Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: NPbMT1nhJpTgjIjs3SymspXNzeFrGFDP3pURBBowvcg=
Subject key identifier: 6C:1A:48:23:D8:35:27:85:1D:1E:CC:95:CE:FA:F4:28:60:0D:B8:07
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019EB7A0FD5CD9C591E1F52D01E16A17F8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0E1D
Signing time: Thu 11 Jun 2026 17:00:41 +0000
Manifest this update: Thu 11 Jun 2026 17:00:41 +0000
Manifest next update: Fri 12 Jun 2026 17:00:41 +0000
Files and hashes: 1: 12UJF4HYmWUHj7PV3zv7e2Gsrnc.roa (hash: MFtJUTjKP5EZY8W9GLM2rnUmvMbXeeAVoqfoR4gu6rY=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: G2UjmwxQAbJ16z1qm2aIm3qwC/Dp9jUE7ufn7sFgQGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:fd:5c:d9:c5:91:e1:f5:2d:01:e1:6a:17:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Jun 11 17:00:41 2026 GMT
Not After : Jun 12 17:00:41 2026 GMT
Subject: CN=6c1a4823d83527851d1ecc95cefaf428600db807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:26:6f:98:77:67:a6:2b:77:2f:60:61:23:
b1:29:66:11:a9:b6:46:e2:8b:cd:4d:41:50:81:3c:
02:cd:a4:ad:80:5f:e8:8e:12:cd:e3:6a:2c:f3:b9:
e6:1f:ea:d6:a0:bc:d9:70:b5:14:21:8d:2b:4f:4a:
b1:20:be:c0:62:1a:6f:3f:90:9a:41:7c:3c:a6:a3:
3a:9f:b6:92:9c:39:43:5c:7d:97:6e:87:88:ef:85:
c9:fe:85:72:5e:74:09:ff:36:9a:a5:71:96:93:64:
e1:91:fc:2a:b9:a5:f1:5e:a6:45:9d:de:47:22:e9:
ea:69:96:8c:08:ca:01:4f:4b:b9:6f:c7:53:af:bc:
39:db:45:d8:ff:e5:f5:90:e9:91:eb:8a:5e:c9:9a:
20:f6:c2:f6:7d:b0:64:48:68:52:4e:97:b5:a8:ca:
4b:21:13:95:f7:39:68:f4:7c:a0:a3:14:1d:4b:e4:
7d:45:06:41:94:35:4a:d5:a2:72:d4:73:93:3c:8c:
b8:de:79:b9:22:c2:ad:f1:9c:2a:ac:a0:3d:95:86:
e2:4c:1e:7f:91:13:4c:08:ee:6c:6a:db:fd:c1:a4:
de:08:d0:9e:50:6e:6b:3d:33:54:f0:eb:dc:ee:f6:
3f:a9:37:09:79:39:51:61:16:ee:f3:e4:79:86:b9:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:48:23:D8:35:27:85:1D:1E:CC:95:CE:FA:F4:28:60:0D:B8:07
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ba:ea:97:9b:9e:b0:df:0e:dd:80:4e:98:45:e8:81:b8:75:
0d:3e:c4:c3:d2:77:23:ac:d3:a1:5a:bb:df:e1:8b:88:17:d9:
59:90:77:c1:d0:6c:3a:fe:de:82:dc:e5:65:ab:51:12:b6:d5:
00:4f:24:63:8a:df:81:ce:39:5c:4d:be:7e:6b:a6:54:37:2b:
ff:e1:3e:2c:63:69:b9:5a:bc:9b:34:52:22:5d:3b:22:d4:a4:
9f:8e:fd:41:a2:c1:d1:9d:22:ed:ee:4e:bc:c3:10:ff:80:3e:
e1:52:49:8e:88:5b:39:ba:30:cc:d4:b2:b4:b2:12:c8:14:0f:
b3:2d:26:81:55:31:30:d9:2a:7a:75:25:28:aa:c9:cb:ff:dc:
e9:a7:ca:93:30:c0:4f:c9:ca:4b:e3:24:a9:26:e4:ac:db:e3:
99:33:48:93:b9:32:d3:b3:6f:5c:34:9a:22:46:7b:1e:19:0c:
bd:68:ec:32:fb:8e:9d:b4:33:1e:26:30:d5:13:59:1b:95:95:
fc:87:85:e4:06:d4:c6:b9:d2:14:57:bb:44:5f:b3:dd:de:b3:
26:43:fc:7d:77:23:a8:6b:74:71:cb:be:f7:96:3c:94:8c:40:
c0:64:74:16:07:cb:9c:7e:e5:04:55:4d:05:4f:1a:9d:b0:e4:
23:f1:82:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oP1c2cWR4fUtAeFqF/j7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYWU3YjVjOWEzMDE5OGJkNzE3OGI0OGI4NWYwYjIyMWE1
ZTFlYjcwHhcNMjYwNjExMTcwMDQxWhcNMjYwNjEyMTcwMDQxWjAzMTEwLwYDVQQD
Eyg2YzFhNDgyM2Q4MzUyNzg1MWQxZWNjOTVjZWZhZjQyODYwMGRiODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IMmb5h3Z6Yrdy9gYSOxKWYRqbZG
4ovNTUFQgTwCzaStgF/ojhLN42os87nmH+rWoLzZcLUUIY0rT0qxIL7AYhpvP5Ca
QXw8pqM6n7aSnDlDXH2XboeI74XJ/oVyXnQJ/zaapXGWk2ThkfwquaXxXqZFnd5H
IunqaZaMCMoBT0u5b8dTr7w520XY/+X1kOmR64peyZog9sL2fbBkSGhSTpe1qMpL
IROV9zlo9HygoxQdS+R9RQZBlDVK1aJy1HOTPIy43nm5IsKt8ZwqrKA9lYbiTB5/
kRNMCO5satv9waTeCNCeUG5rPTNU8Ovc7vY/qTcJeTlRYRbu8+R5hrmc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwaSCPYNSeFHR7Mlc769ChgDbgHMB8GA1UdIwQY
MBaAFH2ue1yaMBmL1xeLSLhfCyIaXh63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEt
NDI5ZDY2OGQ5MjI4LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEtNDI5ZDY2OGQ5MjI4
LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrrql5ue
sN8O3YBOmEXogbh1DT7Ew9J3I6zToVq73+GLiBfZWZB3wdBsOv7egtzlZatRErbV
AE8kY4rfgc45XE2+fmumVDcr/+E+LGNpuVq8mzRSIl07ItSkn479QaLB0Z0i7e5O
vMMQ/4A+4VJJjohbObowzNSytLISyBQPsy0mgVUxMNkqenUlKKrJy//c6afKkzDA
T8nKS+MkqSbkrNvjmTNIk7ky07NvXDSaIkZ7HhkMvWjsMvuOnbQzHiYw1RNZG5WV
/IeF5AbUxrnSFFe7RF+z3d6zJkP8fXcjqGt0ccu+95Y8lIxAwGR0FgfLnH7lBFVN
BU8anbDkI/GC8Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:23:59 2026 by rpki-client