Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: xrMujTnLt3ss/fFoL0N0Y0rBKgX1sPj8yKoAEHA5SLE=
Subject key identifier: 5C:29:86:37:4F:9E:A6:B8:4B:D2:C4:53:53:8E:26:65:51:D3:2E:70
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019EB8B4487C38E47381B9F6F9F8F7C21D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 195B
Signing time: Thu 11 Jun 2026 22:01:23 +0000
Manifest this update: Thu 11 Jun 2026 22:01:23 +0000
Manifest next update: Fri 12 Jun 2026 22:01:23 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: omXmzD5VsADwmO3zwQZHj9oI8fgBrX63sZsumBYt/ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:48:7c:38:e4:73:81:b9:f6:f9:f8:f7:c2:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jun 11 22:01:23 2026 GMT
Not After : Jun 12 22:01:23 2026 GMT
Subject: CN=5c2986374f9ea6b84bd2c453538e266551d32e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:d3:d5:dc:34:8f:34:c1:99:3f:e8:64:bc:
84:4c:97:f3:4d:a7:6c:fe:67:e2:89:1c:3c:80:62:
e6:fb:6c:76:0c:8f:e6:80:33:74:67:c8:5d:94:c8:
e9:41:51:7e:98:94:0d:ff:13:13:1c:5e:fe:a6:1e:
7e:f4:19:c5:7c:f3:d6:47:6b:2f:b0:a7:b3:cc:e7:
90:f4:c1:81:7e:f3:04:e2:de:2a:b1:c9:4f:8b:46:
c3:e0:dd:fe:c4:e9:d9:d5:72:68:c1:19:53:3e:1d:
b0:ca:6a:14:bc:e6:e3:7e:5d:e1:da:a1:81:82:f3:
08:89:14:78:09:c4:12:40:0d:30:86:a7:71:34:9f:
d7:0a:4b:fa:3c:e5:6c:4f:96:7b:20:fa:c8:c0:26:
94:a2:8a:c7:e0:35:0b:1a:f3:75:53:9e:38:55:e6:
a6:91:4b:79:30:30:ba:45:85:c5:f9:b7:72:39:92:
00:34:d4:0f:6e:47:35:e0:57:97:c1:1f:7c:76:c0:
4e:9f:36:a2:98:64:36:f8:67:fc:9d:34:37:71:ae:
f8:d8:1f:45:39:df:28:7f:dc:28:fc:f2:6b:e9:f9:
75:08:1c:1a:e2:17:43:eb:5f:d7:e5:1b:23:f2:17:
21:23:1f:9a:06:37:cf:dc:56:84:4b:59:1e:58:02:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:86:37:4F:9E:A6:B8:4B:D2:C4:53:53:8E:26:65:51:D3:2E:70
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:fc:e5:42:61:7e:5b:94:61:4d:e5:47:53:ac:bc:90:23:
ff:3f:82:5a:48:fb:d4:c9:2d:e6:77:4c:d4:3d:5f:6f:96:f9:
51:ae:f4:ec:1b:ba:a4:c7:85:28:4f:c5:ce:97:e4:8f:3d:d7:
53:39:9c:f1:c4:3b:5d:32:7d:c7:27:ec:a2:b0:4c:08:28:33:
2f:95:59:89:1e:f2:c4:34:ea:34:9e:b5:ea:e5:c8:79:6b:7d:
07:d1:d2:65:43:90:ff:8d:44:fc:db:3c:e1:61:02:93:ba:8d:
8a:77:bc:95:09:df:94:5b:6f:39:8c:ac:a6:b8:2b:b3:3e:72:
0a:13:30:3b:ec:12:46:0d:22:47:56:de:6b:48:38:cd:0a:a5:
ad:0a:4b:12:72:bc:cc:36:d8:17:bb:df:a9:93:44:60:7b:90:
d5:37:f5:09:0f:f8:d0:6e:1e:c6:0d:a1:bf:8a:54:d7:00:17:
ce:43:10:cd:d4:7f:8a:95:dd:42:40:d5:c1:78:4e:b6:a0:4c:
39:63:f1:d6:1e:a2:7c:eb:25:35:45:0e:1c:f8:4c:c1:cd:d8:
80:81:15:b0:ec:d7:49:a2:1b:c0:3b:38:c6:3d:90:fe:8a:4b:
c6:d6:1c:73:74:cd:50:69:8c:85:8b:e4:ff:52:47:d9:c1:fc:
e6:5c:5a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tEh8OORzgbn2+fj3wh0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjYwNjExMjIwMTIzWhcNMjYwNjEyMjIwMTIzWjAzMTEwLwYDVQQD
Eyg1YzI5ODYzNzRmOWVhNmI4NGJkMmM0NTM1MzhlMjY2NTUxZDMyZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpvT1dw0jzTBmT/oZLyETJfzTads
/mfiiRw8gGLm+2x2DI/mgDN0Z8hdlMjpQVF+mJQN/xMTHF7+ph5+9BnFfPPWR2sv
sKezzOeQ9MGBfvME4t4qsclPi0bD4N3+xOnZ1XJowRlTPh2wymoUvObjfl3h2qGB
gvMIiRR4CcQSQA0whqdxNJ/XCkv6POVsT5Z7IPrIwCaUoorH4DULGvN1U544Veam
kUt5MDC6RYXF+bdyOZIANNQPbkc14FeXwR98dsBOnzaimGQ2+Gf8nTQ3ca742B9F
Od8of9wo/PJr6fl1CBwa4hdD61/X5Rsj8hchIx+aBjfP3FaES1keWAJyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwphjdPnqa4S9LEU1OOJmVR0y5wMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr785UJh
fluUYU3lR1OsvJAj/z+CWkj71Mkt5ndM1D1fb5b5Ua707Bu6pMeFKE/Fzpfkjz3X
Uzmc8cQ7XTJ9xyfsorBMCCgzL5VZiR7yxDTqNJ616uXIeWt9B9HSZUOQ/41E/Ns8
4WECk7qNine8lQnflFtvOYysprgrsz5yChMwO+wSRg0iR1bea0g4zQqlrQpLEnK8
zDbYF7vfqZNEYHuQ1Tf1CQ/40G4exg2hv4pU1wAXzkMQzdR/ipXdQkDVwXhOtqBM
OWPx1h6ifOslNUUOHPhMwc3YgIEVsOzXSaIbwDs4xj2Q/opLxtYcc3TNUGmMhYvk
/1JH2cH85lxa3w==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:32:59 2026 by rpki-client