Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: ANSyxGocLDHBBa16TsXq2stopNtvXZg6JeIr195z3gM=
Subject key identifier: FA:6B:A4:BA:9F:14:BB:64:24:88:7F:E7:09:4B:FF:03:11:C0:9F:AB
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019E924AAD42C321A08B8E8B0C369CA7CD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0559
Signing time: Thu 04 Jun 2026 11:00:27 +0000
Manifest this update: Thu 04 Jun 2026 11:00:27 +0000
Manifest next update: Fri 05 Jun 2026 11:00:27 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: QZ/xTzWABLSBMFUAMTvipUrUlsmWTJEZuOeNF0yrH5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:4a:ad:42:c3:21:a0:8b:8e:8b:0c:36:9c:a7:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 4 11:00:27 2026 GMT
Not After : Jun 5 11:00:27 2026 GMT
Subject: CN=fa6ba4ba9f14bb6424887fe7094bff0311c09fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:36:62:50:45:9b:29:db:22:5e:cd:e6:cf:
95:ef:80:86:30:65:09:48:7e:b3:11:f9:29:77:d5:
92:a3:ec:42:3c:4a:c7:15:7c:dc:07:17:56:79:62:
af:d3:76:d3:e1:7c:ff:8a:8d:c3:0b:49:a5:2f:3b:
84:0b:e6:61:e3:f3:80:e4:77:b8:42:ae:b6:4f:d6:
55:cf:91:98:a9:38:ee:a6:b7:e3:5e:7a:2e:9a:73:
ea:e1:c0:74:26:a8:d7:9e:a0:4c:7e:59:97:7a:b2:
b7:e2:3c:73:a6:8e:4a:8b:31:7d:43:c3:ae:ea:43:
ab:7d:58:fe:51:b9:ca:c3:45:47:86:c5:5f:3d:e0:
7c:1e:73:f2:c9:8a:ee:76:1f:f5:6a:e6:b1:24:37:
7a:d7:cd:81:c1:bf:b4:ca:71:34:58:e3:17:8b:78:
df:10:fe:4d:17:d9:47:d8:c4:66:49:6d:20:87:53:
77:ea:ea:35:78:00:c4:09:86:3a:87:d7:9a:bb:02:
a2:31:e3:0f:05:a0:af:77:5d:1c:af:61:a9:f9:4a:
00:4b:f6:b1:52:1e:c7:b7:5e:34:22:97:fa:1c:21:
b4:a0:5b:9d:94:7d:35:dc:4d:cd:cd:39:3a:ac:c3:
9d:b9:c4:d9:82:f2:ff:9d:f4:ed:c0:a5:4e:43:ca:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:A4:BA:9F:14:BB:64:24:88:7F:E7:09:4B:FF:03:11:C0:9F:AB
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:51:39:1c:6e:24:9e:14:57:89:84:c8:95:27:77:c4:ed:
34:69:95:2e:35:46:9b:fb:f5:94:3a:ed:dc:0f:64:92:19:e7:
67:e5:46:9a:e4:d9:0a:6d:49:28:94:72:04:6f:4b:b2:75:57:
f4:d6:4c:aa:47:b6:36:04:70:0a:aa:e2:16:49:60:ad:82:fb:
05:dc:5a:be:cc:11:84:7d:73:13:c4:8c:f9:57:84:8f:92:3f:
a2:d5:8f:9f:f9:bc:1e:07:0e:14:35:2c:e0:9d:74:41:46:fc:
13:eb:1f:ca:77:ab:7f:68:20:b2:50:e0:ef:f2:2e:31:a9:57:
91:6e:99:93:29:29:b7:36:77:81:35:47:b0:5d:da:59:7b:c7:
b9:c4:17:eb:d5:c7:4c:a1:4a:5c:48:b2:24:a3:dc:29:c0:78:
10:20:53:0c:44:a5:84:f8:11:0f:29:7e:9d:9b:5a:0c:ed:3e:
55:7b:d9:8f:03:7b:9d:3a:7e:d7:58:53:33:5e:09:c1:34:4b:
63:03:36:17:4b:de:8f:e8:ef:b4:76:27:59:9c:8e:d0:a4:f1:
07:fd:90:c5:15:93:73:87:eb:cf:f6:c9:19:03:9e:93:19:29:
07:ea:be:d8:1d:8e:20:fd:a4:40:ca:94:d7:1a:2b:d4:6d:b4:
24:a4:17:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SSq1CwyGgi46LDDacp80YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjYwNjA0MTEwMDI3WhcNMjYwNjA1MTEwMDI3WjAzMTEwLwYDVQQD
EyhmYTZiYTRiYTlmMTRiYjY0MjQ4ODdmZTcwOTRiZmYwMzExYzA5ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzts2YlBFmynbIl7N5s+V74CGMGUJ
SH6zEfkpd9WSo+xCPErHFXzcBxdWeWKv03bT4Xz/io3DC0mlLzuEC+Zh4/OA5He4
Qq62T9ZVz5GYqTjuprfjXnoumnPq4cB0JqjXnqBMflmXerK34jxzpo5KizF9Q8Ou
6kOrfVj+UbnKw0VHhsVfPeB8HnPyyYrudh/1auaxJDd6182Bwb+0ynE0WOMXi3jf
EP5NF9lH2MRmSW0gh1N36uo1eADECYY6h9eauwKiMeMPBaCvd10cr2Gp+UoAS/ax
Uh7Ht140Ipf6HCG0oFudlH013E3NzTk6rMOducTZgvL/nfTtwKVOQ8qqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPprpLqfFLtkJIh/5wlL/wMRwJ+rMB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVlRORxu
JJ4UV4mEyJUnd8TtNGmVLjVGm/v1lDrt3A9kkhnnZ+VGmuTZCm1JKJRyBG9LsnVX
9NZMqke2NgRwCqriFklgrYL7BdxavswRhH1zE8SM+VeEj5I/otWPn/m8HgcOFDUs
4J10QUb8E+sfynerf2ggslDg7/IuMalXkW6ZkykptzZ3gTVHsF3aWXvHucQX69XH
TKFKXEiyJKPcKcB4ECBTDESlhPgRDyl+nZtaDO0+VXvZjwN7nTp+11hTM14JwTRL
YwM2F0vej+jvtHYnWZyO0KTxB/2QxRWTc4frz/bJGQOekxkpB+q+2B2OIP2kQMqU
1xor1G20JKQXiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:19:54 2026 by rpki-client