Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: x3GjN8+eezbl1cjCJM0vA9IpPCqiZlf0YDVCgPeDsEs=
Subject key identifier: 96:CC:C2:42:DD:F3:C7:E8:EE:D5:95:2B:C6:86:16:54:42:FA:72:30
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019EB80F31E90603AEFFA70BA6210A9A958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 1966
Signing time: Thu 11 Jun 2026 19:01:03 +0000
Manifest this update: Thu 11 Jun 2026 19:01:03 +0000
Manifest next update: Fri 12 Jun 2026 19:01:03 +0000
Files and hashes: 1: 4T05fIk1IL5XmP-J7JePysAxRKE.roa (hash: CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=)
2: GIKwXPgpp9tYu44qAWsgouqavSk.roa (hash: U0ZjuWOGhkNCjwceAqeYAxKQDQUWsJyAsTBPjUkaiJM=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: 7VRVedAKY+4p5Y4baumLhSEOdoUH+vNwKLo7oqzZHMo=)
4: _r56llLnHAPpXxxxkXq1tr0D3E8.roa (hash: GaXEko33otm3bGM4yo2EOeA4n0z4wsimGbz5tJkDlo0=)
5: hdiJUsn-mGkGSUlT1Hqx92eDVHA.roa (hash: LJKbx4az7vTER8ap7GuxbSzBoud2G6PQUC4oXRhpf84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:31:e9:06:03:ae:ff:a7:0b:a6:21:0a:9a:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jun 11 19:01:03 2026 GMT
Not After : Jun 12 19:01:03 2026 GMT
Subject: CN=96ccc242ddf3c7e8eed5952bc686165442fa7230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:58:2d:70:d6:7b:55:4c:2d:51:81:05:ec:
56:ea:51:92:f6:0a:08:0b:05:03:4a:56:36:e8:4c:
f1:c0:7e:20:45:95:47:4e:72:23:11:59:d1:66:40:
a2:38:e7:c9:a0:99:d1:93:22:8b:58:ea:73:35:a9:
42:bd:41:f1:2e:43:3c:a4:01:5b:76:25:6c:c7:23:
25:b7:c4:90:54:46:63:7a:7a:3b:19:bf:30:c4:a5:
62:84:a2:77:db:cf:0a:a3:7b:58:9c:eb:0d:e8:71:
79:d4:d2:bc:ad:ab:12:39:6e:f4:3a:0a:fc:aa:58:
7d:19:89:0a:a6:e4:78:14:bc:16:e0:a4:01:5b:28:
fa:50:2b:fe:88:b2:22:74:a8:e8:74:72:2e:37:27:
f7:bc:b3:35:0d:78:22:b3:d1:d7:2e:dd:2b:46:77:
ce:38:a6:2a:91:00:80:2d:cd:7f:4e:5d:bf:61:ca:
91:6a:ef:a9:5f:a2:b0:ba:e5:19:4a:4b:c2:32:ff:
8b:e2:b3:01:a7:a8:3d:38:72:3e:5a:55:fe:b1:3b:
c4:dd:77:89:79:5e:98:20:0c:1f:6f:e2:a8:6b:9d:
92:c3:4b:96:c6:b2:69:47:99:9e:c6:1f:22:08:f1:
da:8d:e7:f6:bb:7c:dc:c9:29:f4:bd:3c:b7:d8:02:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CC:C2:42:DD:F3:C7:E8:EE:D5:95:2B:C6:86:16:54:42:FA:72:30
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f2:a2:aa:27:e9:64:bd:1d:5b:80:9e:b2:5f:9c:ca:63:87:
47:1e:97:b9:67:e0:58:d0:6f:bd:dd:7b:ec:b7:0e:4b:28:e6:
87:1d:9d:10:28:9c:ee:ae:53:1c:9f:7a:42:65:45:6a:a7:db:
dd:34:b5:c1:91:5d:a8:38:7a:9b:0a:2f:5a:64:16:11:59:f6:
2e:51:4a:f6:4c:a6:81:9a:36:3b:ad:26:b2:c7:64:c8:ed:9c:
4d:aa:ee:c6:54:0a:4c:8b:5a:11:c6:fc:f6:40:82:49:6b:e2:
8b:8a:92:1f:91:53:43:bc:08:af:df:6a:77:bb:4b:61:e2:ec:
c3:32:a4:78:56:28:bd:03:c8:f3:18:e7:2b:9a:a3:5b:62:07:
ca:03:67:33:3c:12:1e:55:12:13:f5:02:e0:c3:f1:99:1f:1b:
b9:85:0d:9f:97:c4:7f:a0:07:37:82:3e:cd:03:ec:0c:7a:c1:
67:60:9c:f0:fd:4d:d7:4e:da:83:ef:50:b7:39:20:08:93:7f:
03:c3:50:28:9c:bb:8e:28:89:44:cc:1c:58:4d:40:f5:57:f8:
29:9f:bb:30:b2:19:31:bb:31:3f:6d:52:ec:5b:5d:8f:67:c8:
d5:2e:93:8d:3e:8e:60:65:7c:e3:e7:34:d0:d5:ff:f3:45:a3:
d1:61:22:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DzHpBgOu/6cLpiEKmpWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjYyYWNlNjE1YjkwNmI0MmFiMjdmNGZiMWQyMDNkZjM2
ZDU0MzYwHhcNMjYwNjExMTkwMTAzWhcNMjYwNjEyMTkwMTAzWjAzMTEwLwYDVQQD
Eyg5NmNjYzI0MmRkZjNjN2U4ZWVkNTk1MmJjNjg2MTY1NDQyZmE3MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrlYLXDWe1VMLVGBBexW6lGS9goI
CwUDSlY26EzxwH4gRZVHTnIjEVnRZkCiOOfJoJnRkyKLWOpzNalCvUHxLkM8pAFb
diVsxyMlt8SQVEZjeno7Gb8wxKVihKJ3288Ko3tYnOsN6HF51NK8rasSOW70Ogr8
qlh9GYkKpuR4FLwW4KQBWyj6UCv+iLIidKjodHIuNyf3vLM1DXgis9HXLt0rRnfO
OKYqkQCALc1/Tl2/YcqRau+pX6KwuuUZSkvCMv+L4rMBp6g9OHI+WlX+sTvE3XeJ
eV6YIAwfb+Koa52Sw0uWxrJpR5mexh8iCPHajef2u3zcySn0vTy32AKVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbMwkLd88fo7tWVK8aGFlRC+nIwMB8GA1UdIwQY
MBaAFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDIt
OTcyYTRjM2RjM2YzLzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDItOTcyYTRjM2RjM2Yz
LzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPKiqifp
ZL0dW4Cesl+cymOHRx6XuWfgWNBvvd177LcOSyjmhx2dECic7q5THJ96QmVFaqfb
3TS1wZFdqDh6mwovWmQWEVn2LlFK9kymgZo2O60mssdkyO2cTaruxlQKTItaEcb8
9kCCSWvii4qSH5FTQ7wIr99qd7tLYeLswzKkeFYovQPI8xjnK5qjW2IHygNnMzwS
HlUSE/UC4MPxmR8buYUNn5fEf6AHN4I+zQPsDHrBZ2Cc8P1N107ag+9QtzkgCJN/
A8NQKJy7jiiJRMwcWE1A9Vf4KZ+7MLIZMbsxP21S7Ftdj2fI1S6TjT6OYGV84+c0
0NX/80Wj0WEi0g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:16 2026 by rpki-client