Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: FeXEDlZY4ySLWRvxzesVGljs3WCR4wam6DFFEcPeZhc=
Subject key identifier: CD:CE:0B:9C:D8:D6:0F:0E:D7:08:9B:C2:45:C4:F5:08:D6:9A:65:9A
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019EBFFF1803AA8993C1802FAE08D0E26B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 08:00:26 +0000
Manifest this update: Sat 13 Jun 2026 08:00:26 +0000
Manifest next update: Sun 14 Jun 2026 08:00:26 +0000
Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: x8yoyd2dxK9IJhmqntG66iFdQPnp4OyAs+ebK0VnrPE=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:18:03:aa:89:93:c1:80:2f:ae:08:d0:e2:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jun 13 08:00:26 2026 GMT
Not After : Jun 14 08:00:26 2026 GMT
Subject: CN=cdce0b9cd8d60f0ed7089bc245c4f508d69a659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:c3:fe:62:06:52:9c:6b:6d:ab:20:23:f2:
82:85:02:91:a9:7a:88:57:99:1d:38:d0:48:63:50:
09:8e:50:09:5a:8d:b8:6e:22:bd:e2:6f:e2:4b:fc:
21:e0:fd:08:76:84:9b:d0:53:b3:e5:f2:c9:e0:6f:
87:21:96:42:ce:a0:0b:aa:f7:9e:53:a3:03:91:e9:
25:5b:1f:09:1c:b6:e1:ab:15:02:5f:61:b8:67:c4:
ae:ed:78:cf:35:09:8b:e2:76:dc:94:a0:7f:f3:2c:
c5:85:5f:23:bc:c7:11:20:a1:0d:92:e0:32:3b:20:
f6:39:d9:2f:f5:f8:52:83:fe:bf:03:23:c7:3f:7c:
fa:09:12:1d:1f:79:2d:02:5e:31:7b:dc:78:69:17:
5f:65:a6:c1:ff:fb:b5:56:a6:50:a3:b7:47:db:57:
2e:b3:3a:fa:2b:60:f3:cc:38:fd:22:3a:a8:09:f2:
6f:d3:17:3c:1a:49:11:b6:16:83:bb:dd:45:d2:58:
19:d9:9e:35:16:00:03:b6:10:a8:a2:c0:9f:cb:c9:
3c:6d:a8:10:ca:73:22:91:52:36:a3:16:9d:9a:84:
40:78:1d:52:8a:46:b1:6d:42:28:27:7d:ff:53:bf:
db:29:87:ae:18:5a:6b:d0:20:ff:d5:3d:27:57:62:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:0B:9C:D8:D6:0F:0E:D7:08:9B:C2:45:C4:F5:08:D6:9A:65:9A
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:9b:6f:98:a7:d7:e7:ef:78:1b:96:da:d9:58:ec:78:7b:
3f:bf:0d:89:50:06:f3:47:a3:0d:f5:7a:19:22:e4:35:66:07:
86:50:48:da:ef:26:e7:97:94:40:89:ed:d6:8a:cd:d3:bc:8a:
1e:d8:6a:0d:79:20:30:90:99:00:2f:b5:ba:a8:36:a0:14:3d:
06:2c:02:ab:85:3d:d6:63:2f:7d:93:6d:d4:b5:fe:f7:0c:d5:
ab:3d:19:67:2a:b8:45:69:1a:79:00:e3:da:b6:ba:21:58:9e:
a0:17:a9:65:97:6e:ca:ba:cc:1e:d9:af:3d:32:38:56:71:43:
56:ce:da:e2:b6:89:cd:9d:ac:68:2a:22:2a:60:3f:5e:9a:dd:
23:4f:3c:bf:b6:4d:74:c8:bb:a9:de:65:eb:70:84:06:68:cb:
1f:a3:de:23:52:6d:45:e6:7c:19:d6:26:51:aa:1c:ef:9d:c0:
9e:75:f0:76:5a:fc:c7:f2:a0:76:67:f0:ec:f8:22:72:69:51:
47:52:f2:fe:d1:5a:6f:c3:0e:01:b0:f3:e8:39:fd:bd:3a:91:
d6:77:f9:b8:4e:fc:2c:27:d8:9e:c5:a0:4b:c0:c3:f7:65:65:
7f:e4:dd:dc:99:45:f8:e1:aa:21:dc:e4:fd:f8:39:7c:69:84:
ad:74:87:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//xgDqomTwYAvrgjQ4muPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjYwNjEzMDgwMDI2WhcNMjYwNjE0MDgwMDI2WjAzMTEwLwYDVQQD
EyhjZGNlMGI5Y2Q4ZDYwZjBlZDcwODliYzI0NWM0ZjUwOGQ2OWE2NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklPD/mIGUpxrbasgI/KChQKRqXqI
V5kdONBIY1AJjlAJWo24biK94m/iS/wh4P0IdoSb0FOz5fLJ4G+HIZZCzqALqvee
U6MDkeklWx8JHLbhqxUCX2G4Z8Su7XjPNQmL4nbclKB/8yzFhV8jvMcRIKENkuAy
OyD2Odkv9fhSg/6/AyPHP3z6CRIdH3ktAl4xe9x4aRdfZabB//u1VqZQo7dH21cu
szr6K2DzzDj9IjqoCfJv0xc8GkkRthaDu91F0lgZ2Z41FgADthCoosCfy8k8bagQ
ynMikVI2oxadmoRAeB1SikaxbUIoJ33/U7/bKYeuGFpr0CD/1T0nV2JzfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3OC5zY1g8O1wibwkXE9QjWmmWaMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9Wbb5in
1+fveBuW2tlY7Hh7P78NiVAG80ejDfV6GSLkNWYHhlBI2u8m55eUQInt1orN07yK
HthqDXkgMJCZAC+1uqg2oBQ9BiwCq4U91mMvfZNt1LX+9wzVqz0ZZyq4RWkaeQDj
2ra6IVieoBepZZduyrrMHtmvPTI4VnFDVs7a4raJzZ2saCoiKmA/XprdI088v7ZN
dMi7qd5l63CEBmjLH6PeI1JtReZ8GdYmUaoc753AnnXwdlr8x/Kgdmfw7PgicmlR
R1Ly/tFab8MOAbDz6Dn9vTqR1nf5uE78LCfYnsWgS8DD92Vlf+Td3JlF+OGqIdzk
/fg5fGmErXSH+g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:51:21 2026 by rpki-client