Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: PM5iBMFOTRBB3hFl4tRNb2cT/LL63kSx6NfprGZt5nQ=
Subject key identifier: AA:84:AA:B8:97:1D:32:8F:B0:50:4D:00:B3:B4:E4:45:AA:7D:F5:FD
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019EBF5A90E888AE111F4B63D8424C323552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 01AD
Signing time: Sat 13 Jun 2026 05:00:43 +0000
Manifest this update: Sat 13 Jun 2026 05:00:43 +0000
Manifest next update: Sun 14 Jun 2026 05:00:43 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: cuMw74oEB+FrI33GIP3TduT50YzY0j7rJ+P9JS3WYHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:90:e8:88:ae:11:1f:4b:63:d8:42:4c:32:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jun 13 05:00:43 2026 GMT
Not After : Jun 14 05:00:43 2026 GMT
Subject: CN=aa84aab8971d328fb0504d00b3b4e445aa7df5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:34:37:af:9a:2a:25:31:15:3b:e9:d8:9b:
7c:72:05:2f:a3:23:37:6d:99:28:f9:16:ed:87:c8:
73:89:93:e6:9d:83:f5:57:31:63:14:a9:bf:a8:91:
35:a6:ee:9d:85:61:67:17:28:c1:ae:cb:c5:7b:9d:
a7:26:47:7e:f4:67:a1:54:53:c0:81:ec:89:45:43:
86:c3:8a:81:59:c1:00:30:12:af:63:cb:85:d7:19:
be:a2:2f:19:ad:26:0e:00:ba:fa:5e:4f:86:8f:74:
7f:25:ad:9c:e0:a7:cc:f3:52:15:be:24:00:66:65:
92:1f:1c:96:f2:7d:e3:4e:77:1d:5e:1a:03:ba:d6:
47:06:05:3e:65:c4:15:45:c2:ee:ef:f5:f0:4b:b4:
e1:1b:d1:44:35:a0:79:27:68:60:02:04:e3:e1:d9:
e9:79:d9:df:29:43:6f:1b:dd:6f:2a:fb:db:0f:ee:
a5:8d:a2:b1:66:d6:36:76:c1:4a:87:84:df:dc:db:
99:bd:34:04:8a:22:78:94:60:68:3b:0c:e0:02:af:
48:46:71:c4:ba:b1:5f:5c:ad:01:21:7d:7d:1b:ff:
31:78:be:40:3f:6b:cb:0e:87:23:bd:23:b0:7b:67:
02:bc:57:86:59:29:9e:ec:97:72:ea:dc:ef:c1:0f:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:AA:B8:97:1D:32:8F:B0:50:4D:00:B3:B4:E4:45:AA:7D:F5:FD
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d4:79:d7:2f:30:83:27:03:f3:54:a5:86:aa:bd:2f:a9:d0:
4e:55:97:7b:26:7d:e6:3f:81:f5:ba:49:64:82:ae:0e:31:0f:
55:c3:a4:6f:9d:98:01:28:e1:0b:43:99:6c:f6:a4:00:0b:e8:
ae:fe:55:5f:05:1d:20:70:1d:0d:44:e2:69:b4:cf:fa:53:0e:
74:4d:87:67:e9:23:c3:17:a4:5b:f0:e6:6c:03:27:3f:23:cd:
e8:5c:92:84:3f:10:ba:6d:a0:b3:0a:97:7e:48:b5:2b:9f:fb:
fe:6e:77:ee:37:4a:ca:20:62:1b:77:37:18:ec:8b:ab:a2:8e:
c7:e3:0b:c8:00:09:24:c2:7a:22:37:b8:6a:5d:e0:f5:15:b1:
f7:34:a8:95:7b:e7:18:f3:c4:ca:bb:34:7b:ff:8d:02:e2:cd:
53:d7:41:40:6f:62:7e:a5:38:06:fd:e4:1e:87:dc:37:66:ac:
c3:98:dc:a3:f4:ec:4c:b6:8a:7b:23:59:27:9d:19:da:cf:93:
65:20:a3:07:22:11:f5:7c:0a:1f:ca:1c:e1:ed:7f:4c:66:5c:
d5:00:eb:4e:31:67:64:08:3a:04:0f:e6:21:b4:16:e0:e5:01:
44:bc:7f:12:44:1f:9b:bc:ab:22:6d:3c:4b:81:d6:85:ba:7e:
67:45:73:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WpDoiK4RH0tj2EJMMjVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWM3YTRhN2EwZWFlNDg4MTM3NzM5YmVjNzFhMmIzMjQ3
MGY4ZWQwHhcNMjYwNjEzMDUwMDQzWhcNMjYwNjE0MDUwMDQzWjAzMTEwLwYDVQQD
EyhhYTg0YWFiODk3MWQzMjhmYjA1MDRkMDBiM2I0ZTQ0NWFhN2RmNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOM0N6+aKiUxFTvp2Jt8cgUvoyM3
bZko+Rbth8hziZPmnYP1VzFjFKm/qJE1pu6dhWFnFyjBrsvFe52nJkd+9GehVFPA
geyJRUOGw4qBWcEAMBKvY8uF1xm+oi8ZrSYOALr6Xk+Gj3R/Ja2c4KfM81IVviQA
ZmWSHxyW8n3jTncdXhoDutZHBgU+ZcQVRcLu7/XwS7ThG9FENaB5J2hgAgTj4dnp
ednfKUNvG91vKvvbD+6ljaKxZtY2dsFKh4Tf3NuZvTQEiiJ4lGBoOwzgAq9IRnHE
urFfXK0BIX19G/8xeL5AP2vLDocjvSOwe2cCvFeGWSme7Jdy6tzvwQ9d8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqEqriXHTKPsFBNALO05EWqffX9MB8GA1UdIwQY
MBaAFHWcekp6Dq5IgTdzm+xxorMkcPjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYt
YTM5YTljNzc1YTUwLzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYtYTM5YTljNzc1YTUw
LzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdR51y8w
gycD81Slhqq9L6nQTlWXeyZ95j+B9bpJZIKuDjEPVcOkb52YASjhC0OZbPakAAvo
rv5VXwUdIHAdDUTiabTP+lMOdE2HZ+kjwxekW/DmbAMnPyPN6FyShD8Qum2gswqX
fki1K5/7/m537jdKyiBiG3c3GOyLq6KOx+MLyAAJJMJ6Ije4al3g9RWx9zSolXvn
GPPEyrs0e/+NAuLNU9dBQG9ifqU4Bv3kHofcN2asw5jco/TsTLaKeyNZJ50Z2s+T
ZSCjByIR9XwKH8oc4e1/TGZc1QDrTjFnZAg6BA/mIbQW4OUBRLx/EkQfm7yrIm08
S4HWhbp+Z0VzEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:00 2026 by rpki-client