Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: q3IUS9JSBgPxFzfKyBqqSOK4nCSzYSvrpKt6ggQssU8=
Subject key identifier: DF:60:1B:05:7B:C7:F7:32:71:D8:CB:A4:52:0B:95:90:9F:55:C0:A1
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 019EB9FD3BA325389158A69F2573A36A41A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 12C3
Signing time: Fri 12 Jun 2026 04:00:41 +0000
Manifest this update: Fri 12 Jun 2026 04:00:41 +0000
Manifest next update: Sat 13 Jun 2026 04:00:41 +0000
Files and hashes: 1: IFU9yqMojf3OF6XRbPbAyfRClxk.roa (hash: 35a15I7jZQOPlqYRrp7fhGZKGwSIuTjFX5WUsqtUd2U=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: ayvaLtG5Z+U6wLIFEbtCjqafR7/0pvIoUQ0N4NNcDec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:3b:a3:25:38:91:58:a6:9f:25:73:a3:6a:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Jun 12 04:00:41 2026 GMT
Not After : Jun 13 04:00:41 2026 GMT
Subject: CN=df601b057bc7f73271d8cba4520b95909f55c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:8e:6b:7e:5a:4b:19:f6:bc:5e:06:32:e0:
c1:ab:76:73:01:70:d8:ec:c3:d9:16:27:dd:b6:4b:
a7:ca:e9:23:32:a7:ac:f2:24:d2:48:8d:a5:f5:23:
57:ea:16:77:99:75:8b:a5:ee:54:61:9e:29:92:54:
58:99:39:97:04:47:41:bd:2d:50:f0:6f:c6:1c:91:
b5:5e:03:09:47:0d:6d:63:3f:10:d5:e3:ee:c9:e9:
25:8b:a6:78:c5:c9:81:22:ea:ab:8c:f4:41:92:67:
b9:3a:13:35:60:31:34:96:7c:42:71:a6:5e:3a:68:
b6:be:0e:7f:1f:68:03:5b:23:ec:81:5f:94:00:8a:
a3:95:d2:4b:e5:c4:d5:cc:00:5d:b5:37:93:e4:af:
86:80:6a:0b:62:2a:b5:63:d3:3b:43:c7:f7:24:d6:
65:d3:6c:fe:46:44:35:c0:94:e1:a7:e5:31:72:4d:
c5:fa:bd:4e:90:88:d1:ff:c0:e0:00:3b:00:30:bc:
da:0e:05:47:cc:f3:72:e4:0f:64:1a:07:fd:e7:b1:
c9:25:88:48:ef:79:1b:e8:b1:24:2f:8e:f8:c5:9a:
62:b3:04:1e:69:85:7a:65:dc:d1:bc:53:5d:d5:8d:
41:ea:9d:09:53:c2:e4:87:d8:51:d3:09:41:93:27:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:1B:05:7B:C7:F7:32:71:D8:CB:A4:52:0B:95:90:9F:55:C0:A1
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:42:e0:36:44:b5:81:7e:bf:66:fe:84:09:ad:5c:ed:d1:a7:
c5:53:9c:25:bb:d1:a5:9c:f3:52:05:e0:6d:dd:7d:94:f7:12:
a9:89:58:ec:ce:29:c5:a5:9d:da:7e:cb:0b:63:d7:5b:56:e9:
b5:18:aa:2d:20:9c:15:81:70:b0:9c:80:29:07:86:10:29:41:
ce:6b:06:2a:a7:34:95:c1:32:34:55:72:e3:ef:bf:a4:c0:1d:
de:e6:01:a2:95:66:63:56:72:03:18:78:41:ee:d6:4c:a6:96:
58:74:4f:e0:87:91:ee:2b:c1:f1:b4:22:71:40:47:47:e7:20:
a4:b4:e2:a8:9b:9a:1f:21:54:4e:fc:9f:41:15:6a:9c:7e:1a:
ee:95:8f:24:c5:c6:3e:75:f3:a7:ea:0e:71:3e:d6:cb:01:75:
f8:5d:1e:bc:38:b9:0a:2b:04:ef:0f:26:33:99:14:4d:fe:72:
dd:61:a1:33:4d:8d:3e:e1:94:ff:a3:95:f4:8a:44:56:d7:73:
cf:29:2b:d2:09:58:cd:ab:63:43:6f:76:4a:c9:ea:21:9a:07:
ba:ff:38:d5:66:52:1d:aa:06:82:71:e3:12:2c:31:cf:9b:cc:
5c:63:b1:6d:b7:35:c8:1d:f4:b4:9f:34:81:fa:91:55:95:3a:
c8:8a:7d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/TujJTiRWKafJXOjakGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMThhZTI0Yzk0Y2Q0MDI3NGIzODA3YmFiZmM4YjliY2Nl
YThiMzYwHhcNMjYwNjEyMDQwMDQxWhcNMjYwNjEzMDQwMDQxWjAzMTEwLwYDVQQD
EyhkZjYwMWIwNTdiYzdmNzMyNzFkOGNiYTQ1MjBiOTU5MDlmNTVjMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsWOa35aSxn2vF4GMuDBq3ZzAXDY
7MPZFifdtkunyukjMqes8iTSSI2l9SNX6hZ3mXWLpe5UYZ4pklRYmTmXBEdBvS1Q
8G/GHJG1XgMJRw1tYz8Q1ePuyekli6Z4xcmBIuqrjPRBkme5OhM1YDE0lnxCcaZe
Omi2vg5/H2gDWyPsgV+UAIqjldJL5cTVzABdtTeT5K+GgGoLYiq1Y9M7Q8f3JNZl
02z+RkQ1wJThp+Uxck3F+r1OkIjR/8DgADsAMLzaDgVHzPNy5A9kGgf957HJJYhI
73kb6LEkL474xZpiswQeaYV6ZdzRvFNd1Y1B6p0JU8Lkh9hR0wlBkyfkOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9gGwV7x/cycdjLpFILlZCfVcChMB8GA1UdIwQY
MBaAFLEYriTJTNQCdLOAe6v8i5vM6os2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUt
ZTgzNjg5NDMzZGMwLzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUtZTgzNjg5NDMzZGMw
LzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzkLgNkS1
gX6/Zv6ECa1c7dGnxVOcJbvRpZzzUgXgbd19lPcSqYlY7M4pxaWd2n7LC2PXW1bp
tRiqLSCcFYFwsJyAKQeGEClBzmsGKqc0lcEyNFVy4++/pMAd3uYBopVmY1ZyAxh4
Qe7WTKaWWHRP4IeR7ivB8bQicUBHR+cgpLTiqJuaHyFUTvyfQRVqnH4a7pWPJMXG
PnXzp+oOcT7WywF1+F0evDi5CisE7w8mM5kUTf5y3WGhM02NPuGU/6OV9IpEVtdz
zykr0glYzatjQ292SsnqIZoHuv841WZSHaoGgnHjEiwxz5vMXGOxbbc1yB30tJ80
gfqRVZU6yIp9Cw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:29:07 2026 by rpki-client