Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: sCTqWfjhwzWdm6PrOOXuD07MihZMq11Ej3JHqIwGrT0=
Subject key identifier: 23:7A:E7:CB:71:01:C8:65:7C:97:70:56:E1:6F:2F:EF:57:FB:0D:5F
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019EB055F772F427E448AF5E4C6D33ECA32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1954
Signing time: Wed 10 Jun 2026 07:01:24 +0000
Manifest this update: Wed 10 Jun 2026 07:01:24 +0000
Manifest next update: Thu 11 Jun 2026 07:01:24 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: Wp+w1GHyFBwM9YQH7OysKOPS2MrNAExvaOExBPdSLwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:55:f7:72:f4:27:e4:48:af:5e:4c:6d:33:ec:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 10 07:01:24 2026 GMT
Not After : Jun 11 07:01:24 2026 GMT
Subject: CN=237ae7cb7101c8657c977056e16f2fef57fb0d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:c2:e1:75:2a:d4:19:e8:60:f6:7c:ab:1b:
9c:59:2e:43:3b:5e:d8:ec:77:9c:0a:8a:f0:62:98:
b0:7d:5f:b9:08:32:5f:d4:66:57:9b:79:89:95:10:
51:fa:e5:d4:eb:ca:ea:f5:90:11:49:ab:a2:51:8b:
ec:af:93:1f:45:1b:64:77:6a:ba:a0:8c:93:9e:cc:
25:98:a8:69:3a:15:0c:d6:6c:0b:dd:65:91:df:80:
9b:7e:e1:99:12:63:17:71:72:84:1d:1a:5a:aa:f7:
73:04:14:c7:c4:0d:55:e0:02:d8:90:90:6d:d0:b5:
be:d6:e3:d0:3d:4d:a7:88:b2:05:c1:aa:04:e9:1d:
c3:08:a9:56:62:e2:18:74:b8:bb:d3:8f:e3:30:9a:
5a:9a:86:e7:40:fc:69:7e:0a:dc:19:6f:07:82:11:
5f:64:0a:ef:b8:8a:34:26:0e:ef:1f:e2:01:a4:16:
38:ff:a6:fc:51:7c:1c:57:a7:d4:14:80:f5:bb:fe:
07:9c:0f:dc:ef:31:0a:33:3e:c5:04:1a:d7:1e:8c:
0c:dc:c1:67:af:ce:69:c8:a3:1a:40:9a:06:d0:26:
0a:77:c1:7f:3a:97:d7:0e:04:31:88:70:09:00:72:
30:f3:e1:61:84:a6:03:c1:b7:43:df:f3:d3:e2:0d:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:E7:CB:71:01:C8:65:7C:97:70:56:E1:6F:2F:EF:57:FB:0D:5F
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4d:2a:c5:88:cd:17:13:8e:9a:80:eb:4f:92:7f:1b:95:64:
55:c7:eb:b4:db:a9:04:06:a8:0c:2d:4b:a3:14:bc:9d:eb:8a:
8f:16:34:84:1a:e7:28:61:36:56:40:23:35:5b:f3:d0:71:ed:
6a:1f:14:86:97:05:ab:99:83:1d:12:de:b0:99:44:f6:ef:8f:
59:65:38:e8:8d:15:8d:b4:de:23:6d:ba:32:51:79:c1:3a:2b:
3a:c4:cb:7a:6c:39:e5:47:8b:65:a2:5c:57:14:f2:b6:8a:42:
85:46:25:eb:43:26:33:64:31:3f:4e:46:25:f9:54:e4:4b:96:
b9:10:d6:0f:4c:ac:cd:2c:20:98:dd:3e:3e:ab:9b:16:23:9c:
72:1d:75:d0:c8:a8:97:44:ad:e1:aa:87:66:a4:45:22:de:45:
e3:61:43:f4:c2:42:95:8a:36:cc:a4:df:4c:52:0d:e2:7f:ad:
5f:12:28:69:3f:21:a0:f8:e1:85:1a:69:f9:54:b0:48:d3:52:
6a:35:3f:09:3e:d0:3e:26:ba:a5:cf:4a:76:95:11:3b:39:3e:
dc:00:58:8e:38:f6:92:2e:c5:bb:e6:51:06:52:8c:97:32:31:
bf:76:93:df:a6:18:e6:03:23:8e:ab:ab:28:25:a1:83:b8:1c:
fe:53:5f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6wVfdy9CfkSK9eTG0z7KMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi
NjEzZGYwHhcNMjYwNjEwMDcwMTI0WhcNMjYwNjExMDcwMTI0WjAzMTEwLwYDVQQD
EygyMzdhZTdjYjcxMDFjODY1N2M5NzcwNTZlMTZmMmZlZjU3ZmIwZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fHC4XUq1BnoYPZ8qxucWS5DO17Y
7HecCorwYpiwfV+5CDJf1GZXm3mJlRBR+uXU68rq9ZARSauiUYvsr5MfRRtkd2q6
oIyTnswlmKhpOhUM1mwL3WWR34CbfuGZEmMXcXKEHRpaqvdzBBTHxA1V4ALYkJBt
0LW+1uPQPU2niLIFwaoE6R3DCKlWYuIYdLi704/jMJpamobnQPxpfgrcGW8HghFf
ZArvuIo0Jg7vH+IBpBY4/6b8UXwcV6fUFID1u/4HnA/c7zEKMz7FBBrXHowM3MFn
r85pyKMaQJoG0CYKd8F/OpfXDgQxiHAJAHIw8+FhhKYDwbdD3/PT4g3mIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN658txAchlfJdwVuFvL+9X+w1fMB8GA1UdIwQY
MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU0qxYjN
FxOOmoDrT5J/G5VkVcfrtNupBAaoDC1LoxS8neuKjxY0hBrnKGE2VkAjNVvz0HHt
ah8UhpcFq5mDHRLesJlE9u+PWWU46I0VjbTeI226MlF5wTorOsTLemw55UeLZaJc
VxTytopChUYl60MmM2QxP05GJflU5EuWuRDWD0yszSwgmN0+PqubFiOcch110Mio
l0St4aqHZqRFIt5F42FD9MJClYo2zKTfTFIN4n+tXxIoaT8hoPjhhRpp+VSwSNNS
ajU/CT7QPia6pc9KdpUROzk+3ABYjjj2ki7Fu+ZRBlKMlzIxv3aT36YY5gMjjqur
KCWhg7gc/lNflQ==
-----END CERTIFICATE-----
Generated at Wed Jun 10 17:33:39 2026 by rpki-client