Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: QuGLw/fEyJn+P4Vzd19A7WOI/jBIKlJykyOrqmDpcf8=
Subject key identifier: CC:84:02:FF:34:2D:07:46:A3:9F:EF:46:06:57:2A:E1:68:FA:AB:02
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019EB8461DAFAF1D06D09F35348464868CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1112
Signing time: Thu 11 Jun 2026 20:01:03 +0000
Manifest this update: Thu 11 Jun 2026 20:01:03 +0000
Manifest next update: Fri 12 Jun 2026 20:01:03 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: NWJ3NmPmZViwPYwXBsctZ1gJByQcOdfkgdjEXx3vg/o=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:1d:af:af:1d:06:d0:9f:35:34:84:64:86:8c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jun 11 20:01:03 2026 GMT
Not After : Jun 12 20:01:03 2026 GMT
Subject: CN=cc8402ff342d0746a39fef4606572ae168faab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:04:ad:4c:60:bd:94:8b:f0:ec:c5:dd:7e:
d8:dc:b9:fc:f2:74:38:27:47:f3:d3:23:5e:a7:49:
c5:d7:ff:13:81:86:63:b8:8f:cd:cf:87:43:d8:90:
08:d1:65:e2:a6:12:28:cf:7e:d1:0d:82:46:db:3c:
bf:2a:47:23:de:ab:89:aa:ce:65:92:4c:97:af:06:
c0:2e:91:5a:53:1e:a1:8a:3e:35:04:5c:4a:3b:7a:
db:86:84:2f:3d:a3:01:a8:cb:fb:84:42:de:eb:74:
79:5b:c6:50:fd:3a:79:2a:69:f5:07:96:6a:82:f6:
04:25:2c:b2:58:58:4d:1a:c6:ba:4a:95:15:53:e2:
50:49:81:56:c1:c1:34:f4:78:d7:48:47:47:0b:d7:
fd:7f:20:72:cd:78:80:99:28:fa:43:3c:8d:6c:c3:
9f:f4:bf:31:10:d3:e3:85:0f:eb:2e:0a:63:eb:b7:
f2:b8:44:fa:b9:12:1f:97:51:9d:a5:98:ce:fc:ad:
08:a9:61:bc:30:25:ec:e6:44:bb:53:4b:0d:8b:37:
a0:8c:84:2d:33:01:93:1f:2f:fe:f9:71:e9:e4:da:
65:c9:ef:e9:d5:24:0b:32:14:38:3e:de:ed:36:89:
5a:8d:07:c3:70:2f:71:1b:33:cf:2a:d0:c0:e7:b6:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:02:FF:34:2D:07:46:A3:9F:EF:46:06:57:2A:E1:68:FA:AB:02
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:91:c6:73:6c:b5:d0:8a:e8:f2:32:cb:f4:a1:8e:e2:cb:
32:9e:07:04:f1:d9:70:65:e7:17:3d:32:18:69:9d:a0:bd:98:
2b:69:b5:55:31:28:ed:17:9d:bb:be:99:4a:da:90:d8:38:ce:
b1:1e:81:b6:eb:7f:0d:94:7b:5c:ba:55:ac:17:fe:27:57:d2:
eb:f7:92:67:55:74:8a:5a:c0:10:5d:88:6e:b9:43:60:da:55:
7e:d2:74:ff:91:31:c7:c6:cf:58:e2:31:3c:be:3f:cf:bd:77:
a2:a0:be:b7:40:32:04:62:39:be:7c:93:ec:1e:52:b7:96:df:
47:28:d9:52:21:d9:4b:29:79:ef:f1:5e:ea:d2:c6:40:bf:96:
64:75:77:1d:1a:68:a5:51:57:54:79:80:95:f4:c3:aa:94:69:
ef:57:c0:b2:67:e6:80:44:a0:b1:c2:a4:ae:ad:cc:28:2a:72:
38:a1:c1:c5:f8:b4:a9:33:dd:42:26:58:df:23:98:9b:d9:ee:
fc:a5:24:f4:25:1b:60:d4:a0:51:9a:a8:9c:b4:41:a3:1f:71:
f5:d9:1c:09:b1:77:27:5e:83:52:99:02:66:23:9c:d0:91:4e:
a3:a5:ce:96:d2:f8:cd:84:6d:e8:be:45:82:82:9a:77:bf:02:
11:3e:53:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Rh2vrx0G0J81NIRkhoyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl
NzVhYjMwHhcNMjYwNjExMjAwMTAzWhcNMjYwNjEyMjAwMTAzWjAzMTEwLwYDVQQD
EyhjYzg0MDJmZjM0MmQwNzQ2YTM5ZmVmNDYwNjU3MmFlMTY4ZmFhYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQErUxgvZSL8OzF3X7Y3Ln88nQ4
J0fz0yNep0nF1/8TgYZjuI/Nz4dD2JAI0WXiphIoz37RDYJG2zy/Kkcj3quJqs5l
kkyXrwbALpFaUx6hij41BFxKO3rbhoQvPaMBqMv7hELe63R5W8ZQ/Tp5Kmn1B5Zq
gvYEJSyyWFhNGsa6SpUVU+JQSYFWwcE09HjXSEdHC9f9fyByzXiAmSj6QzyNbMOf
9L8xENPjhQ/rLgpj67fyuET6uRIfl1GdpZjO/K0IqWG8MCXs5kS7U0sNizegjIQt
MwGTHy/++XHp5Nplye/p1SQLMhQ4Pt7tNolajQfDcC9xGzPPKtDA57ZuUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyEAv80LQdGo5/vRgZXKuFo+qsCMB8GA1UdIwQY
MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt
Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz
LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDaRxnNs
tdCK6PIyy/ShjuLLMp4HBPHZcGXnFz0yGGmdoL2YK2m1VTEo7Redu76ZStqQ2DjO
sR6Btut/DZR7XLpVrBf+J1fS6/eSZ1V0ilrAEF2IbrlDYNpVftJ0/5Exx8bPWOIx
PL4/z713oqC+t0AyBGI5vnyT7B5St5bfRyjZUiHZSyl57/Fe6tLGQL+WZHV3HRpo
pVFXVHmAlfTDqpRp71fAsmfmgESgscKkrq3MKCpyOKHBxfi0qTPdQiZY3yOYm9nu
/KUk9CUbYNSgUZqonLRBox9x9dkcCbF3J16DUpkCZiOc0JFOo6XOltL4zYRt6L5F
goKad78CET5TOA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:35 2026 by rpki-client