
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: d4Vdn04hYQhjKuase8MwsKo/hdWjNRVX7ZbEovgaoU8=
Subject key identifier: BE:B1:C7:08:D4:2D:3C:9E:55:7D:2C:26:0F:0C:00:E9:86:94:96:5B
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 019EFC83FB0C6E563AD4406C2045672C9BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 1987
Signing time: Thu 25 Jun 2026 02:02:48 +0000
Manifest this update: Thu 25 Jun 2026 02:02:48 +0000
Manifest next update: Fri 26 Jun 2026 02:02:48 +0000
Files and hashes: 1: 6dkup_QLaikEJ7jxf7-Ni8ixfqA.roa (hash: fy9lum97VV7QxmGD9csp+OguuiglHoR0KmYxJVKPYuc=)
2: 9X79br-B5PIYOAndjXkd_R1bW30.asa (hash: o5UbKEXSCyVmkea3mToXMQIywUYsXBNkWkJYBnUr0LU=)
3: GNwrK88P2bKNDHhNoGFIFLVNmOo.roa (hash: Tvnbkz2Ie8IgGBF6LhVoidD9voIILo2Au6uwof9Oqoo=)
4: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: 5Pqk3whXrwiD3RK6qgs5tvERIk/+j5X6ndKIehfiUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:fb:0c:6e:56:3a:d4:40:6c:20:45:67:2c:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Jun 25 02:02:48 2026 GMT
Not After : Jun 26 02:02:48 2026 GMT
Subject: CN=beb1c708d42d3c9e557d2c260f0c00e98694965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:fa:84:d0:cd:ff:6b:ed:55:91:ac:4c:dd:
3b:7b:af:5a:f9:90:f2:d1:56:70:3e:22:6c:4e:46:
de:c1:b1:82:10:a9:6f:1a:d9:33:83:26:2e:88:97:
8d:79:76:a0:9f:6e:b0:e1:30:a4:7d:b8:83:5f:ef:
33:db:45:09:a2:1a:a0:39:26:3e:7f:34:8b:b9:9a:
8d:78:92:1d:9b:30:52:62:a1:3f:4b:a4:6b:2c:17:
03:56:bf:4e:e8:97:57:b5:8b:c1:3e:db:7d:9b:2c:
85:b7:a4:96:3f:36:87:f4:3e:13:93:ec:d5:92:a6:
94:31:46:4b:20:e7:ca:7d:87:03:83:6f:60:c7:93:
9a:9b:96:51:55:a1:e9:2f:a8:4b:55:88:50:fe:24:
51:a9:df:c1:84:8c:46:93:d1:f5:f5:38:b3:b2:a3:
08:fb:49:15:79:45:d4:e5:0a:39:b7:9f:d7:7d:0e:
9c:5d:af:e6:0d:86:3a:00:01:ad:19:5a:e7:63:28:
21:26:c0:7f:be:07:07:c6:68:ce:d2:ab:ef:3f:6e:
87:e7:ec:2d:11:18:08:1e:3f:89:a0:be:59:e4:dc:
23:5e:e1:ba:5e:46:e3:74:60:35:3c:a6:6e:80:e2:
d1:bc:30:5a:fc:e5:7b:33:e0:b3:95:0f:5d:78:5a:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:C7:08:D4:2D:3C:9E:55:7D:2C:26:0F:0C:00:E9:86:94:96:5B
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:6e:db:a5:7e:3d:cf:54:eb:ed:85:e6:0c:88:44:a0:64:
ac:b1:66:9c:93:d5:fe:37:76:bb:86:f1:35:e5:30:9f:be:ce:
4e:63:13:9a:a6:fc:9a:05:ce:50:7a:b8:68:8f:ee:ca:3a:4b:
3b:79:c5:58:87:d5:75:82:26:10:83:20:7e:0f:60:3a:ec:26:
15:ea:04:fb:7f:de:a6:48:30:69:56:fb:74:84:e5:5b:f8:28:
61:aa:1a:9c:5e:a2:43:f8:40:cb:29:4c:65:dc:73:45:3d:e2:
eb:3a:36:c5:41:0b:b6:8b:e4:1f:c4:c0:b6:01:18:db:6d:fc:
fa:11:e8:3b:23:05:79:78:9e:f0:3d:38:35:4e:0c:2f:bf:06:
42:7a:25:30:ba:b1:c9:bf:f7:47:33:1e:fb:34:57:0c:3d:12:
d7:3f:7e:2d:1f:cd:26:cd:0c:7f:68:ee:07:e4:4f:00:fd:38:
c0:fa:2e:f5:28:b9:4e:15:5f:96:18:b7:6b:37:a8:b9:f8:57:
bf:0d:76:19:97:ef:c3:d6:6a:7d:cf:bf:32:6b:c0:5d:6d:c7:
07:1d:81:b0:33:a9:f6:94:6a:6b:52:42:c7:5e:38:0e:20:06:
93:f6:86:aa:87:5c:ed:84:5a:08:86:c0:2a:96:15:bf:95:f0:
df:04:f5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78g/sMblY61EBsIEVnLJvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2
NTBkZGMwHhcNMjYwNjI1MDIwMjQ4WhcNMjYwNjI2MDIwMjQ4WjAzMTEwLwYDVQQD
EyhiZWIxYzcwOGQ0MmQzYzllNTU3ZDJjMjYwZjBjMDBlOTg2OTQ5NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZX6hNDN/2vtVZGsTN07e69a+ZDy
0VZwPiJsTkbewbGCEKlvGtkzgyYuiJeNeXagn26w4TCkfbiDX+8z20UJohqgOSY+
fzSLuZqNeJIdmzBSYqE/S6RrLBcDVr9O6JdXtYvBPtt9myyFt6SWPzaH9D4Tk+zV
kqaUMUZLIOfKfYcDg29gx5Oam5ZRVaHpL6hLVYhQ/iRRqd/BhIxGk9H19TizsqMI
+0kVeUXU5Qo5t5/XfQ6cXa/mDYY6AAGtGVrnYyghJsB/vgcHxmjO0qvvP26H5+wt
ERgIHj+JoL5Z5NwjXuG6XkbjdGA1PKZugOLRvDBa/OV7M+CzlQ9deFqPGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6xxwjULTyeVX0sJg8MAOmGlJZbMB8GA1UdIwQY
MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKVu26V+
Pc9U6+2F5gyIRKBkrLFmnJPV/jd2u4bxNeUwn77OTmMTmqb8mgXOUHq4aI/uyjpL
O3nFWIfVdYImEIMgfg9gOuwmFeoE+3/epkgwaVb7dITlW/goYaoanF6iQ/hAyylM
ZdxzRT3i6zo2xUELtovkH8TAtgEY2238+hHoOyMFeXie8D04NU4ML78GQnolMLqx
yb/3RzMe+zRXDD0S1z9+LR/NJs0Mf2juB+RPAP04wPou9Si5ThVflhi3azeoufhX
vw12GZfvw9Zqfc+/MmvAXW3HBx2BsDOp9pRqa1JCx144DiAGk/aGqodc7YRaCIbA
KpYVv5Xw3wT1MQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:40:05 2026 by rpki-client