:36:d3:50:
30:e7:bc:3e:d2:c9:84:09:bc:12:ac:fc:c8:db:42:
bc:38:ae:2a:f0:2f:e3:89:57:de:18:aa:1f:7b:64:
7e:82:93:9b:9f:8f:df:b7:5b:61:2d:ae:53:67:03:
ea:a7:7c:1b:3a:c9:60:94:c1:05:56:aa:6a:70:f3:
fc:b5:50:e9:f2:f8:f0:36:d5:17:b9:22:c2:07:33:
89:32:66:54:90:6a:79:df:5b:25:75:06:2f:70:86:
1e:c3:b3:ba:23:28:24:6b:d1:b3:aa:c2:86:62:22:
73:ce:38:19:d7:cc:15:73:27:10:07:e2:67:3d:80:
27:70:67:9e:7c:ce:48:92:06:27:7c:a7:c5:f1:70:
48:92:c6:cb:23:16:1d:3c:b8:3d:bc:ae:6c:ca:54:
dd:b2:f1:f9:15:9e:3e:2f:d7:ab:27:a8:0b:6a:76:
e1:99:0f:a5:61:50:29:7c:1b:86:09:09:b6:99:1e:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:B0:7A:C0:B6:D2:82:A6:C0:53:7F:3C:4B:62:3F:EC:2A:84:B8
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:21:90:f3:66:b9:5b:5e:49:ed:4d:7b:e5:99:64:c6:81:
41:f9:72:4a:8c:aa:e5:2a:af:92:57:7a:ad:2c:f8:de:5b:52:
ce:5b:9b:a5:23:42:2a:c4:7e:17:bd:17:6e:a2:c7:fa:9f:ce:
bc:59:b9:fd:6a:1a:9e:2b:5e:53:1d:ae:d7:61:f5:26:67:c8:
9a:50:33:bc:a2:d3:77:e6:64:f6:e7:6c:d3:7e:cb:9a:cc:6e:
02:8a:0b:a4:21:88:27:d5:c3:eb:84:27:c4:e6:71:22:18:d6:
d8:ba:0b:87:c2:45:a4:48:90:bc:3a:b9:31:22:2f:bc:9a:41:
ee:58:6e:59:3b:f3:d6:ff:71:94:98:f5:75:a2:78:c4:bc:72:
8c:d3:76:4a:0e:2b:14:1f:ff:48:df:3b:7d:6b:0d:7c:8c:51:
8d:b9:16:2d:39:6f:0e:73:ad:ba:0c:24:48:c5:19:bf:9c:06:
fe:61:cc:04:94:e1:a9:91:4e:56:3b:2f:f3:2d:6d:8c:98:47:
c0:13:ad:d2:2c:ee:cc:f8:c3:4d:73:d7:aa:c4:e7:11:a7:85:
b9:09:9e:ea:a8:cd:a3:47:6e:15:73:b9:bd:2a:75:d4:f6:ef:
7a:ac:c4:ea:47:01:80:4f:4e:04:29:16:4b:18:00:c5:8b:54:
3a:ed:f8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RbcLHFSpny6rV82MYQ6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5
OWNlYjkwHhcNMjYwNjExMjAwMDM2WhcNMjYwNjEyMjAwMDM2WjAzMTEwLwYDVQQD
Eyg1OTY4YjA3YWMwYjZkMjgyYTZjMDUzN2YzYzRiNjIzZmVjMmE4NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dTbHQX8JGhes9ZDv/gXD8Dopq8l
xTOX0TldGZZ4L0M7uJ/ZMc1+07WEUAORLjZzhy6Lyk6Jzo7S6Fm0PJoe/MT7fpNb
1I4201Aw57w+0smECbwSrPzI20K8OK4q8C/jiVfeGKofe2R+gpObn4/ft1thLa5T
ZwPqp3wbOslglMEFVqpqcPP8tVDp8vjwNtUXuSLCBzOJMmZUkGp531sldQYvcIYe
w7O6Iygka9GzqsKGYiJzzjgZ18wVcycQB+JnPYAncGeefM5IkgYnfKfF8XBIksbL
IxYdPLg9vK5sylTdsvH5FZ4+L9erJ6gLanbhmQ+lYVApfBuGCQm2mR6acwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlosHrAttKCpsBTfzxLYj/sKoS4MB8GA1UdIwQY
MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt
NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz
LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0khkPNm
uVteSe1Ne+WZZMaBQflySoyq5Sqvkld6rSz43ltSzlubpSNCKsR+F70XbqLH+p/O
vFm5/WoaniteUx2u12H1JmfImlAzvKLTd+Zk9uds037LmsxuAooLpCGIJ9XD64Qn
xOZxIhjW2LoLh8JFpEiQvDq5MSIvvJpB7lhuWTvz1v9xlJj1daJ4xLxyjNN2Sg4r
FB//SN87fWsNfIxRjbkWLTlvDnOtugwkSMUZv5wG/mHMBJThqZFOVjsv8y1tjJhH
wBOt0izuzPjDTXPXqsTnEaeFuQme6qjNo0duFXO5vSp11PbveqzE6kcBgE9OBCkW
SxgAxYtUOu34PA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:12 2026 by rpki-client