Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: XLEYS6wFbkIEl1HkPGhTIoGzyqmw6lapQdr/dqS2vso=
Subject key identifier: 70:A7:0A:1F:EE:11:7F:7A:58:5B:1E:6F:9D:85:7E:FA:FB:AF:6B:25
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 019EBEB5FCF08AC251C726F81A46EE0E94E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0DF6
Signing time: Sat 13 Jun 2026 02:00:58 +0000
Manifest this update: Sat 13 Jun 2026 02:00:58 +0000
Manifest next update: Sun 14 Jun 2026 02:00:58 +0000
Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: 7bS20fLwZbzAR6maMdImmjiFb2E+cfOMftA0jontc6U=)
2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:fc:f0:8a:c2:51:c7:26:f8:1a:46:ee:0e:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jun 13 02:00:58 2026 GMT
Not After : Jun 14 02:00:58 2026 GMT
Subject: CN=70a70a1fee117f7a585b1e6f9d857efafbaf6b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:5c:74:bf:a4:3e:63:65:05:6e:e4:fe:d2:
2b:32:09:0c:99:2d:a4:e3:57:5c:1b:ca:25:83:03:
32:fa:eb:7f:2f:5a:f0:a2:5e:a7:ae:ca:1d:0c:6a:
2f:bb:13:57:13:ce:af:78:14:5a:95:72:52:00:08:
a1:9a:e5:31:72:01:28:00:5e:25:28:88:db:66:b1:
ff:a4:e6:f4:f9:7f:7d:8b:89:eb:e1:c1:e2:0d:77:
fa:b9:3f:e7:4b:14:a3:e0:dd:dd:e7:45:bb:eb:ae:
64:3f:c6:b8:c8:f4:29:8e:8c:2b:04:a4:a3:fc:f9:
82:02:19:09:2b:32:50:bc:20:1f:d0:0d:46:b2:2b:
8c:e6:29:23:26:66:d8:2a:9d:c2:91:26:d1:05:8d:
a0:ee:fd:18:bb:42:2b:dc:53:42:3d:4c:8c:b4:91:
b3:09:94:4e:52:0f:e2:08:ba:80:43:a0:9c:00:3e:
a7:ff:e1:b7:1a:62:83:ff:36:7f:b1:1e:3c:bf:4f:
d5:f9:fe:a5:8d:09:3a:67:6e:5c:6d:4c:70:5e:5a:
13:9b:e5:ec:24:37:d5:db:bc:23:ce:73:06:5b:66:
ce:40:fc:d7:f3:6d:4c:e6:c6:a6:5e:45:ba:fe:08:
64:25:c5:fd:dd:cd:8e:88:f6:23:b7:da:42:34:60:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:0A:1F:EE:11:7F:7A:58:5B:1E:6F:9D:85:7E:FA:FB:AF:6B:25
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:64:6b:1b:6e:7b:5d:f1:1c:fa:2b:e5:37:3a:dd:dd:75:c4:
1e:25:bc:86:73:8d:3b:6b:90:b7:e1:4c:8a:aa:f5:f8:d9:de:
0e:1a:b6:22:9f:9a:1e:e4:c5:7b:02:88:17:36:63:78:29:7e:
06:15:d1:d1:5f:62:c6:a6:18:69:f9:d0:bb:2b:bf:95:8a:30:
6a:84:a8:a0:b8:f2:01:7c:c9:f1:b1:95:5b:6a:7c:a5:d5:67:
99:c6:4c:5c:1e:aa:93:dc:49:1e:8e:76:4c:78:81:6f:a6:fe:
6e:88:c3:f4:0e:27:8d:cc:47:8e:2c:b9:08:d0:66:9e:fb:fd:
9c:73:3a:19:1e:8a:29:bb:0f:f6:1b:12:fb:7f:15:d6:9a:2b:
29:e5:22:6b:80:15:04:4c:04:98:af:e3:f4:70:49:f1:ba:4c:
e7:c9:01:52:90:a7:df:ee:08:23:7c:e4:dd:9e:68:0f:07:8c:
dd:81:ef:8a:53:d5:08:47:d7:7b:b5:f5:07:2d:7a:04:ba:98:
ba:39:55:e1:32:e6:d3:7a:a1:05:a0:c1:3f:ae:7c:9c:3d:53:
b9:f6:63:7e:50:c1:3e:7d:98:cc:16:1c:90:93:52:b0:93:c6:
6c:65:05:75:ba:66:a5:06:25:73:b9:a6:2f:d0:7e:47:f4:75:
f7:14:5d:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tfzwisJRxyb4GkbuDpThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3
ZjM3MzIwHhcNMjYwNjEzMDIwMDU4WhcNMjYwNjE0MDIwMDU4WjAzMTEwLwYDVQQD
Eyg3MGE3MGExZmVlMTE3ZjdhNTg1YjFlNmY5ZDg1N2VmYWZiYWY2YjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswJcdL+kPmNlBW7k/tIrMgkMmS2k
41dcG8olgwMy+ut/L1rwol6nrsodDGovuxNXE86veBRalXJSAAihmuUxcgEoAF4l
KIjbZrH/pOb0+X99i4nr4cHiDXf6uT/nSxSj4N3d50W7665kP8a4yPQpjowrBKSj
/PmCAhkJKzJQvCAf0A1GsiuM5ikjJmbYKp3CkSbRBY2g7v0Yu0Ir3FNCPUyMtJGz
CZROUg/iCLqAQ6CcAD6n/+G3GmKD/zZ/sR48v0/V+f6ljQk6Z25cbUxwXloTm+Xs
JDfV27wjznMGW2bOQPzX821M5samXkW6/ghkJcX93c2OiPYjt9pCNGD2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCnCh/uEX96WFseb52Ffvr7r2slMB8GA1UdIwQY
MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt
YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh
LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGRrG257
XfEc+ivlNzrd3XXEHiW8hnONO2uQt+FMiqr1+NneDhq2Ip+aHuTFewKIFzZjeCl+
BhXR0V9ixqYYafnQuyu/lYowaoSooLjyAXzJ8bGVW2p8pdVnmcZMXB6qk9xJHo52
THiBb6b+bojD9A4njcxHjiy5CNBmnvv9nHM6GR6KKbsP9hsS+38V1porKeUia4AV
BEwEmK/j9HBJ8bpM58kBUpCn3+4II3zk3Z5oDweM3YHvilPVCEfXe7X1By16BLqY
ujlV4TLm03qhBaDBP658nD1TufZjflDBPn2YzBYckJNSsJPGbGUFdbpmpQYlc7mm
L9B+R/R19xRdOg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:36 2026 by rpki-client