Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: f2t667d5NjnwWA3gp9tpOgIpYpygXOYUKnaqb6qyg1w=
Subject key identifier: 30:A4:1C:89:A3:5E:53:4D:FF:2D:A1:F0:82:6E:59:70:91:22:3D:E6
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019F12654069FA88D6DCA1C18F3061D5776A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 08:00:53 +0000
Manifest this update: Mon 29 Jun 2026 08:00:53 +0000
Manifest next update: Tue 30 Jun 2026 08:00:53 +0000
Files and hashes: 1: CEyBPj5VD8UxRiqVxqInbi9mDx8.asa (hash: OtsKbdUFAn6cy1skhcCn+WuIejDR78hfMFZ1vJq0JOA=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: yeh10gbzDI3taxqqQjK0Uptzl1dsQ9yvpOyfdTQLaGM=)
3: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:40:69:fa:88:d6:dc:a1:c1:8f:30:61:d5:77:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jun 29 08:00:53 2026 GMT
Not After : Jun 30 08:00:53 2026 GMT
Subject: CN=30a41c89a35e534dff2da1f0826e597091223de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:cf:aa:b6:6e:04:e4:35:b1:e6:94:6f:fc:
23:5d:2a:48:45:69:80:36:a5:df:a5:7e:d2:0b:a0:
f3:5c:4c:cd:db:d8:bc:ff:0e:d4:91:17:98:a1:f3:
73:58:07:71:bc:e9:6e:b5:17:98:b0:18:d3:c2:b9:
36:75:d4:91:ad:62:c2:47:5c:bb:2e:19:41:9e:ac:
cc:e6:10:23:95:d4:1e:06:af:22:80:a8:51:d6:cf:
fa:0f:63:46:f7:d0:ce:f3:f2:e3:97:bf:33:70:75:
9f:56:9a:ff:e2:43:2b:53:a0:33:fb:4c:5c:15:57:
27:0f:5a:b1:9c:0f:d1:38:0a:a7:82:f4:dc:17:aa:
bd:70:fc:4d:d3:58:30:cd:79:32:9c:4c:4d:9c:34:
b7:a5:87:7e:a5:19:be:2d:0c:de:ce:ef:a9:69:4d:
1e:84:1a:27:cc:5d:dc:ae:5f:66:13:26:92:32:b1:
c1:e1:ad:79:28:0a:6a:2f:4c:4c:4e:ac:f8:42:62:
83:87:20:0c:76:e5:9c:3d:c1:27:80:01:1d:2c:25:
7f:8c:c4:25:b7:70:a9:6b:24:c0:69:00:ed:53:f6:
75:6e:43:bb:6c:2d:60:44:a0:74:df:0d:55:9e:2c:
b6:cc:04:bc:1c:10:6d:f7:fc:6a:cf:dd:11:8c:34:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:1C:89:A3:5E:53:4D:FF:2D:A1:F0:82:6E:59:70:91:22:3D:E6
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ae:ec:c3:c8:f9:03:c6:bb:31:d0:b7:77:dc:a4:0c:70:24:
b3:13:e3:30:b2:c2:1f:13:e6:d5:60:d2:d3:bb:32:41:4f:a7:
8e:45:bd:68:09:45:91:f3:2c:f7:ef:ec:e8:e8:95:a6:eb:b6:
cd:74:43:63:11:0b:22:84:94:2f:74:61:fb:0e:1b:d5:52:d7:
27:15:c2:ce:72:7e:05:a5:ca:db:0a:d4:11:64:6b:dd:7e:df:
56:8e:80:05:e2:50:87:46:7e:e5:70:3d:86:2a:1a:af:02:1d:
a2:b2:16:8c:ed:56:7a:04:76:45:3e:38:42:5e:4c:f3:ee:4b:
2b:e4:ed:5f:28:fa:28:d3:c2:b3:52:88:0c:b8:cc:ca:e0:47:
a0:11:a8:c6:e9:df:e4:08:d1:47:e2:4d:af:29:53:6c:5a:58:
7f:fb:c5:bc:32:4a:c2:b6:59:9f:99:c1:f9:96:53:45:43:ff:
65:06:02:82:df:8c:42:06:c3:72:ba:e7:4e:e0:4c:6c:cf:13:
e0:a3:36:87:bc:5b:6a:74:a0:ed:e7:a4:7f:49:5c:56:92:05:
7e:6c:d1:fa:97:e5:8a:f3:1e:0e:c3:38:d5:c1:f0:17:07:a9:
69:93:a5:2e:2f:45:97:76:19:cc:fc:6e:ee:eb:78:3f:67:f1:
1a:8f:38:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZUBp+ojW3KHBjzBh1XdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm
NTY1NjgwHhcNMjYwNjI5MDgwMDUzWhcNMjYwNjMwMDgwMDUzWjAzMTEwLwYDVQQD
EygzMGE0MWM4OWEzNWU1MzRkZmYyZGExZjA4MjZlNTk3MDkxMjIzZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4jPqrZuBOQ1seaUb/wjXSpIRWmA
NqXfpX7SC6DzXEzN29i8/w7UkReYofNzWAdxvOlutReYsBjTwrk2ddSRrWLCR1y7
LhlBnqzM5hAjldQeBq8igKhR1s/6D2NG99DO8/Ljl78zcHWfVpr/4kMrU6Az+0xc
FVcnD1qxnA/ROAqngvTcF6q9cPxN01gwzXkynExNnDS3pYd+pRm+LQzezu+paU0e
hBonzF3crl9mEyaSMrHB4a15KApqL0xMTqz4QmKDhyAMduWcPcEngAEdLCV/jMQl
t3CpayTAaQDtU/Z1bkO7bC1gRKB03w1Vniy2zAS8HBBt9/xqz90RjDRjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCkHImjXlNN/y2h8IJuWXCRIj3mMB8GA1UdIwQY
MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt
MDI3NGY0NDZkMzMxLzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx
LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJK7sw8j5
A8a7MdC3d9ykDHAksxPjMLLCHxPm1WDS07syQU+njkW9aAlFkfMs9+/s6OiVpuu2
zXRDYxELIoSUL3Rh+w4b1VLXJxXCznJ+BaXK2wrUEWRr3X7fVo6ABeJQh0Z+5XA9
hioarwIdorIWjO1WegR2RT44Ql5M8+5LK+TtXyj6KNPCs1KIDLjMyuBHoBGoxunf
5AjRR+JNrylTbFpYf/vFvDJKwrZZn5nB+ZZTRUP/ZQYCgt+MQgbDcrrnTuBMbM8T
4KM2h7xbanSg7eekf0lcVpIFfmzR+pflivMeDsM41cHwFwepaZOlLi9Fl3YZzPxu
7ut4P2fxGo84jw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:14 2026 by rpki-client