Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: fm/HrqIoadzu6pDnyEYTUgKWoqipIjlm7KtcUugDeKk=
Subject key identifier: 19:CD:FB:6D:87:C1:9D:70:1A:79:BF:BB:32:3B:BA:59:80:6D:85:FA
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 019F10E4BA0DDADACB8483E5CA4D1A606872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 19A1
Signing time: Mon 29 Jun 2026 01:00:53 +0000
Manifest this update: Mon 29 Jun 2026 01:00:53 +0000
Manifest next update: Tue 30 Jun 2026 01:00:53 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: hHcQPvDDHVA9BClRFIyxQGLBV87p3dkkw9/q/GeD5IY=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:ba:0d:da:da:cb:84:83:e5:ca:4d:1a:60:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jun 29 01:00:53 2026 GMT
Not After : Jun 30 01:00:53 2026 GMT
Subject: CN=19cdfb6d87c19d701a79bfbb323bba59806d85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:09:38:4b:4d:d5:75:ae:fc:02:b9:a9:fd:
f3:cc:e8:2a:81:f0:bf:86:21:fb:b8:4f:71:e1:db:
9f:cf:d1:80:2d:e8:9c:76:53:49:8f:5b:6e:0a:ef:
e6:e5:a2:a4:4d:49:1a:28:da:cb:68:57:13:91:d9:
61:b7:02:52:c5:13:f5:6e:5e:e8:05:b6:15:24:1a:
f7:15:da:11:29:7b:f3:1b:76:79:c7:80:c1:8e:3a:
7b:1a:c1:88:30:b9:00:a1:11:e1:4c:87:bd:06:84:
1d:79:23:bf:55:27:6b:a5:57:b3:0f:7b:7b:4b:82:
f0:7d:22:d4:f0:07:d7:d4:db:e1:12:5e:b6:ac:99:
3c:e7:88:67:dc:22:39:68:d7:0b:0f:91:f3:cc:0d:
ab:b7:b7:ba:05:2a:06:b5:e0:a7:f9:f9:af:f4:29:
35:53:60:f3:47:7d:ee:ca:da:67:7b:86:e3:95:23:
c0:ec:f7:c3:9a:77:ed:dc:04:1e:19:cd:86:ba:06:
a2:17:02:a7:3c:af:a8:ce:13:c1:d6:88:3e:ad:82:
c7:86:39:2a:0f:79:5b:9e:19:3b:fb:57:f8:60:2e:
0a:88:d2:6e:cf:97:ab:18:a0:fc:35:4d:82:ce:c7:
8c:54:1e:34:e3:8d:b3:bb:da:cd:cb:a4:62:86:0c:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:FB:6D:87:C1:9D:70:1A:79:BF:BB:32:3B:BA:59:80:6D:85:FA
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:04:62:72:d4:a6:c5:aa:ab:91:c2:1e:04:05:5c:bf:24:
82:91:21:d4:69:d9:ce:75:24:73:f9:a7:4c:e5:d6:c1:3d:2c:
a8:ef:82:a5:13:58:68:02:b3:dd:c3:fd:3a:d0:8f:a0:6e:c5:
06:b1:98:0e:8c:7e:8b:32:d3:c9:5b:c1:43:42:61:ce:10:91:
27:45:e4:0a:c1:9b:de:df:46:c4:74:7d:28:0d:a9:b9:2d:e4:
6a:78:6a:fc:5c:72:26:18:ed:f6:bc:a4:b9:08:f9:97:f0:07:
87:66:d1:f1:9c:68:19:e3:b7:a7:aa:cb:d2:b2:a8:6d:64:a8:
20:ea:d9:0a:f6:c7:b8:e9:7b:e6:b6:0e:a2:b6:56:cc:a7:b1:
b9:70:9c:53:2e:56:d2:c5:eb:1d:cd:6e:35:af:ae:23:0c:c7:
53:8c:4f:05:45:14:eb:92:1d:3a:7d:a0:2d:a9:29:c1:59:dc:
8f:ea:06:18:ed:2a:da:e4:bd:18:8e:c3:f2:4d:70:73:3e:86:
59:9c:95:b8:08:fb:50:e2:8d:8a:b1:7a:f9:3e:ba:fa:12:71:
c8:6b:4a:e0:f5:a2:c8:b6:ad:10:d8:ed:31:91:50:85:45:4d:
b3:e1:a1:2b:53:63:8e:e2:74:b6:e5:61:dc:ba:f6:6a:cf:c6:
db:4b:49:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5LoN2trLhIPlyk0aYGhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1
M2U5MDAwHhcNMjYwNjI5MDEwMDUzWhcNMjYwNjMwMDEwMDUzWjAzMTEwLwYDVQQD
EygxOWNkZmI2ZDg3YzE5ZDcwMWE3OWJmYmIzMjNiYmE1OTgwNmQ4NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1kJOEtN1XWu/AK5qf3zzOgqgfC/
hiH7uE9x4dufz9GALeicdlNJj1tuCu/m5aKkTUkaKNrLaFcTkdlhtwJSxRP1bl7o
BbYVJBr3FdoRKXvzG3Z5x4DBjjp7GsGIMLkAoRHhTIe9BoQdeSO/VSdrpVezD3t7
S4LwfSLU8AfX1NvhEl62rJk854hn3CI5aNcLD5HzzA2rt7e6BSoGteCn+fmv9Ck1
U2DzR33uytpne4bjlSPA7PfDmnft3AQeGc2GugaiFwKnPK+ozhPB1og+rYLHhjkq
D3lbnhk7+1f4YC4KiNJuz5erGKD8NU2CzseMVB40442zu9rNy6RihgxBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnN+22HwZ1wGnm/uzI7ulmAbYX6MB8GA1UdIwQY
MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et
YzZmMWU2YWM5YmE5LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5
LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcwEYnLU
psWqq5HCHgQFXL8kgpEh1GnZznUkc/mnTOXWwT0sqO+CpRNYaAKz3cP9OtCPoG7F
BrGYDox+izLTyVvBQ0JhzhCRJ0XkCsGb3t9GxHR9KA2puS3kanhq/FxyJhjt9ryk
uQj5l/AHh2bR8ZxoGeO3p6rL0rKobWSoIOrZCvbHuOl75rYOorZWzKexuXCcUy5W
0sXrHc1uNa+uIwzHU4xPBUUU65IdOn2gLakpwVncj+oGGO0q2uS9GI7D8k1wcz6G
WZyVuAj7UOKNirF6+T66+hJxyGtK4PWiyLatENjtMZFQhUVNs+GhK1NjjuJ0tuVh
3Lr2as/G20tJLw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:30 2026 by rpki-client