Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: N15KmMQ/NGDgXwVZ9qRqSpXTp0r49Q1OI9yYixUvi3U=
Subject key identifier: 0A:B7:19:EF:9A:8D:6E:B5:85:2F:6B:6C:08:2B:66:2A:4C:B2:49:8E
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019EB80ED125E00A328F92F55483EF297766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 11EC
Signing time: Thu 11 Jun 2026 19:00:39 +0000
Manifest this update: Thu 11 Jun 2026 19:00:39 +0000
Manifest next update: Fri 12 Jun 2026 19:00:39 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: S0V2MvDMB9vvZhFRSbCDrSHVahabgvdqHxU/ZwN8xFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:d1:25:e0:0a:32:8f:92:f5:54:83:ef:29:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Jun 11 19:00:39 2026 GMT
Not After : Jun 12 19:00:39 2026 GMT
Subject: CN=0ab719ef9a8d6eb5852f6b6c082b662a4cb2498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:58:35:24:5f:3d:83:4a:58:4a:cb:29:33:
ff:fe:6d:fa:98:5c:44:d8:a9:f3:ae:1f:bc:53:21:
ed:e2:a9:5e:e0:eb:99:c4:50:34:62:3a:18:0d:cd:
ad:0a:0f:9e:01:db:b0:cd:16:a0:83:b8:cb:f1:7a:
9e:2f:9e:c1:35:cb:54:3c:84:12:98:c0:22:d1:ff:
c6:49:de:a0:5c:18:03:41:5a:18:6c:1f:a7:16:9a:
15:20:ec:50:cf:e5:ee:4b:85:d7:86:97:fb:a7:a9:
4e:84:31:10:74:93:6d:b1:a9:7c:bf:92:e1:39:97:
10:2f:4f:0a:22:04:8c:56:f2:ed:dc:d7:c7:ed:50:
6b:b5:97:34:d5:10:1e:67:3b:07:a3:17:d2:76:ae:
a2:9f:e3:cc:0e:91:e3:b2:50:07:24:aa:ba:64:97:
46:7c:f3:3d:16:46:db:1b:8b:43:ea:5e:e5:d8:66:
74:6f:19:4b:4d:5c:22:b1:db:cd:25:63:78:2d:ae:
16:cb:98:c5:03:00:59:d1:d0:75:fd:be:32:16:54:
64:bc:4b:24:90:30:45:49:15:15:15:e1:bc:a7:cd:
77:e5:35:5e:f1:55:b1:bc:13:6f:80:04:37:a6:36:
7d:14:79:0b:34:bf:dd:32:29:0c:65:17:78:64:bc:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:19:EF:9A:8D:6E:B5:85:2F:6B:6C:08:2B:66:2A:4C:B2:49:8E
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:63:84:fa:57:89:e5:66:fc:d1:50:07:22:bf:90:07:cc:
0d:57:91:5c:20:81:25:67:d2:05:c2:ef:c4:5c:dd:a7:80:74:
d9:bf:48:8c:c4:fc:cd:4b:ae:9a:b4:62:4e:34:b9:6c:4c:00:
9c:81:77:1b:67:2e:a2:84:76:f1:b1:bb:c2:5d:c9:0b:6f:13:
bd:da:c5:9e:b7:d7:60:c0:4c:bf:08:dd:d6:70:fe:01:6e:01:
ae:14:f7:81:a1:ae:72:34:fb:0e:6e:fc:32:da:16:f3:c9:ba:
c9:fb:6c:80:82:8b:6e:73:2d:c6:a6:c8:f6:ec:29:88:42:c6:
d0:ea:ce:d6:e6:f8:05:b7:a7:50:71:31:d5:61:67:c0:68:ca:
33:d8:6f:91:68:1e:97:bb:ec:c8:8f:f6:1e:34:87:6f:05:79:
ba:4d:4c:b0:74:a1:05:9e:07:69:99:69:aa:34:44:3e:cb:3a:
a6:24:f6:0d:6b:28:2b:a5:ec:bc:1e:a8:d6:83:9d:06:32:87:
3b:ab:6f:42:59:86:30:15:bc:24:a5:83:22:6a:80:27:91:07:
a8:bd:69:1a:80:f1:b8:98:8b:a6:db:2e:d7:94:46:5c:c4:02:
3d:29:7b:c2:a7:0f:61:75:54:93:cc:54:98:8b:7a:7e:13:96:
5f:13:11:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DtEl4Aoyj5L1VIPvKXdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYwNjExMTkwMDM5WhcNMjYwNjEyMTkwMDM5WjAzMTEwLwYDVQQD
EygwYWI3MTllZjlhOGQ2ZWI1ODUyZjZiNmMwODJiNjYyYTRjYjI0OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5YNSRfPYNKWErLKTP//m36mFxE
2Knzrh+8UyHt4qle4OuZxFA0YjoYDc2tCg+eAduwzRagg7jL8XqeL57BNctUPIQS
mMAi0f/GSd6gXBgDQVoYbB+nFpoVIOxQz+XuS4XXhpf7p6lOhDEQdJNtsal8v5Lh
OZcQL08KIgSMVvLt3NfH7VBrtZc01RAeZzsHoxfSdq6in+PMDpHjslAHJKq6ZJdG
fPM9FkbbG4tD6l7l2GZ0bxlLTVwisdvNJWN4La4Wy5jFAwBZ0dB1/b4yFlRkvEsk
kDBFSRUVFeG8p8135TVe8VWxvBNvgAQ3pjZ9FHkLNL/dMikMZRd4ZLy+dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq3Ge+ajW61hS9rbAgrZipMskmOMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDtjhPpX
ieVm/NFQByK/kAfMDVeRXCCBJWfSBcLvxFzdp4B02b9IjMT8zUuumrRiTjS5bEwA
nIF3G2cuooR28bG7wl3JC28TvdrFnrfXYMBMvwjd1nD+AW4BrhT3gaGucjT7Dm78
MtoW88m6yftsgIKLbnMtxqbI9uwpiELG0OrO1ub4BbenUHEx1WFnwGjKM9hvkWge
l7vsyI/2HjSHbwV5uk1MsHShBZ4HaZlpqjREPss6piT2DWsoK6XsvB6o1oOdBjKH
O6tvQlmGMBW8JKWDImqAJ5EHqL1pGoDxuJiLptsu15RGXMQCPSl7wqcPYXVUk8xU
mIt6fhOWXxMRvA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:13:36 2026 by rpki-client