Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: C7hGR//HSx2/h1cuYM1NokTQ1Yzdw+UmEqWE+/ZIdag=
Subject key identifier: 46:F3:70:07:9D:63:89:AB:B1:7D:FF:FC:12:CA:31:E6:CE:B3:B3:F2
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019EB922521CAA4ACB87CDB740D7DC3884B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1955
Signing time: Fri 12 Jun 2026 00:01:34 +0000
Manifest this update: Fri 12 Jun 2026 00:01:34 +0000
Manifest next update: Sat 13 Jun 2026 00:01:34 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: KMoNp5S7/2dfkSoN2iF57sqvylJyzOdwk//IYSo2WeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:52:1c:aa:4a:cb:87:cd:b7:40:d7:dc:38:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jun 12 00:01:34 2026 GMT
Not After : Jun 13 00:01:34 2026 GMT
Subject: CN=46f370079d6389abb17dfffc12ca31e6ceb3b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:77:96:6f:5c:16:00:29:18:45:c7:28:6b:
ef:98:07:a9:45:aa:fc:52:b7:ef:c8:d6:ed:e1:72:
1c:ba:f5:85:4f:b7:93:bb:c8:c3:35:0b:46:5e:1b:
63:8c:af:d6:f5:38:b2:6d:59:c3:e9:29:86:5a:42:
8c:36:69:a7:29:6f:43:08:6b:07:60:8f:47:d0:77:
00:e8:92:2c:ef:e2:15:b3:73:b5:6f:c6:f8:e4:b2:
b7:4c:01:58:30:66:a3:1d:9e:81:51:66:d9:29:d8:
b3:4c:5f:ab:b1:65:61:c6:e1:d9:9c:38:4d:43:fc:
4d:22:38:62:ed:46:27:aa:de:4b:3c:2f:37:bc:8e:
ef:8f:1c:b9:ce:b6:6c:c9:d7:d7:0b:4c:1e:ca:2d:
28:88:ab:ed:76:1c:fc:e5:d2:32:cc:1c:e5:35:2e:
6f:57:4f:68:7a:21:12:c6:03:03:2b:f1:96:7c:e0:
27:9f:4f:10:a0:b7:c3:06:13:b3:5c:12:57:1d:9f:
42:5d:0b:5d:f4:f8:bb:a6:15:e2:8c:84:73:45:04:
72:f0:e0:54:6f:5e:a6:92:e6:9e:f5:5d:3b:e9:52:
93:88:17:78:d0:b6:a7:a0:a1:36:22:04:b0:29:fb:
43:cf:12:af:ea:f0:d6:24:c1:89:67:ae:89:5d:cb:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:70:07:9D:63:89:AB:B1:7D:FF:FC:12:CA:31:E6:CE:B3:B3:F2
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d4:f5:a0:ff:a2:a0:00:3d:7d:6b:f6:24:f6:96:b7:a4:4c:
47:28:e6:08:26:77:d1:f9:f7:76:3c:2c:c7:69:3c:bc:a5:94:
26:0e:1b:a1:53:2d:6a:57:81:2a:d3:0e:46:eb:0e:1b:d1:04:
d6:d6:44:66:cd:3e:a8:bd:e8:cd:ec:0e:b7:a5:71:4e:17:46:
e3:43:6b:15:e9:dd:02:e8:e3:2f:df:c4:d4:14:c6:52:25:30:
4b:7a:25:46:e2:65:c4:a0:ab:09:04:17:18:33:19:53:81:40:
56:ce:d9:09:34:78:dd:64:4f:d6:11:a5:7b:35:29:0e:0f:a3:
37:58:80:4c:b0:8c:0e:1c:6e:4e:b6:f2:2f:5b:48:4e:34:e6:
d1:47:61:cb:78:aa:3e:a6:fb:32:0e:b2:f2:30:0f:56:0f:9a:
16:75:7c:e1:5f:a6:6b:6c:ae:94:c9:07:09:e0:7a:34:57:ba:
e4:81:d8:c1:5b:cc:be:64:7f:85:02:e0:b8:7c:2e:9f:35:b2:
cb:a7:50:16:0a:3f:5d:23:17:68:ee:bf:f8:56:e8:df:9e:d6:
d4:bf:73:88:c8:c8:f7:b9:cd:14:4b:18:4a:61:16:64:f9:0b:
92:ee:03:0e:84:0a:ff:f3:bd:b7:ce:3a:c8:37:f3:10:18:ff:
e8:af:0f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IlIcqkrLh823QNfcOIS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFhNTU1YTMyOWVkZDg2NjA2Y2MwZTNlMjk2YmQ0Nzhh
YzczZGUwHhcNMjYwNjEyMDAwMTM0WhcNMjYwNjEzMDAwMTM0WjAzMTEwLwYDVQQD
Eyg0NmYzNzAwNzlkNjM4OWFiYjE3ZGZmZmMxMmNhMzFlNmNlYjNiM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYp3lm9cFgApGEXHKGvvmAepRar8
UrfvyNbt4XIcuvWFT7eTu8jDNQtGXhtjjK/W9TiybVnD6SmGWkKMNmmnKW9DCGsH
YI9H0HcA6JIs7+IVs3O1b8b45LK3TAFYMGajHZ6BUWbZKdizTF+rsWVhxuHZnDhN
Q/xNIjhi7UYnqt5LPC83vI7vjxy5zrZsydfXC0weyi0oiKvtdhz85dIyzBzlNS5v
V09oeiESxgMDK/GWfOAnn08QoLfDBhOzXBJXHZ9CXQtd9Pi7phXijIRzRQRy8OBU
b16mkuae9V076VKTiBd40LanoKE2IgSwKftDzxKv6vDWJMGJZ66JXctgmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbzcAedY4mrsX3//BLKMebOs7PyMB8GA1UdIwQY
MBaAFJeqpVWjKe3YZgbMDj4pa9R4rHPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjIt
N2ZkMGRlYWUzMmM1LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjItN2ZkMGRlYWUzMmM1
LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktT1oP+i
oAA9fWv2JPaWt6RMRyjmCCZ30fn3djwsx2k8vKWUJg4boVMtaleBKtMORusOG9EE
1tZEZs0+qL3ozewOt6VxThdG40NrFendAujjL9/E1BTGUiUwS3olRuJlxKCrCQQX
GDMZU4FAVs7ZCTR43WRP1hGlezUpDg+jN1iATLCMDhxuTrbyL1tITjTm0Udhy3iq
Pqb7Mg6y8jAPVg+aFnV84V+ma2yulMkHCeB6NFe65IHYwVvMvmR/hQLguHwunzWy
y6dQFgo/XSMXaO6/+Fbo357W1L9ziMjI97nNFEsYSmEWZPkLku4DDoQK//O9t846
yDfzEBj/6K8Pcg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:26:45 2026 by rpki-client