Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: KZD+YL6zh4U94m86zFD2sm/ljpWCenMyAbATPFzWgkk=
Subject key identifier: D7:AB:62:37:D6:E1:17:5B:71:FB:04:22:58:A1:96:EB:C2:5E:A3:06
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019EDE0A9AD334CA066BA58DFB4234700582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 145C
Signing time: Fri 19 Jun 2026 04:01:37 +0000
Manifest this update: Fri 19 Jun 2026 04:01:37 +0000
Manifest next update: Sat 20 Jun 2026 04:01:37 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: 5n8b7R26n9+StgvjlrjhvaQOcvXIL+05ptn+aCHaRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:0a:9a:d3:34:ca:06:6b:a5:8d:fb:42:34:70:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jun 19 04:01:37 2026 GMT
Not After : Jun 20 04:01:37 2026 GMT
Subject: CN=d7ab6237d6e1175b71fb042258a196ebc25ea306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:3d:00:c3:29:37:ba:61:02:ab:b8:a7:9b:
df:d1:02:95:b1:91:05:ce:35:3c:29:f0:82:cf:b5:
7f:7d:79:b5:20:57:f9:e2:df:02:3a:70:ab:45:b4:
32:f3:71:0b:ac:dc:e1:c2:0b:c5:70:1f:f6:0a:6e:
78:28:d0:10:2b:f5:96:36:46:4f:00:0f:96:80:bf:
3d:b5:20:c2:fb:30:7d:7d:a5:49:9c:9c:52:d5:61:
fc:2d:97:af:97:34:11:26:d7:2e:54:2b:a9:32:b1:
09:da:64:d7:c0:e5:38:93:5f:07:e6:e9:9b:d5:a7:
56:de:64:0f:ab:ce:60:c7:19:1b:3f:41:c5:20:f6:
1c:b1:62:83:ba:92:28:67:eb:81:c7:30:76:db:cb:
65:d9:d0:6c:94:28:5a:9f:db:36:04:31:5a:f0:ca:
90:9c:14:a7:ed:0f:1b:2a:95:84:cc:29:2d:90:e0:
f9:90:92:2c:e9:3a:80:76:4b:19:14:1b:11:5f:63:
4f:c2:9e:fc:aa:8c:f6:66:42:89:d3:54:50:f2:69:
80:68:21:cc:b5:d1:c8:38:2e:5f:39:0c:5b:07:97:
1a:f5:f0:94:e2:57:a3:04:d6:9a:0f:7e:5f:2d:55:
13:6a:01:83:71:3e:ef:0a:a7:c6:ca:b8:1b:13:17:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:62:37:D6:E1:17:5B:71:FB:04:22:58:A1:96:EB:C2:5E:A3:06
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:63:76:03:24:ef:6a:59:ed:22:e3:5e:05:10:44:b0:92:cb:
08:dc:da:28:b9:2e:ff:3d:3a:39:60:a7:b5:cf:d0:dd:e7:40:
c3:e0:5e:db:39:d6:78:3a:57:a9:49:47:ed:32:a4:1b:74:98:
dd:a0:6c:db:49:a0:1f:8c:f4:46:f6:66:3d:03:47:93:f6:01:
c0:df:dc:b6:35:49:44:2c:29:2f:4e:ff:cc:68:5d:58:0c:52:
dc:f2:36:74:7a:b5:16:3f:19:4b:97:7c:39:28:db:a6:ef:97:
6d:f4:c4:9e:55:d3:9e:7e:ea:56:bf:d9:5b:6c:93:e9:f7:a8:
9e:88:56:4d:be:16:77:27:6f:b4:87:69:2c:f8:3f:a2:76:94:
e0:68:45:22:8b:02:fd:6e:e5:01:2e:8c:98:49:97:f6:1a:ae:
80:19:77:5a:f1:d9:a4:75:89:28:b0:e9:99:48:e7:4c:fe:35:
3e:99:83:da:94:b4:c6:9f:71:c0:c8:ed:1b:e9:2f:bb:4c:fb:
8a:d8:33:4b:e7:5c:54:59:a5:f0:c8:88:0c:e2:55:f5:a4:86:
33:33:e9:27:02:a4:50:52:90:3b:aa:80:b4:20:08:7e:d3:5c:
07:23:41:6f:0a:95:58:c2:6e:7c:d1:0c:dc:36:c4:a4:b7:2d:
9e:aa:a9:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7eCprTNMoGa6WN+0I0cAWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjYwNjE5MDQwMTM3WhcNMjYwNjIwMDQwMTM3WjAzMTEwLwYDVQQD
EyhkN2FiNjIzN2Q2ZTExNzViNzFmYjA0MjI1OGExOTZlYmMyNWVhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rY9AMMpN7phAqu4p5vf0QKVsZEF
zjU8KfCCz7V/fXm1IFf54t8COnCrRbQy83ELrNzhwgvFcB/2Cm54KNAQK/WWNkZP
AA+WgL89tSDC+zB9faVJnJxS1WH8LZevlzQRJtcuVCupMrEJ2mTXwOU4k18H5umb
1adW3mQPq85gxxkbP0HFIPYcsWKDupIoZ+uBxzB228tl2dBslChan9s2BDFa8MqQ
nBSn7Q8bKpWEzCktkOD5kJIs6TqAdksZFBsRX2NPwp78qoz2ZkKJ01RQ8mmAaCHM
tdHIOC5fOQxbB5ca9fCU4lejBNaaD35fLVUTagGDcT7vCqfGyrgbExfuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNerYjfW4RdbcfsEIlihluvCXqMGMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGN2AyTv
alntIuNeBRBEsJLLCNzaKLku/z06OWCntc/Q3edAw+Be2znWeDpXqUlH7TKkG3SY
3aBs20mgH4z0RvZmPQNHk/YBwN/ctjVJRCwpL07/zGhdWAxS3PI2dHq1Fj8ZS5d8
OSjbpu+XbfTEnlXTnn7qVr/ZW2yT6feonohWTb4WdydvtIdpLPg/onaU4GhFIosC
/W7lAS6MmEmX9hqugBl3WvHZpHWJKLDpmUjnTP41PpmD2pS0xp9xwMjtG+kvu0z7
itgzS+dcVFml8MiIDOJV9aSGMzPpJwKkUFKQO6qAtCAIftNcByNBbwqVWMJufNEM
3DbEpLctnqqpqg==
-----END CERTIFICATE-----
Generated at Fri Jun 19 08:17:57 2026 by rpki-client