Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: d6Wy9qTYTkwJwe8WnDdLINbqK74pIARqIoIFYUqEdjA=
Subject key identifier: 9B:34:74:82:BA:AF:BE:C1:38:70:7F:75:E0:04:C3:8E:4E:78:5B:18
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019EF982D8681EE3B015225FC0D29DEA047F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 0157
Signing time: Wed 24 Jun 2026 12:02:42 +0000
Manifest this update: Wed 24 Jun 2026 12:02:42 +0000
Manifest next update: Thu 25 Jun 2026 12:02:42 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: 6K68gP7SvnTOzT93ad1aDwyPOLfzgUJeQ6GzI45BZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 12:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:82:d8:68:1e:e3:b0:15:22:5f:c0:d2:9d:ea:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Jun 24 12:02:42 2026 GMT
Not After : Jun 25 12:02:42 2026 GMT
Subject: CN=9b347482baafbec138707f75e004c38e4e785b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:c6:b1:56:1b:f4:7f:9c:c2:5b:6d:3e:ed:
b2:e2:8d:c0:cd:c5:ff:fc:1f:4f:ee:03:3c:b7:6d:
14:72:ab:18:76:fc:44:b5:75:91:fd:ce:e4:93:70:
37:df:8f:9e:25:45:85:3d:5c:46:20:08:97:59:a4:
52:27:8e:ca:fd:b0:27:08:8a:af:36:0d:a9:18:d3:
bf:fd:76:c1:c7:5c:8b:77:f3:65:43:05:80:a5:64:
c1:17:74:21:5f:46:de:8b:52:8f:3a:70:f7:50:2d:
e0:90:0a:55:3b:c1:8d:20:0b:27:05:cb:d5:ff:33:
5f:99:6d:21:aa:5b:c6:60:65:e4:61:cc:af:32:50:
01:09:4c:6a:9d:1b:2b:46:a2:c3:2c:f0:82:99:72:
9d:dc:b1:f0:5e:c3:78:58:e1:02:28:e0:fe:35:7a:
fb:cd:0b:a7:7a:c6:58:c8:37:7e:5b:7e:0f:23:fb:
3e:22:ce:e1:79:52:0a:f2:b8:5e:40:9f:16:d7:aa:
3b:21:c2:d0:ae:cd:fa:0a:6a:c8:c4:e3:01:45:0e:
67:7c:95:c8:56:28:12:29:8e:56:7e:72:71:e6:91:
96:bc:7b:02:7e:2e:b4:fb:1a:07:94:68:54:00:75:
d9:e8:e3:97:f2:d2:54:a8:e5:8e:3d:c8:a6:47:bb:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:74:82:BA:AF:BE:C1:38:70:7F:75:E0:04:C3:8E:4E:78:5B:18
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:b5:23:3f:be:57:9d:72:23:b0:c2:38:1b:b4:b4:45:4d:
43:fa:8a:94:1d:16:d3:6e:f0:d7:ed:29:b3:8d:4b:28:bf:9c:
8a:d6:39:63:d3:8e:99:ac:8d:22:48:91:20:ec:38:6b:78:22:
13:33:81:cf:05:a0:b2:4a:6d:9f:96:64:0e:63:23:b0:8a:03:
76:fc:cd:d5:22:d2:3d:8a:dc:f9:20:11:3f:d3:16:f5:be:31:
43:12:ef:d9:38:89:00:89:6a:c2:e1:93:4d:46:f5:44:75:4e:
2b:b3:44:44:a5:20:f4:dd:8e:a6:1f:38:3b:a7:87:22:4a:76:
13:79:16:aa:b2:d4:a5:dc:4b:f3:4b:89:b6:25:23:74:b0:77:
88:f9:98:71:bb:4e:2e:54:f1:16:8f:01:1c:11:16:1f:a0:cd:
5c:8a:8c:0c:39:29:46:76:23:e1:2d:b4:22:0b:4f:a3:33:8f:
98:d4:1c:fc:45:12:53:97:25:23:84:a3:7b:40:bb:ed:4d:f5:
77:93:3b:94:b9:9e:c7:ab:a5:fb:76:f8:ce:5d:62:c7:64:b6:
a3:15:54:e5:2b:2e:31:bb:b9:ee:a5:90:25:3f:62:aa:61:4c:
3a:c1:54:29:77:52:6f:6d:34:93:f8:e7:24:b1:19:9b:df:1c:
49:07:43:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75gthoHuOwFSJfwNKd6gR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MmY1YTQxMGIxNTc3NTkxYTc4MGNkYjNlYWNjMjZkYTJk
ZmZkZjEwHhcNMjYwNjI0MTIwMjQyWhcNMjYwNjI1MTIwMjQyWjAzMTEwLwYDVQQD
Eyg5YjM0NzQ4MmJhYWZiZWMxMzg3MDdmNzVlMDA0YzM4ZTRlNzg1YjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPzGsVYb9H+cwlttPu2y4o3AzcX/
/B9P7gM8t20UcqsYdvxEtXWR/c7kk3A334+eJUWFPVxGIAiXWaRSJ47K/bAnCIqv
Ng2pGNO//XbBx1yLd/NlQwWApWTBF3QhX0bei1KPOnD3UC3gkApVO8GNIAsnBcvV
/zNfmW0hqlvGYGXkYcyvMlABCUxqnRsrRqLDLPCCmXKd3LHwXsN4WOECKOD+NXr7
zQunesZYyDd+W34PI/s+Is7heVIK8rheQJ8W16o7IcLQrs36CmrIxOMBRQ5nfJXI
VigSKY5WfnJx5pGWvHsCfi60+xoHlGhUAHXZ6OOX8tJUqOWOPcimR7vw1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs0dIK6r77BOHB/deAEw45OeFsYMB8GA1UdIwQY
MBaAFLUvWkELFXdZGngM2z6swm2i3/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iYjA0ODItNDRiNC00ZTgzLTgxOTYt
MDJlNmJkY2RiM2VjLzEvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iYjA0ODItNDRiNC00ZTgzLTgxOTYtMDJlNmJkY2RiM2Vj
LzEvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAG1Iz++
V51yI7DCOBu0tEVNQ/qKlB0W027w1+0ps41LKL+citY5Y9OOmayNIkiRIOw4a3gi
EzOBzwWgskptn5ZkDmMjsIoDdvzN1SLSPYrc+SARP9MW9b4xQxLv2TiJAIlqwuGT
TUb1RHVOK7NERKUg9N2Oph84O6eHIkp2E3kWqrLUpdxL80uJtiUjdLB3iPmYcbtO
LlTxFo8BHBEWH6DNXIqMDDkpRnYj4S20IgtPozOPmNQc/EUSU5clI4Sje0C77U31
d5M7lLmex6ul+3b4zl1ix2S2oxVU5SsuMbu57qWQJT9iqmFMOsFUKXdSb200k/jn
JLEZm98cSQdDRw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:58 2026 by rpki-client