Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: /D4vazBRJm4xULwdma8I0F58uP2Qmch0nlvuyZJ5mdg=
Subject key identifier: B5:39:8E:E9:71:C3:4B:B0:E1:CB:43:F4:51:0B:14:1D:CF:DD:91:72
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 019F190D39D3AAACFEECC919A01E2CFB635F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:02:04 +0000
Manifest this update: Tue 30 Jun 2026 15:02:04 +0000
Manifest next update: Wed 01 Jul 2026 15:02:04 +0000
Files and hashes: 1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=)
2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: 1Vfa5kp4krzyg8RFXCPmimgoTJzD8yS6BYe88VcTOKU=)
4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:39:d3:aa:ac:fe:ec:c9:19:a0:1e:2c:fb:63:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jun 30 15:02:04 2026 GMT
Not After : Jul 1 15:02:04 2026 GMT
Subject: CN=b5398ee971c34bb0e1cb43f4510b141dcfdd9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:43:55:8c:19:30:b2:15:b9:20:98:61:68:
0e:0e:b2:ab:0b:a4:40:0b:de:00:af:6c:bd:82:e7:
41:eb:49:0b:2c:44:f3:15:11:e3:ab:a8:c8:90:76:
d4:ed:7d:b9:c7:36:22:06:be:8a:9b:4f:80:c2:cd:
8c:91:90:9c:06:96:fc:ec:82:11:41:5b:4d:59:cb:
0e:51:6d:d0:ca:15:48:d5:a7:6d:2f:1a:00:a5:7d:
be:33:45:ae:38:09:4e:98:3b:bb:37:05:44:20:94:
65:7c:de:e6:c1:7b:80:0c:bb:cb:cf:a1:ad:5c:ff:
04:32:81:d7:8f:6a:b2:f8:50:fc:d8:95:2a:ff:47:
39:5e:52:ee:86:5a:c9:34:0a:f2:33:05:0a:0e:46:
b6:89:d8:75:c1:47:3e:b8:60:81:48:54:46:61:03:
ad:19:7c:ee:69:1d:48:90:93:83:d4:fc:03:6a:1c:
14:2f:73:d8:6c:57:4b:c0:4f:a2:86:e2:cf:68:78:
81:e2:83:2d:0c:11:9b:f8:a7:ab:5c:fb:56:9d:48:
1d:ff:42:c0:04:30:ce:0d:6c:5e:b3:b2:92:c1:9b:
d3:4e:b4:cf:a4:7f:25:88:ec:e6:7d:e8:4f:37:0f:
1d:74:df:ee:26:6f:3c:1c:15:c7:0a:93:15:c6:0c:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:39:8E:E9:71:C3:4B:B0:E1:CB:43:F4:51:0B:14:1D:CF:DD:91:72
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ef:1e:20:52:98:60:19:25:7a:b3:15:14:e6:9c:d0:fa:9f:
ac:27:f3:84:9f:a8:da:f0:5c:e5:eb:71:2a:67:b1:21:80:45:
3b:f0:f9:10:a7:e5:8f:b8:dd:9c:81:d3:59:39:f4:b2:4c:ce:
ff:a3:59:14:d9:c2:cd:9e:7d:1c:99:ea:c9:19:de:8e:7f:01:
b5:54:a3:ad:c4:d8:e5:f9:77:5f:c4:1d:55:ec:cb:a4:b0:93:
92:18:35:f1:92:b7:1b:5e:e1:0f:53:1d:3d:0d:37:99:c7:f7:
da:a2:5b:b5:a1:6c:f2:02:e2:40:00:1d:f1:51:a4:63:e8:ea:
b1:ec:3b:4c:ee:fb:79:86:9a:fe:e5:ae:aa:8d:e8:93:5b:ca:
db:46:4e:e0:cd:7c:88:98:f9:5c:b1:96:42:cd:c5:a1:c3:d4:
2c:79:7a:ac:20:4b:cf:1a:c3:20:0b:35:0c:59:07:43:4e:22:
41:c8:81:c5:2a:e5:84:5b:c1:55:be:0d:4c:ae:ad:10:0c:31:
f2:1b:ee:a3:03:ca:2d:17:8d:01:ac:4c:49:30:02:42:58:6c:
50:4d:4b:56:cf:64:f8:7c:71:12:d7:74:dc:7e:5a:fd:58:4d:
db:a5:20:dd:3d:b3:a7:d8:20:93:44:11:4d:69:5c:7d:96:9c:
81:73:c2:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDTnTqqz+7MkZoB4s+2NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh
MWVmMWIwHhcNMjYwNjMwMTUwMjA0WhcNMjYwNzAxMTUwMjA0WjAzMTEwLwYDVQQD
EyhiNTM5OGVlOTcxYzM0YmIwZTFjYjQzZjQ1MTBiMTQxZGNmZGQ5MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpVDVYwZMLIVuSCYYWgODrKrC6RA
C94Ar2y9gudB60kLLETzFRHjq6jIkHbU7X25xzYiBr6Km0+Aws2MkZCcBpb87IIR
QVtNWcsOUW3QyhVI1adtLxoApX2+M0WuOAlOmDu7NwVEIJRlfN7mwXuADLvLz6Gt
XP8EMoHXj2qy+FD82JUq/0c5XlLuhlrJNAryMwUKDka2idh1wUc+uGCBSFRGYQOt
GXzuaR1IkJOD1PwDahwUL3PYbFdLwE+ihuLPaHiB4oMtDBGb+KerXPtWnUgd/0LA
BDDODWxes7KSwZvTTrTPpH8liOzmfehPNw8ddN/uJm88HBXHCpMVxgz6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU5julxw0uw4ctD9FELFB3P3ZFyMB8GA1UdIwQY
MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt
NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw
LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu8eIFKY
YBklerMVFOac0PqfrCfzhJ+o2vBc5etxKmexIYBFO/D5EKflj7jdnIHTWTn0skzO
/6NZFNnCzZ59HJnqyRnejn8BtVSjrcTY5fl3X8QdVezLpLCTkhg18ZK3G17hD1Md
PQ03mcf32qJbtaFs8gLiQAAd8VGkY+jqsew7TO77eYaa/uWuqo3ok1vK20ZO4M18
iJj5XLGWQs3FocPULHl6rCBLzxrDIAs1DFkHQ04iQciBxSrlhFvBVb4NTK6tEAwx
8hvuowPKLReNAaxMSTACQlhsUE1LVs9k+HxxEtd03H5a/VhN26Ug3T2zp9ggk0QR
TWlcfZacgXPCyA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:44 2026 by rpki-client