Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: dCfPR+lK6TPaNiUJuma325+/T5sLIhTEwmHjWptwQF8=
Subject key identifier: D5:FB:F8:AE:FF:07:62:04:30:8F:60:CB:7C:1C:43:26:1F:0E:E6:75
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019EBEB649FC8E6BF27E2D87A246E8F8723F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 02:01:17 +0000
Manifest this update: Sat 13 Jun 2026 02:01:17 +0000
Manifest next update: Sun 14 Jun 2026 02:01:17 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: KKW8FIEEFxQOZlYGQIvinRWxUULOZH6RPDkTzg1BO+4=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:49:fc:8e:6b:f2:7e:2d:87:a2:46:e8:f8:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 13 02:01:17 2026 GMT
Not After : Jun 14 02:01:17 2026 GMT
Subject: CN=d5fbf8aeff076204308f60cb7c1c43261f0ee675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:96:6f:6d:08:51:eb:6a:77:0d:9d:b5:d7:
f9:fb:ff:bb:8b:0e:cd:a9:6c:2b:1c:61:61:81:24:
91:db:00:67:a7:2d:16:aa:cb:71:f3:e4:26:7d:b3:
06:f4:20:2b:35:6e:99:9e:c9:47:7e:ee:1a:6f:90:
1d:81:13:08:e3:5c:7d:98:ec:73:0c:16:7f:e1:c7:
2d:cb:a4:bf:49:d1:e6:3d:e0:bd:d7:75:0e:a5:e8:
60:0c:1f:a5:bb:ac:50:42:2f:26:e0:a5:bf:b2:5c:
d2:fa:a5:b5:d8:e5:71:c1:11:70:c0:bf:d3:cd:01:
55:c0:16:09:35:2f:03:71:d5:68:e6:b5:97:ec:4d:
d2:d8:44:c4:53:28:05:77:6e:e9:59:e3:4c:6c:07:
fe:a5:52:7b:1b:d1:9d:6c:2d:7c:58:dc:dd:2e:38:
7b:bc:fb:ed:d4:2d:50:67:68:27:60:e7:7f:d7:b7:
ba:9e:3b:fb:84:01:2b:f4:63:54:39:b2:26:ab:8a:
3b:94:f2:f0:0f:03:f0:16:32:e3:92:4f:5b:52:5b:
b0:ba:f3:fd:44:07:f1:61:f6:5a:25:e9:78:98:c7:
70:85:22:bf:10:d1:6a:7b:42:00:31:06:cc:44:87:
b7:7c:a9:cc:c1:4b:22:c4:4e:10:fa:ef:51:ee:ce:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:F8:AE:FF:07:62:04:30:8F:60:CB:7C:1C:43:26:1F:0E:E6:75
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:3b:b8:29:bc:b1:15:ab:21:fb:04:22:f5:4d:28:ba:79:
db:f2:8f:3c:18:f0:27:17:49:1f:e3:19:f5:02:ec:92:0f:32:
ad:07:e4:63:c1:49:0d:fa:80:a2:a5:33:ff:e3:dc:cc:d3:87:
0b:36:9d:2e:c2:be:f2:26:54:e8:d7:4d:de:94:af:6c:e3:79:
c6:91:c6:ae:b2:63:e7:d5:66:4e:4a:9a:80:a7:15:cd:f5:e5:
78:1b:47:24:cc:80:5d:2c:a8:cc:e8:b4:03:44:08:73:ae:18:
56:aa:b7:9f:d4:04:68:f4:94:6c:fe:28:5b:9b:61:b7:c6:a2:
b1:4b:64:9b:c9:4b:e1:f4:43:0f:42:a1:1f:a2:28:ec:6d:29:
80:92:0a:b3:7a:12:15:e5:80:6c:ca:7a:88:05:e1:89:9f:26:
71:ca:d8:1e:3c:e2:22:2a:fa:82:e5:26:80:4b:20:83:11:6a:
c8:9e:ba:c4:0f:8e:c3:13:a5:b9:7b:55:3c:a9:de:17:1b:89:
ee:da:ad:1f:2a:22:fb:5f:19:49:f2:80:d9:db:9b:a1:5e:d0:
31:74:d4:31:57:75:b5:0c:83:d3:e5:06:d4:cb:94:c1:83:40:
3f:49:db:68:e7:fd:e7:d0:f9:e3:21:45:13:65:5a:42:01:dc:
8d:6a:5a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tkn8jmvyfi2Hokbo+HI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjYwNjEzMDIwMTE3WhcNMjYwNjE0MDIwMTE3WjAzMTEwLwYDVQQD
EyhkNWZiZjhhZWZmMDc2MjA0MzA4ZjYwY2I3YzFjNDMyNjFmMGVlNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl2Wb20IUetqdw2dtdf5+/+7iw7N
qWwrHGFhgSSR2wBnpy0Wqstx8+QmfbMG9CArNW6ZnslHfu4ab5AdgRMI41x9mOxz
DBZ/4ccty6S/SdHmPeC913UOpehgDB+lu6xQQi8m4KW/slzS+qW12OVxwRFwwL/T
zQFVwBYJNS8DcdVo5rWX7E3S2ETEUygFd27pWeNMbAf+pVJ7G9GdbC18WNzdLjh7
vPvt1C1QZ2gnYOd/17e6njv7hAEr9GNUObImq4o7lPLwDwPwFjLjkk9bUluwuvP9
RAfxYfZaJel4mMdwhSK/ENFqe0IAMQbMRIe3fKnMwUsixE4Q+u9R7s52HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX7+K7/B2IEMI9gy3wcQyYfDuZ1MB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFos7uCm8
sRWrIfsEIvVNKLp52/KPPBjwJxdJH+MZ9QLskg8yrQfkY8FJDfqAoqUz/+PczNOH
CzadLsK+8iZU6NdN3pSvbON5xpHGrrJj59VmTkqagKcVzfXleBtHJMyAXSyozOi0
A0QIc64YVqq3n9QEaPSUbP4oW5tht8aisUtkm8lL4fRDD0KhH6Io7G0pgJIKs3oS
FeWAbMp6iAXhiZ8mccrYHjziIir6guUmgEsggxFqyJ66xA+OwxOluXtVPKneFxuJ
7tqtHyoi+18ZSfKA2duboV7QMXTUMVd1tQyD0+UG1MuUwYNAP0nbaOf959D54yFF
E2VaQgHcjWpaNw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:46:45 2026 by rpki-client