Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: 9swcJSfQWaSChL8ZCahmBp3ZS/IuyFSZ/6cC2QXlj0Y=
Subject key identifier: 3E:CF:1F:08:9A:99:FC:64:9A:E1:49:9E:15:DD:51:B5:9F:A2:84:B6
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019EC30072A8669AFA31A732EF7337B4BC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0CB6
Signing time: Sat 13 Jun 2026 22:00:46 +0000
Manifest this update: Sat 13 Jun 2026 22:00:46 +0000
Manifest next update: Sun 14 Jun 2026 22:00:46 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: ingU7kjoKnUXgrpAL+0XKQdDdY7sh+96irg0pp+GNtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:72:a8:66:9a:fa:31:a7:32:ef:73:37:b4:bc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jun 13 22:00:46 2026 GMT
Not After : Jun 14 22:00:46 2026 GMT
Subject: CN=3ecf1f089a99fc649ae1499e15dd51b59fa284b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:dc:d6:51:a7:90:56:2a:f8:d8:ff:84:58:
78:71:e9:c1:74:90:a5:fb:1a:71:e0:75:c8:e2:b8:
2b:fa:a0:7b:6d:f0:1f:3b:30:e8:e7:3d:b7:4a:9d:
06:42:cf:af:3d:a7:72:45:26:0b:c2:a2:e2:e8:5d:
4e:f1:c6:9f:8f:78:c9:34:dc:48:56:e9:ac:d1:cf:
7c:8a:12:97:5e:4c:fe:a9:78:dd:c6:f1:bc:07:18:
d6:b9:14:00:05:6a:4d:51:96:be:f4:24:cf:0a:2d:
a8:f2:40:92:77:37:2b:2d:fa:cf:3c:42:11:03:de:
e3:1a:1b:cf:da:1d:1a:d4:0a:25:bb:23:68:2b:7d:
ab:4c:fd:d8:c0:53:d1:3b:ce:bb:a1:73:bc:01:54:
53:e6:c3:1e:c1:36:84:ad:e1:80:c9:c5:0d:04:66:
4c:45:49:18:a6:3c:7a:e0:10:6b:cf:6f:65:25:d1:
a0:d5:87:ca:a5:41:bc:cb:f1:b4:7a:3f:08:86:ca:
e0:1e:8a:73:5e:e3:fd:38:0e:87:c8:d1:56:fd:4a:
33:d7:76:80:35:34:9a:f8:76:cd:8a:7a:c7:89:30:
da:d0:d4:f7:f3:91:2d:63:ee:7c:99:dd:b3:2f:6e:
43:48:94:18:85:22:4e:18:e9:3f:6c:22:f2:ea:50:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:1F:08:9A:99:FC:64:9A:E1:49:9E:15:DD:51:B5:9F:A2:84:B6
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:74:eb:13:07:55:91:45:ad:c4:2f:c0:3b:2f:2f:b4:b5:
05:22:ca:9a:2e:29:e4:95:11:f8:63:5c:be:3c:f4:85:bb:38:
75:e7:31:4d:1a:fb:17:ad:65:13:5a:dd:45:3f:28:9d:84:5a:
8c:8f:50:c0:3a:3f:ee:79:aa:a1:61:5c:63:99:89:d9:04:fa:
58:95:00:0c:78:8e:37:8d:1e:8e:9e:e0:0f:a8:ba:6b:08:ae:
ad:d1:33:0f:69:be:cd:91:a0:ab:6e:88:d8:27:d8:50:83:5d:
4c:f0:cc:18:bd:a8:4a:b3:1e:4f:bd:f3:c5:1d:ba:e6:36:90:
97:99:17:c2:dd:27:45:9b:3f:2b:59:9b:5b:54:a8:80:54:30:
f2:6c:22:e3:d9:c3:b3:63:db:f5:77:55:de:b3:ea:da:ff:4e:
11:53:4e:30:11:cc:5b:f0:ed:d4:65:24:b2:0a:40:f2:a0:1c:
93:24:af:de:4b:81:cd:36:33:61:49:3c:64:a4:6f:a4:9e:42:
9d:a5:29:b6:6e:24:15:68:f2:e2:1a:e7:55:bb:2a:c8:c9:bd:
d2:e8:b2:bb:04:98:ce:fb:63:7c:4e:7d:14:bb:d5:d7:d3:17:
cd:89:20:03:d5:af:52:bb:60:7f:5b:76:64:ce:6d:11:7d:7d:
99:95:26:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAHKoZpr6Macy73M3tLyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl
NmE1YmUwHhcNMjYwNjEzMjIwMDQ2WhcNMjYwNjE0MjIwMDQ2WjAzMTEwLwYDVQQD
EygzZWNmMWYwODlhOTlmYzY0OWFlMTQ5OWUxNWRkNTFiNTlmYTI4NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw/c1lGnkFYq+Nj/hFh4cenBdJCl
+xpx4HXI4rgr+qB7bfAfOzDo5z23Sp0GQs+vPadyRSYLwqLi6F1O8cafj3jJNNxI
Vums0c98ihKXXkz+qXjdxvG8BxjWuRQABWpNUZa+9CTPCi2o8kCSdzcrLfrPPEIR
A97jGhvP2h0a1AoluyNoK32rTP3YwFPRO867oXO8AVRT5sMewTaEreGAycUNBGZM
RUkYpjx64BBrz29lJdGg1YfKpUG8y/G0ej8IhsrgHopzXuP9OA6HyNFW/Uoz13aA
NTSa+HbNinrHiTDa0NT385EtY+58md2zL25DSJQYhSJOGOk/bCLy6lAwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7PHwiamfxkmuFJnhXdUbWfooS2MB8GA1UdIwQY
MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt
YmEzOTQ3YzliMjJiLzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi
LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4J06xMH
VZFFrcQvwDsvL7S1BSLKmi4p5JUR+GNcvjz0hbs4decxTRr7F61lE1rdRT8onYRa
jI9QwDo/7nmqoWFcY5mJ2QT6WJUADHiON40ejp7gD6i6awiurdEzD2m+zZGgq26I
2CfYUINdTPDMGL2oSrMeT73zxR265jaQl5kXwt0nRZs/K1mbW1SogFQw8mwi49nD
s2Pb9XdV3rPq2v9OEVNOMBHMW/Dt1GUksgpA8qAckySv3kuBzTYzYUk8ZKRvpJ5C
naUptm4kFWjy4hrnVbsqyMm90uiyuwSYzvtjfE59FLvV19MXzYkgA9WvUrtgf1t2
ZM5tEX19mZUmFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:19 2026 by rpki-client