Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: ryuL2WGXu/P1RZfrO7WNVcrKR9wij7riSZO1+rAxQSQ=
Subject key identifier: F6:16:24:D9:77:96:7D:0B:AA:48:AD:C9:60:7A:8C:46:9F:AF:71:05
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 019ECD4D56A11BA6D1F58C1AC595FEDEF814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 11BC
Signing time: Mon 15 Jun 2026 22:00:58 +0000
Manifest this update: Mon 15 Jun 2026 22:00:58 +0000
Manifest next update: Tue 16 Jun 2026 22:00:58 +0000
Files and hashes: 1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: HIuN1JQ/xL8diiRuBMazL5AS4v/lu5YKks0zQ6KvgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:4d:56:a1:1b:a6:d1:f5:8c:1a:c5:95:fe:de:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Jun 15 22:00:58 2026 GMT
Not After : Jun 16 22:00:58 2026 GMT
Subject: CN=f61624d977967d0baa48adc9607a8c469faf7105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:7c:e2:3e:42:83:78:70:f2:d9:d1:4b:13:
83:db:2e:21:fc:9a:7a:29:2d:08:84:01:45:e2:4f:
7c:e6:2d:0b:9e:4a:e1:12:41:9e:3e:68:b6:66:83:
7b:3d:2c:1e:41:ef:94:5e:50:50:b4:ca:73:51:2a:
7c:ec:f0:be:20:7a:ff:4d:6c:9a:97:2e:9e:e0:dd:
9d:1d:d1:27:17:bf:36:27:23:03:16:77:52:98:45:
9c:1e:38:2a:28:9c:e6:f7:e9:d0:be:a8:6a:4d:a9:
af:00:14:e2:da:1a:00:be:9f:e4:51:c9:41:2e:ea:
d0:45:fd:11:8c:16:2b:b9:82:dc:7e:dc:5b:60:3f:
df:08:28:bc:b6:90:e0:66:51:6d:ee:4b:dc:aa:11:
a6:33:bf:9d:ae:99:3b:37:30:81:3c:ba:28:9a:f6:
af:da:02:a4:0e:a1:40:d0:97:cf:b6:ce:08:25:0a:
a0:b0:6e:2a:37:73:49:87:ed:2e:b0:ba:5a:18:5f:
70:5c:2c:0e:a4:df:74:1f:fe:1e:09:4c:ba:63:ef:
3e:1a:ca:e3:8d:2d:bd:cf:af:77:78:ef:58:6e:09:
2e:59:e3:40:1e:df:49:ed:e8:e2:0c:64:18:8b:87:
04:29:a1:52:ee:92:59:07:63:12:78:4b:23:7c:cc:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:24:D9:77:96:7D:0B:AA:48:AD:C9:60:7A:8C:46:9F:AF:71:05
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:48:65:50:f1:55:29:fb:46:bf:eb:60:cf:21:c8:d1:0b:6e:
d1:6e:28:69:38:20:13:75:87:50:db:10:ac:f9:8a:f6:0b:ee:
bf:78:50:94:48:76:b5:95:d8:f2:50:b7:b5:e1:01:90:e4:2a:
f8:ce:dc:0f:c3:fd:a8:f7:ff:8b:b8:1b:53:23:d7:c0:4e:d5:
dd:a4:56:20:76:21:62:c7:ee:d5:dd:25:dc:e8:a3:7d:23:51:
59:2d:68:5d:7d:2e:6a:4d:bc:82:5b:8f:8f:a7:14:d3:df:5e:
bb:56:88:e1:0e:1f:5a:62:3f:fe:e5:b0:7a:df:4b:5d:8e:0d:
f5:f1:b5:97:d7:cb:cc:a5:07:00:11:18:1f:79:a1:d1:e8:0f:
71:60:1e:be:d6:31:33:bf:81:d9:7b:07:d1:98:0f:bd:01:86:
f5:11:b8:fc:49:bf:c8:ab:d2:04:be:85:3d:94:20:fd:36:d5:
87:13:a2:ca:92:22:33:6b:1d:2f:09:8a:23:71:8a:78:52:07:
4b:55:6e:63:88:d4:98:40:a9:bc:83:8f:03:aa:24:89:98:93:
ef:b0:96:32:e5:7f:4a:d7:7b:44:d0:b4:ca:ae:5a:9a:14:f5:
05:1f:6e:df:58:60:a6:e0:c3:00:e5:89:70:00:bb:37:fd:06:
d0:8a:98:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7NTVahG6bR9YwaxZX+3vgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx
MjE2NDQwHhcNMjYwNjE1MjIwMDU4WhcNMjYwNjE2MjIwMDU4WjAzMTEwLwYDVQQD
EyhmNjE2MjRkOTc3OTY3ZDBiYWE0OGFkYzk2MDdhOGM0NjlmYWY3MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1h84j5Cg3hw8tnRSxOD2y4h/Jp6
KS0IhAFF4k985i0LnkrhEkGePmi2ZoN7PSweQe+UXlBQtMpzUSp87PC+IHr/TWya
ly6e4N2dHdEnF782JyMDFndSmEWcHjgqKJzm9+nQvqhqTamvABTi2hoAvp/kUclB
LurQRf0RjBYruYLcftxbYD/fCCi8tpDgZlFt7kvcqhGmM7+drpk7NzCBPLoomvav
2gKkDqFA0JfPts4IJQqgsG4qN3NJh+0usLpaGF9wXCwOpN90H/4eCUy6Y+8+Gsrj
jS29z693eO9YbgkuWeNAHt9J7ejiDGQYi4cEKaFS7pJZB2MSeEsjfMx+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYWJNl3ln0LqkityWB6jEafr3EFMB8GA1UdIwQY
MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt
MzA1ZmIwOTU1NmM5LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5
LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA40hlUPFV
KftGv+tgzyHI0Qtu0W4oaTggE3WHUNsQrPmK9gvuv3hQlEh2tZXY8lC3teEBkOQq
+M7cD8P9qPf/i7gbUyPXwE7V3aRWIHYhYsfu1d0l3OijfSNRWS1oXX0uak28gluP
j6cU099eu1aI4Q4fWmI//uWwet9LXY4N9fG1l9fLzKUHABEYH3mh0egPcWAevtYx
M7+B2XsH0ZgPvQGG9RG4/Em/yKvSBL6FPZQg/TbVhxOiypIiM2sdLwmKI3GKeFIH
S1VuY4jUmECpvIOPA6okiZiT77CWMuV/Std7RNC0yq5amhT1BR9u31hgpuDDAOWJ
cAC7N/0G0IqYnA==
-----END CERTIFICATE-----
Generated at Tue Jun 16 08:01:26 2026 by rpki-client