Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: Ij2+ozd9uSZqXth7UXYssTYAEP9HRoYD4JbkGkXzsmg=
Subject key identifier: 99:11:02:8E:39:FC:09:57:D8:C8:1C:F2:E9:97:29:31:98:11:67:75
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019EBF914A415944A52147B4614FFEAF4A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 12F4
Signing time: Sat 13 Jun 2026 06:00:30 +0000
Manifest this update: Sat 13 Jun 2026 06:00:30 +0000
Manifest next update: Sun 14 Jun 2026 06:00:30 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: WZjR96wI3JW7gPHhbC+j6RQIgP+07CnRV9cYPeWMt/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:4a:41:59:44:a5:21:47:b4:61:4f:fe:af:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jun 13 06:00:30 2026 GMT
Not After : Jun 14 06:00:30 2026 GMT
Subject: CN=9911028e39fc0957d8c81cf2e997293198116775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:9d:60:fb:88:4e:59:e7:75:84:de:49:7e:
d4:5f:2d:4c:dd:72:fd:83:89:60:fc:8d:78:8b:53:
19:4b:82:c5:e4:6f:88:e7:fd:49:88:fd:89:8f:c7:
e2:ad:98:21:d8:29:04:ee:00:39:fc:f3:1e:e5:26:
e8:36:ae:81:22:02:af:fa:c5:2b:0a:5c:7c:b7:fd:
00:38:61:94:0f:6e:33:32:20:79:2a:cc:b1:f7:1e:
ba:b0:90:73:3b:9b:66:11:0e:58:75:ab:2f:e0:0c:
4f:bb:da:e3:d0:e0:c2:fb:3b:7c:d9:0e:7a:aa:66:
da:f7:77:22:03:eb:44:24:43:27:c6:ee:22:6c:76:
bc:b1:47:d7:84:c1:4a:a3:01:ac:85:96:37:a3:44:
b3:58:ac:10:d0:cb:1d:83:af:d9:7f:ab:87:cb:c4:
32:1e:71:05:31:ee:e0:00:54:29:db:dd:82:1f:f1:
fc:ea:4a:05:2e:4e:43:91:ff:1e:22:e8:55:cd:07:
d2:70:e8:d1:0a:b9:de:e9:8b:6e:8f:1a:58:d2:c1:
e3:0b:c3:af:fe:7d:33:93:d7:64:56:98:1e:36:5f:
f7:32:f3:e4:83:db:ce:c5:19:46:8f:95:4f:be:19:
26:47:35:5a:85:3b:dd:7a:6e:4a:74:2d:f2:03:56:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:02:8E:39:FC:09:57:D8:C8:1C:F2:E9:97:29:31:98:11:67:75
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:53:8f:a9:d4:20:37:5a:56:fa:d9:cf:9c:73:37:1e:aa:
39:74:bb:9c:d8:15:43:64:9d:f0:21:af:28:02:6f:6b:db:06:
93:16:82:4c:f9:0d:e0:6f:11:b4:99:e8:51:40:7c:59:2e:3b:
60:0f:d9:34:3f:03:cf:8b:44:ca:76:e5:76:94:b2:79:8e:a3:
fa:73:29:c1:39:37:08:d0:aa:26:99:72:52:1b:d8:45:f2:d4:
7b:a0:01:48:77:84:28:14:46:54:11:d1:2a:6c:67:04:5d:99:
27:b6:93:a9:6c:e4:5b:07:7c:a7:d6:f9:01:cf:a1:2a:70:12:
33:21:bf:82:11:8e:b6:e8:01:ba:74:cc:16:73:0c:42:77:b7:
1e:f8:a6:d8:76:a3:c7:14:f7:05:fb:c8:bc:9a:32:27:08:e9:
6f:fa:d4:0e:cd:21:10:ab:97:53:a9:5b:24:11:22:a8:a9:08:
27:8b:45:63:fa:6f:4f:42:b6:37:0b:32:31:f2:20:37:9e:1b:
62:81:f5:9d:1e:5b:dc:b5:0e:49:e2:f7:21:8b:a9:9a:4e:50:
e6:32:d5:4f:66:dc:9f:d1:f1:0a:1c:8a:04:fd:80:02:7a:b1:
12:01:0e:2f:56:20:a8:e0:dd:8c:66:6c:a0:54:a6:6f:c6:53:
66:cd:15:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kUpBWUSlIUe0YU/+r0p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz
NDIyMzIwHhcNMjYwNjEzMDYwMDMwWhcNMjYwNjE0MDYwMDMwWjAzMTEwLwYDVQQD
Eyg5OTExMDI4ZTM5ZmMwOTU3ZDhjODFjZjJlOTk3MjkzMTk4MTE2Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQKdYPuITlnndYTeSX7UXy1M3XL9
g4lg/I14i1MZS4LF5G+I5/1JiP2Jj8firZgh2CkE7gA5/PMe5SboNq6BIgKv+sUr
Clx8t/0AOGGUD24zMiB5Ksyx9x66sJBzO5tmEQ5Ydasv4AxPu9rj0ODC+zt82Q56
qmba93ciA+tEJEMnxu4ibHa8sUfXhMFKowGshZY3o0SzWKwQ0Msdg6/Zf6uHy8Qy
HnEFMe7gAFQp292CH/H86koFLk5Dkf8eIuhVzQfScOjRCrne6YtujxpY0sHjC8Ov
/n0zk9dkVpgeNl/3MvPkg9vOxRlGj5VPvhkmRzVahTvdem5KdC3yA1ZXTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkRAo45/AlX2Mgc8umXKTGYEWd1MB8GA1UdIwQY
MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut
YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4
LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpdTj6nU
IDdaVvrZz5xzNx6qOXS7nNgVQ2Sd8CGvKAJva9sGkxaCTPkN4G8RtJnoUUB8WS47
YA/ZND8Dz4tEynbldpSyeY6j+nMpwTk3CNCqJplyUhvYRfLUe6ABSHeEKBRGVBHR
KmxnBF2ZJ7aTqWzkWwd8p9b5Ac+hKnASMyG/ghGOtugBunTMFnMMQne3Hvim2Haj
xxT3BfvIvJoyJwjpb/rUDs0hEKuXU6lbJBEiqKkIJ4tFY/pvT0K2NwsyMfIgN54b
YoH1nR5b3LUOSeL3IYupmk5Q5jLVT2bcn9HxChyKBP2AAnqxEgEOL1YgqODdjGZs
oFSmb8ZTZs0VxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:16 2026 by rpki-client