Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: 5krgeQ5o308Dey5V8J0D2qMdGgtWS3TAQiRPx7ktajo=
Subject key identifier: DC:81:03:45:7E:6C:19:6B:3D:0C:98:8B:2B:5D:4A:5C:92:74:67:07
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019EC3A5563926EF8311B3FA752E8F853F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1961
Signing time: Sun 14 Jun 2026 01:00:53 +0000
Manifest this update: Sun 14 Jun 2026 01:00:53 +0000
Manifest next update: Mon 15 Jun 2026 01:00:53 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: xe09KmKgF2hTpVfrdpQBnMd3yTBFPBihK8Lt0q/fAd8=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:56:39:26:ef:83:11:b3:fa:75:2e:8f:85:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jun 14 01:00:53 2026 GMT
Not After : Jun 15 01:00:53 2026 GMT
Subject: CN=dc8103457e6c196b3d0c988b2b5d4a5c92746707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:fe:03:39:e4:6d:12:3b:1e:fa:f6:d4:50:
4e:fa:04:01:22:10:1f:cf:fb:8b:16:90:2d:aa:83:
a6:4d:47:8a:ba:1a:ad:f8:e0:19:e0:f6:b4:e8:98:
ca:0f:d7:b4:48:df:ff:5f:f4:6d:21:52:0e:cc:8e:
a0:28:8e:0a:74:b8:34:6c:03:a1:fa:99:19:26:8c:
3b:61:c1:26:00:42:a0:3d:61:cb:46:03:0c:67:2e:
57:82:7e:3e:55:3d:28:e2:61:5c:fe:18:1f:80:df:
83:df:38:fb:3c:0b:57:c4:51:b9:e2:45:4c:ec:32:
71:ab:37:f6:34:12:70:79:4b:96:e2:7f:a9:87:3c:
37:4c:31:d6:b7:ee:a1:43:0b:c0:8a:4c:3a:39:03:
b9:97:5a:1f:4d:2a:0e:c3:86:91:27:dc:81:8e:11:
e6:47:fc:03:c4:00:a9:a9:e5:0b:46:11:a5:3f:e9:
cb:8e:f0:e3:00:26:89:2c:58:5a:1f:89:a0:76:ca:
01:89:3d:28:82:bc:4e:4e:bf:0f:8e:0e:31:fe:de:
3d:27:9a:d1:1f:f9:cd:8e:53:62:e4:66:c6:e7:eb:
97:71:8a:45:ca:f0:95:6c:0b:db:e5:ee:00:3b:99:
04:35:c0:2f:b1:2f:02:3d:c2:ef:ea:1a:be:d8:ce:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:03:45:7E:6C:19:6B:3D:0C:98:8B:2B:5D:4A:5C:92:74:67:07
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:7a:99:80:01:a3:09:eb:2b:23:ee:96:99:b6:e0:9a:c3:
b1:dc:d5:5f:3e:43:f6:53:84:c5:3c:a5:2e:3f:13:50:2c:b2:
ec:80:ff:d3:a8:ad:e6:62:f5:17:20:30:10:b6:a6:00:3d:6e:
12:73:b0:4b:0b:ea:d7:57:f4:47:2e:20:b9:10:13:f4:30:93:
b5:fc:d3:e4:6d:5d:a6:5f:6f:0d:6b:e0:fc:71:ec:12:24:62:
2e:b7:3f:6b:f3:c9:f4:72:aa:d5:ba:36:1b:93:e7:1c:7d:41:
24:98:74:00:bc:d4:a5:31:b3:f5:71:80:3f:6b:f6:0b:a1:e1:
54:f5:22:c3:e7:d4:d8:ff:ab:c1:53:64:ef:15:c3:0d:be:09:
42:ec:2c:59:9a:57:bf:cd:a1:f1:35:93:af:86:69:93:a5:2f:
d7:b7:9a:06:8e:28:e4:e9:8b:15:8b:4b:e9:84:5d:eb:4f:eb:
ed:d9:41:39:c3:aa:db:8c:59:09:8c:74:91:97:45:e6:64:93:
31:2e:e2:95:bd:6d:17:e4:20:97:d2:3b:5a:00:67:4f:46:3a:
33:2c:70:92:0c:fc:8d:1c:21:c2:02:64:ea:72:de:e4:18:e5:
a5:49:9c:80:09:99:59:7d:5c:a5:46:74:e6:3e:ba:77:be:a5:
a5:d0:6f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpVY5Ju+DEbP6dS6PhT98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYwNjE0MDEwMDUzWhcNMjYwNjE1MDEwMDUzWjAzMTEwLwYDVQQD
EyhkYzgxMDM0NTdlNmMxOTZiM2QwYzk4OGIyYjVkNGE1YzkyNzQ2NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmb+AznkbRI7Hvr21FBO+gQBIhAf
z/uLFpAtqoOmTUeKuhqt+OAZ4Pa06JjKD9e0SN//X/RtIVIOzI6gKI4KdLg0bAOh
+pkZJow7YcEmAEKgPWHLRgMMZy5Xgn4+VT0o4mFc/hgfgN+D3zj7PAtXxFG54kVM
7DJxqzf2NBJweUuW4n+phzw3TDHWt+6hQwvAikw6OQO5l1ofTSoOw4aRJ9yBjhHm
R/wDxACpqeULRhGlP+nLjvDjACaJLFhaH4mgdsoBiT0ogrxOTr8Pjg4x/t49J5rR
H/nNjlNi5GbG5+uXcYpFyvCVbAvb5e4AO5kENcAvsS8CPcLv6hq+2M7hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyBA0V+bBlrPQyYiytdSlySdGcHMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK16mYAB
ownrKyPulpm24JrDsdzVXz5D9lOExTylLj8TUCyy7ID/06it5mL1FyAwELamAD1u
EnOwSwvq11f0Ry4guRAT9DCTtfzT5G1dpl9vDWvg/HHsEiRiLrc/a/PJ9HKq1bo2
G5PnHH1BJJh0ALzUpTGz9XGAP2v2C6HhVPUiw+fU2P+rwVNk7xXDDb4JQuwsWZpX
v82h8TWTr4Zpk6Uv17eaBo4o5OmLFYtL6YRd60/r7dlBOcOq24xZCYx0kZdF5mST
MS7ilb1tF+Qgl9I7WgBnT0Y6Myxwkgz8jRwhwgJk6nLe5BjlpUmcgAmZWX1cpUZ0
5j66d76lpdBv0A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:19 2026 by rpki-client