Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: ghLDDAxWAh00nMvu1K8mzkwfcOeO6L1jSgU/qWqwoes=
Subject key identifier: FB:D5:57:BE:5A:58:77:E7:ED:1F:53:82:04:1E:1F:F2:A6:5C:F8:91
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019EB87CCFD6BD40C52E9A089637EF2A74D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 12BD
Signing time: Thu 11 Jun 2026 21:00:47 +0000
Manifest this update: Thu 11 Jun 2026 21:00:47 +0000
Manifest next update: Fri 12 Jun 2026 21:00:47 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: PN/4EOyjILulIate3sFwQyMMJs2Xea63DqP0h1OgkKw=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:cf:d6:bd:40:c5:2e:9a:08:96:37:ef:2a:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jun 11 21:00:47 2026 GMT
Not After : Jun 12 21:00:47 2026 GMT
Subject: CN=fbd557be5a5877e7ed1f5382041e1ff2a65cf891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:99:62:44:e5:23:a9:e7:b4:2e:80:52:a0:
db:9a:ab:30:dd:a6:89:2e:d0:d1:b6:97:b2:db:14:
c2:cf:7a:87:f6:6b:7c:5c:97:1c:e6:0e:1c:fa:43:
e5:68:79:5c:6a:b3:f5:ec:98:4a:3b:17:82:79:38:
92:23:35:06:2a:38:1c:84:4d:c4:b3:c6:8f:17:67:
90:ae:22:65:63:55:bd:13:05:4f:37:ba:ee:14:ea:
62:05:bf:06:98:e3:96:98:cf:67:94:c6:43:b8:80:
aa:54:77:a5:af:54:b8:a4:d1:a7:8c:22:62:71:c5:
e8:5a:23:91:3b:b7:76:86:c8:09:63:f9:e8:94:28:
85:12:c6:bc:60:2f:dc:20:ee:a5:03:70:b1:17:68:
db:3a:29:b0:fd:9a:1a:e5:34:47:1d:ea:84:a5:f0:
a0:b9:52:97:49:d5:78:d3:b7:ca:bf:0e:c2:4b:52:
77:03:8f:5b:60:f6:88:f1:0e:73:11:fc:fc:e1:8a:
3a:09:5b:89:fb:66:eb:de:38:3a:ba:40:09:ff:5a:
dd:47:9c:dd:3a:1c:cb:19:32:4b:7a:54:f8:e1:d8:
05:d0:28:e4:6e:68:24:26:90:8f:bc:90:78:b9:65:
67:c8:a5:8e:bf:da:36:32:01:44:e5:91:7e:9a:9b:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:57:BE:5A:58:77:E7:ED:1F:53:82:04:1E:1F:F2:A6:5C:F8:91
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5f:bf:cd:0b:d9:c9:2a:73:1c:b8:2f:ea:28:2d:bf:a7:e1:
5d:9c:40:19:ae:52:95:8c:a7:db:43:f9:40:1f:b6:04:d3:65:
6a:df:34:df:95:28:f6:91:10:e6:b8:f2:0c:80:c1:d6:3c:e9:
fc:cf:09:b0:38:f2:a8:a1:b5:9b:8b:bf:38:6b:8b:3c:86:28:
10:ba:24:d9:cc:97:2a:9f:e4:71:fb:b1:f8:28:d8:24:e4:2d:
bc:b1:ba:1f:d0:47:33:87:e4:48:b3:4d:e4:71:9f:28:a9:2e:
c8:4f:d1:61:97:11:ff:69:c3:ef:78:90:ae:4c:8e:9d:f4:b5:
f0:c5:9c:37:3f:3a:f5:fe:ea:2c:c3:95:9f:73:4d:d5:df:14:
25:e1:9c:26:d1:8f:55:e8:a8:38:a3:d6:1f:f7:2c:35:c5:78:
b6:b3:3f:8d:91:ab:f4:f5:7d:77:4b:f3:98:59:ea:d2:3a:8b:
c6:22:21:b1:61:e7:51:9f:f4:e3:4a:d6:48:7c:5d:c5:1a:fe:
05:17:7c:17:9c:b3:ba:b6:09:83:57:1a:8f:3b:f6:dd:0d:54:
76:95:03:45:fc:2b:75:44:0c:30:8d:1f:fa:c0:15:ab:3b:86:
09:74:76:cf:9b:9b:38:3f:cd:55:0f:d3:c6:87:15:7a:33:6b:
39:74:c3:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fM/WvUDFLpoIljfvKnTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmUwMDExZWJlNGYyMTZjNThkM2FiNDI4MTJiOTg0MDJi
ZTBiMmMwHhcNMjYwNjExMjEwMDQ3WhcNMjYwNjEyMjEwMDQ3WjAzMTEwLwYDVQQD
EyhmYmQ1NTdiZTVhNTg3N2U3ZWQxZjUzODIwNDFlMWZmMmE2NWNmODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4WZYkTlI6nntC6AUqDbmqsw3aaJ
LtDRtpey2xTCz3qH9mt8XJcc5g4c+kPlaHlcarP17JhKOxeCeTiSIzUGKjgchE3E
s8aPF2eQriJlY1W9EwVPN7ruFOpiBb8GmOOWmM9nlMZDuICqVHelr1S4pNGnjCJi
ccXoWiORO7d2hsgJY/nolCiFEsa8YC/cIO6lA3CxF2jbOimw/Zoa5TRHHeqEpfCg
uVKXSdV407fKvw7CS1J3A49bYPaI8Q5zEfz84Yo6CVuJ+2br3jg6ukAJ/1rdR5zd
OhzLGTJLelT44dgF0CjkbmgkJpCPvJB4uWVnyKWOv9o2MgFE5ZF+mptcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvVV75aWHfn7R9TggQeH/KmXPiRMB8GA1UdIwQY
MBaAFA/+ABHr5PIWxY06tCgSuYQCvgssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzIt
NmNjMGRhZjM0MWM0LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzItNmNjMGRhZjM0MWM0
LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOF+/zQvZ
ySpzHLgv6igtv6fhXZxAGa5SlYyn20P5QB+2BNNlat8035Uo9pEQ5rjyDIDB1jzp
/M8JsDjyqKG1m4u/OGuLPIYoELok2cyXKp/kcfux+CjYJOQtvLG6H9BHM4fkSLNN
5HGfKKkuyE/RYZcR/2nD73iQrkyOnfS18MWcNz869f7qLMOVn3NN1d8UJeGcJtGP
VeioOKPWH/csNcV4trM/jZGr9PV9d0vzmFnq0jqLxiIhsWHnUZ/040rWSHxdxRr+
BRd8F5yzurYJg1cajzv23Q1UdpUDRfwrdUQMMI0f+sAVqzuGCXR2z5ubOD/NVQ/T
xocVejNrOXTDgA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:55 2026 by rpki-client