Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: yQGr5xLO6V0Rko9r4dk0plVWqpIEz0poZ1xIYThEQC8=
Subject key identifier: 5D:50:45:E9:C8:AD:13:B1:E8:31:B7:69:13:92:B6:3E:55:EA:7B:75
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019EC0DABFA76A9C01765C70148889E82BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 12:00:21 +0000
Manifest this update: Sat 13 Jun 2026 12:00:21 +0000
Manifest next update: Sun 14 Jun 2026 12:00:21 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: NsCq/sHfaA3kNxvqHQJeKEAbmBWdJ/23cN8NwK45mis=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:bf:a7:6a:9c:01:76:5c:70:14:88:89:e8:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jun 13 12:00:21 2026 GMT
Not After : Jun 14 12:00:21 2026 GMT
Subject: CN=5d5045e9c8ad13b1e831b7691392b63e55ea7b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:ba:4a:7d:a6:04:bf:dd:14:95:08:59:c9:
c0:6c:45:df:bc:49:ae:c9:8d:14:4d:a7:03:7c:15:
15:cc:9f:17:3d:f0:79:7a:fe:94:67:de:53:3a:51:
5d:19:bc:df:b6:b9:d5:26:18:cb:0f:c8:6e:32:75:
4a:c3:7c:3d:5f:45:ed:50:45:92:a5:66:79:de:ae:
f2:02:00:76:c6:06:d6:a5:70:06:c8:32:29:7e:21:
cf:c7:ac:77:de:12:d2:25:b2:37:90:f0:b4:62:79:
9e:cf:fa:47:41:47:04:74:90:19:e8:c9:83:0b:80:
ce:61:e8:f0:43:cb:b3:4e:fe:ae:13:b1:d1:3c:42:
68:a0:4d:4e:6b:f3:e5:73:ad:c9:e1:e6:5f:fe:7b:
9f:3b:8a:7d:a5:72:38:e9:35:77:55:b3:8f:34:6f:
40:ac:7d:f5:cc:64:ea:0f:77:6f:09:1a:d6:ac:ec:
ce:25:8a:a6:cb:bc:b8:a1:5d:ff:8a:0b:41:55:44:
d7:64:79:7d:25:01:93:ba:d8:bd:86:ce:07:fa:8a:
98:92:97:73:77:6c:b4:17:2f:48:05:68:98:26:97:
b0:85:73:c3:c5:71:81:64:ec:9b:05:6b:c7:94:f2:
c7:18:74:c8:49:14:60:80:e6:1e:cd:b0:25:a3:7e:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:45:E9:C8:AD:13:B1:E8:31:B7:69:13:92:B6:3E:55:EA:7B:75
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:c1:ee:2b:c7:7a:8a:03:4a:3f:55:52:be:28:61:8b:13:
a5:13:4e:80:11:93:80:d8:42:0d:d7:aa:c2:32:4f:31:02:86:
58:be:a8:4d:f5:77:3d:65:17:a8:a8:ba:5e:68:11:f8:cd:95:
89:74:e0:df:ab:3b:db:e4:80:16:83:ad:d3:c9:8b:a8:28:46:
4b:ba:11:30:bc:55:d2:f5:fb:ee:9d:53:fe:a7:08:09:71:46:
5a:de:ef:76:cc:25:fa:30:06:3b:fc:6d:e7:b9:bf:07:b0:e5:
72:64:fa:7d:26:29:88:98:1f:37:44:59:fa:35:49:c4:9e:fa:
91:64:98:0b:5b:94:95:5f:f4:88:29:6b:82:fa:a5:9f:3f:a7:
2d:5b:43:76:3f:d5:11:26:b7:17:36:ba:f2:ea:c4:17:89:52:
6b:47:af:5d:ae:0b:dc:e7:14:54:f5:d6:f1:07:48:c7:4f:e2:
d0:24:45:d1:e5:88:9f:26:b6:fc:aa:4b:84:59:fb:b2:cb:f6:
94:d7:54:e7:0a:52:e0:2c:65:48:f5:5e:d9:5d:b9:7a:46:7e:
aa:bc:91:61:e5:2c:75:5a:b2:97:93:ad:aa:20:8c:ee:fe:b9:
9a:51:58:c3:6d:e4:01:07:2f:76:9b:75:de:9f:92:0f:91:5b:
63:8a:e9:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7A2r+napwBdlxwFIiJ6Cv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi
ZTc1NzYwHhcNMjYwNjEzMTIwMDIxWhcNMjYwNjE0MTIwMDIxWjAzMTEwLwYDVQQD
Eyg1ZDUwNDVlOWM4YWQxM2IxZTgzMWI3NjkxMzkyYjYzZTU1ZWE3Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCW6Sn2mBL/dFJUIWcnAbEXfvEmu
yY0UTacDfBUVzJ8XPfB5ev6UZ95TOlFdGbzftrnVJhjLD8huMnVKw3w9X0XtUEWS
pWZ53q7yAgB2xgbWpXAGyDIpfiHPx6x33hLSJbI3kPC0Ynmez/pHQUcEdJAZ6MmD
C4DOYejwQ8uzTv6uE7HRPEJooE1Oa/Plc63J4eZf/nufO4p9pXI46TV3VbOPNG9A
rH31zGTqD3dvCRrWrOzOJYqmy7y4oV3/igtBVUTXZHl9JQGTuti9hs4H+oqYkpdz
d2y0Fy9IBWiYJpewhXPDxXGBZOybBWvHlPLHGHTISRRggOYezbAlo37WPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF1QRenIrROx6DG3aROStj5V6nt1MB8GA1UdIwQY
MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi
LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0
ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3TB
7ivHeooDSj9VUr4oYYsTpRNOgBGTgNhCDdeqwjJPMQKGWL6oTfV3PWUXqKi6XmgR
+M2ViXTg36s72+SAFoOt08mLqChGS7oRMLxV0vX77p1T/qcICXFGWt7vdswl+jAG
O/xt57m/B7DlcmT6fSYpiJgfN0RZ+jVJxJ76kWSYC1uUlV/0iClrgvqlnz+nLVtD
dj/VESa3Fza68urEF4lSa0evXa4L3OcUVPXW8QdIx0/i0CRF0eWInya2/KpLhFn7
ssv2lNdU5wpS4CxlSPVe2V25ekZ+qryRYeUsdVqyl5OtqiCM7v65mlFYw23kAQcv
dpt13p+SD5FbY4rpnw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:45 2026 by rpki-client