Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: AcKrT2g8aynfgtPJ7RrVxUsZ09ATlEsLV2uZhKkWiJg=
Subject key identifier: 0E:31:35:1F:98:1F:1E:91:43:A0:90:33:54:3B:89:98:94:52:40:D5
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019EBD6BD4AE90306639F98E4CBBA89599CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0BA7
Signing time: Fri 12 Jun 2026 20:00:20 +0000
Manifest this update: Fri 12 Jun 2026 20:00:20 +0000
Manifest next update: Sat 13 Jun 2026 20:00:20 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: 9TmNFWHb7tMS+AIFH50BEU5368doru79U0KgZzb/8ic=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6b:d4:ae:90:30:66:39:f9:8e:4c:bb:a8:95:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jun 12 20:00:20 2026 GMT
Not After : Jun 13 20:00:20 2026 GMT
Subject: CN=0e31351f981f1e9143a09033543b8998945240d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:9f:e8:bc:b9:d3:4a:05:cd:32:ea:a9:92:
86:62:24:55:06:07:f0:19:e4:bf:53:cd:09:e8:98:
19:32:d5:43:43:17:03:7c:da:55:a9:c8:40:7e:38:
f6:98:e6:3d:eb:68:a8:b6:22:71:ce:54:9e:fa:84:
06:a5:94:21:2c:84:40:e4:32:df:40:18:18:5e:40:
d7:d5:b2:34:7e:53:ac:10:70:98:e9:c9:13:8e:06:
92:f3:26:06:bc:ce:af:3f:6c:4d:43:96:54:dc:78:
59:b4:4b:ac:ba:f3:5c:10:5b:01:1e:3c:41:d4:a5:
db:28:5d:46:9a:80:17:c3:c1:40:be:8a:23:51:f3:
a1:55:64:cd:77:99:d1:7d:d1:59:d3:5b:5d:2f:9e:
7e:88:c0:4c:bd:d6:75:7d:26:de:95:7a:47:23:59:
11:01:ae:f7:2e:31:1c:e4:84:48:d4:d0:2e:2f:07:
b3:66:7e:17:3d:28:8e:94:69:cc:2f:a7:70:9a:7c:
31:47:ca:57:97:96:07:77:13:ed:1c:c1:fb:ba:fb:
4e:7e:50:84:fe:5d:fb:ab:c1:7a:ad:b6:4e:10:10:
b7:d5:4e:c9:92:d1:38:ce:54:9e:f8:42:47:d4:f1:
ab:d6:18:0e:67:01:57:52:11:59:8f:e9:11:55:9a:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:35:1F:98:1F:1E:91:43:A0:90:33:54:3B:89:98:94:52:40:D5
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0e:b9:08:ca:fb:b5:f7:aa:3f:4a:44:ef:ae:0c:72:ee:dc:
31:c9:c9:10:0b:38:95:47:0e:c7:8c:6c:2a:15:cc:d5:df:cc:
c3:84:81:ee:fa:4f:d4:e1:a9:e3:a7:90:a3:08:d8:2d:0b:a7:
8a:73:ac:ef:31:ba:45:60:60:39:5d:86:4d:a8:08:80:4d:c9:
63:71:9e:c7:a9:99:d9:83:e5:3f:1b:9b:8b:03:4c:a9:d2:c6:
f3:23:d9:49:6b:5d:d2:83:ba:1d:62:80:15:f5:f4:96:d1:7e:
38:41:f5:c8:49:6f:dd:71:db:de:cf:46:31:a5:8a:82:8b:b1:
fb:e5:20:9d:92:25:7a:e5:35:78:44:61:03:84:81:fe:33:28:
b9:c0:67:3b:f1:53:3c:e5:0c:f6:a6:1d:9b:71:d8:8e:9d:45:
67:57:8e:d0:ff:5a:9a:43:1a:88:8a:c2:27:a4:37:10:ce:9f:
2e:48:59:88:4d:66:3d:17:ed:c9:ca:41:a7:b5:a6:58:93:b0:
26:c2:0d:90:9d:72:9b:92:4f:8c:71:34:bc:a0:cc:25:92:b3:
5d:27:82:67:ac:00:89:eb:ef:33:e5:d7:84:c2:b7:97:41:52:
11:08:54:64:ab:db:0d:5f:d7:aa:f4:33:2f:33:a8:25:a7:2f:
0f:68:c9:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ69a9SukDBmOfmOTLuolZnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjYwNjEyMjAwMDIwWhcNMjYwNjEzMjAwMDIwWjAzMTEwLwYDVQQD
EygwZTMxMzUxZjk4MWYxZTkxNDNhMDkwMzM1NDNiODk5ODk0NTI0MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eOf6Ly500oFzTLqqZKGYiRVBgfw
GeS/U80J6JgZMtVDQxcDfNpVqchAfjj2mOY962iotiJxzlSe+oQGpZQhLIRA5DLf
QBgYXkDX1bI0flOsEHCY6ckTjgaS8yYGvM6vP2xNQ5ZU3HhZtEusuvNcEFsBHjxB
1KXbKF1GmoAXw8FAvoojUfOhVWTNd5nRfdFZ01tdL55+iMBMvdZ1fSbelXpHI1kR
Aa73LjEc5IRI1NAuLwezZn4XPSiOlGnML6dwmnwxR8pXl5YHdxPtHMH7uvtOflCE
/l37q8F6rbZOEBC31U7JktE4zlSe+EJH1PGr1hgOZwFXUhFZj+kRVZquNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA4xNR+YHx6RQ6CQM1Q7iZiUUkDVMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk
YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ65
CMr7tfeqP0pE764Mcu7cMcnJEAs4lUcOx4xsKhXM1d/Mw4SB7vpP1OGp46eQowjY
LQuninOs7zG6RWBgOV2GTagIgE3JY3Gex6mZ2YPlPxubiwNMqdLG8yPZSWtd0oO6
HWKAFfX0ltF+OEH1yElv3XHb3s9GMaWKgoux++UgnZIleuU1eERhA4SB/jMoucBn
O/FTPOUM9qYdm3HYjp1FZ1eO0P9amkMaiIrCJ6Q3EM6fLkhZiE1mPRftycpBp7Wm
WJOwJsINkJ1ym5JPjHE0vKDMJZKzXSeCZ6wAievvM+XXhMK3l0FSEQhUZKvbDV/X
qvQzLzOoJacvD2jJxA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:17 2026 by rpki-client