Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: WJXEr45sLgYA4z7drIpGpmBnm0YH4m3hYVfYTAnPOQg=
Subject key identifier: A0:63:36:CF:91:50:92:E4:A7:AE:93:41:AA:78:C4:A8:06:45:80:AC
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019F1340D3C690BC94096F28C384DBB2DC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 12:00:43 +0000
Manifest this update: Mon 29 Jun 2026 12:00:43 +0000
Manifest next update: Tue 30 Jun 2026 12:00:43 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: pbtrZgCslZvnOUQC0WsOKzVOgmYIztjKYl397kN+0Rs=)
3: XfYkU787j3WhMTZPnJmIUryBUv8.roa (hash: h2gKkudjUVGsEuk5RZekt+DQ3CWf3ljc/O91aN85ogU=)
4: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:40:d3:c6:90:bc:94:09:6f:28:c3:84:db:b2:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jun 29 12:00:43 2026 GMT
Not After : Jun 30 12:00:43 2026 GMT
Subject: CN=a06336cf915092e4a7ae9341aa78c4a8064580ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:36:e8:41:7d:d6:23:e5:5d:04:b3:bd:d9:
78:80:38:9d:2e:5d:a1:35:5d:cb:18:a0:c6:b9:af:
18:d4:07:6f:34:d5:97:74:fd:b1:e7:c6:77:3a:4f:
73:2a:11:6b:a6:51:d2:95:8e:37:00:e2:da:5b:8a:
65:d1:7b:0b:5f:31:2e:63:7c:97:fd:1f:72:67:47:
33:d8:64:e5:45:39:61:bf:5b:21:c5:f0:df:1f:7e:
ac:85:ff:fe:6f:4b:2a:dd:da:fc:f0:0b:c5:9a:60:
ae:ed:ad:2e:e2:cd:5e:e5:9d:46:17:c1:c5:0c:8a:
ee:63:51:44:a3:17:ac:ca:c6:68:e5:ee:65:b4:4f:
9c:c3:72:a5:20:e9:11:8b:92:7a:a6:f0:01:fb:07:
89:05:38:82:1c:81:a4:8e:ec:19:a2:36:a9:84:17:
bd:cb:80:7f:fd:e2:35:57:af:f6:21:d3:28:37:a9:
c6:98:12:85:14:fc:2d:4a:33:4e:41:69:c9:67:84:
0e:56:92:d9:38:72:04:7b:d1:35:71:d2:3b:18:19:
a8:54:08:19:13:48:86:de:ce:34:91:c3:5e:c0:79:
b0:07:9c:7f:ff:c6:b2:c4:b1:61:4d:58:ca:91:d6:
6a:80:66:0c:80:b9:72:4d:48:76:c0:8a:f0:8e:0a:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:36:CF:91:50:92:E4:A7:AE:93:41:AA:78:C4:A8:06:45:80:AC
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:5d:ec:1d:7e:c4:00:ff:9b:c4:c9:e1:64:19:45:92:9e:
d6:56:ba:9f:cc:57:5b:e0:29:2d:70:70:68:9b:20:57:5f:1f:
ff:d0:18:6f:5e:80:90:40:9a:fe:1f:9c:51:82:8e:d0:d2:a8:
b1:00:f0:f5:43:60:98:9a:b6:f0:8e:91:db:bf:85:bd:c4:33:
f0:c1:3b:cb:70:37:f6:73:87:39:7f:4d:d0:93:75:15:a8:b1:
75:a1:e6:8d:d4:62:36:10:71:9b:49:ba:fb:8a:ea:a1:16:cd:
0b:ca:0d:bf:60:81:ed:eb:f2:7a:f9:58:fe:cd:52:1c:79:61:
ca:c3:d1:67:ac:8a:6a:06:83:43:f0:20:52:e9:59:3f:79:1f:
72:a5:b2:26:48:5f:66:2f:af:a6:55:94:a4:9b:32:77:f6:1c:
40:97:1f:d4:64:74:88:d1:78:69:4c:8b:16:eb:4b:0f:c8:e8:
38:5b:20:5d:25:a7:ce:32:b7:6d:5d:c9:6f:51:69:ff:4f:d0:
7d:d5:91:28:a2:77:47:9f:6e:6d:38:3f:0d:a3:63:79:24:93:
3a:a6:4e:3b:24:cc:ee:d8:4f:5a:59:4c:5c:f0:1d:fa:3a:a7:
67:f8:d5:ba:f8:7f:00:ad:13:58:7b:fd:f7:82:c0:14:f7:12:
18:fb:53:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQNPGkLyUCW8ow4TbstwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjYwNjI5MTIwMDQzWhcNMjYwNjMwMTIwMDQzWjAzMTEwLwYDVQQD
EyhhMDYzMzZjZjkxNTA5MmU0YTdhZTkzNDFhYTc4YzRhODA2NDU4MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Q26EF91iPlXQSzvdl4gDidLl2h
NV3LGKDGua8Y1AdvNNWXdP2x58Z3Ok9zKhFrplHSlY43AOLaW4pl0XsLXzEuY3yX
/R9yZ0cz2GTlRTlhv1shxfDfH36shf/+b0sq3dr88AvFmmCu7a0u4s1e5Z1GF8HF
DIruY1FEoxesysZo5e5ltE+cw3KlIOkRi5J6pvAB+weJBTiCHIGkjuwZojaphBe9
y4B//eI1V6/2IdMoN6nGmBKFFPwtSjNOQWnJZ4QOVpLZOHIEe9E1cdI7GBmoVAgZ
E0iG3s40kcNewHmwB5x//8ayxLFhTVjKkdZqgGYMgLlyTUh2wIrwjgrdhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBjNs+RUJLkp66TQap4xKgGRYCsMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1xd7B1+
xAD/m8TJ4WQZRZKe1la6n8xXW+ApLXBwaJsgV18f/9AYb16AkECa/h+cUYKO0NKo
sQDw9UNgmJq28I6R27+FvcQz8ME7y3A39nOHOX9N0JN1FaixdaHmjdRiNhBxm0m6
+4rqoRbNC8oNv2CB7evyevlY/s1SHHlhysPRZ6yKagaDQ/AgUulZP3kfcqWyJkhf
Zi+vplWUpJsyd/YcQJcf1GR0iNF4aUyLFutLD8joOFsgXSWnzjK3bV3Jb1Fp/0/Q
fdWRKKJ3R59ubTg/DaNjeSSTOqZOOyTM7thPWllMXPAd+jqnZ/jVuvh/AK0TWHv9
94LAFPcSGPtTkw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:36:32 2026 by rpki-client