Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: 6UEZi7F+wN+InnkI22zW8AEwT6bjsdruTQ6Hkn4uDo0=
Subject key identifier: CA:F3:51:0E:0F:3D:45:29:74:DA:29:48:E9:34:89:FF:C9:FC:97:D0
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019EC1488829631834C04E21A51A84294577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 14:00:16 +0000
Manifest this update: Sat 13 Jun 2026 14:00:16 +0000
Manifest next update: Sun 14 Jun 2026 14:00:16 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: 5o/10VJPvzaVvugKe3SDeLQ4gFLVsthLAqW6nG+wZC4=)
2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:88:29:63:18:34:c0:4e:21:a5:1a:84:29:45:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Jun 13 14:00:16 2026 GMT
Not After : Jun 14 14:00:16 2026 GMT
Subject: CN=caf3510e0f3d452974da2948e93489ffc9fc97d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:d2:06:b9:b6:92:28:64:3a:8f:8f:75:30:
54:aa:56:ed:31:b3:fa:31:dc:60:26:13:77:0e:5c:
85:24:b5:db:a0:35:2f:c3:88:9a:f1:fd:80:ed:fa:
ab:24:4c:23:00:5d:66:88:fc:44:a9:1d:52:f5:30:
bc:61:5d:fa:fc:de:4d:a4:ee:c7:91:ac:99:6c:8d:
02:9b:21:e3:08:22:b5:06:56:97:3e:9e:71:5e:43:
29:8d:ec:6b:ed:16:e4:b0:f4:2d:74:2d:99:03:c2:
f6:0f:af:7e:c8:8d:9e:e0:e6:ea:03:77:26:40:68:
81:51:a3:91:df:ce:75:4f:ae:5b:aa:89:c5:ba:d2:
5c:7d:7f:07:40:cf:f2:b5:32:17:56:8f:c8:47:88:
22:ec:90:0f:0a:74:4b:0f:2e:a0:68:85:af:5c:27:
9f:21:e4:5e:f8:ad:63:11:93:d2:c2:03:66:5b:c1:
a9:86:82:c9:65:a4:9f:e1:64:27:b9:17:d5:35:94:
a3:88:4e:20:d7:42:de:7e:ef:59:ba:a4:0a:91:27:
f3:af:72:f8:46:9f:f9:9b:bb:b5:d0:87:ca:0c:b6:
e4:b8:a6:eb:2a:a8:f8:52:b8:d7:46:25:a0:86:9a:
a4:30:e5:62:43:36:09:d8:1d:33:1f:d9:5f:f9:65:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:51:0E:0F:3D:45:29:74:DA:29:48:E9:34:89:FF:C9:FC:97:D0
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:70:7c:cb:ef:df:fd:e0:e3:c4:65:84:11:35:da:74:2a:a3:
d3:73:08:69:94:b9:8e:68:b4:ef:d2:28:cc:36:de:08:a3:97:
7d:a9:ca:bb:df:49:bc:06:8b:12:66:d5:46:74:1f:b5:40:13:
d8:c1:aa:00:9a:44:65:18:60:cc:3e:56:41:5b:3a:aa:6c:da:
8f:10:8c:21:fc:de:5a:5e:ad:08:d7:f8:20:1f:62:13:ed:53:
d8:87:cb:ac:e5:56:fb:39:f4:75:32:6b:ca:7c:ed:39:c3:0c:
04:fd:03:f5:c5:76:7b:d8:34:3e:29:fb:a6:48:3d:ce:8b:33:
cf:f7:00:2d:c3:8e:6d:06:b1:0a:eb:b1:ae:49:12:93:4a:08:
1a:b8:6e:03:4e:01:99:dd:62:d5:dc:e8:97:85:ce:bb:57:db:
73:fe:3a:67:41:2c:8b:01:4b:02:34:e1:ae:ce:c2:7c:c6:8c:
f7:91:cd:55:4c:92:92:1e:5e:62:4c:fa:7a:f3:fd:65:f9:02:
c6:5b:4a:ec:49:48:ed:f0:5f:33:c5:11:2f:46:e1:5d:2c:e7:
f1:74:c9:0d:72:34:d3:ab:67:a6:92:59:db:f3:f7:9a:4d:79:
1e:dc:99:4f:25:54:e3:ec:6c:80:f2:9b:c2:fb:93:56:68:ce:
8f:e9:15:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSIgpYxg0wE4hpRqEKUV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzM0M2Y3Y2M2YzIzN2RhM2Y4YjgxMTM4YzA1MWQ4Zjkz
YzljNGQwHhcNMjYwNjEzMTQwMDE2WhcNMjYwNjE0MTQwMDE2WjAzMTEwLwYDVQQD
EyhjYWYzNTEwZTBmM2Q0NTI5NzRkYTI5NDhlOTM0ODlmZmM5ZmM5N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKvSBrm2kihkOo+PdTBUqlbtMbP6
MdxgJhN3DlyFJLXboDUvw4ia8f2A7fqrJEwjAF1miPxEqR1S9TC8YV36/N5NpO7H
kayZbI0CmyHjCCK1BlaXPp5xXkMpjexr7RbksPQtdC2ZA8L2D69+yI2e4ObqA3cm
QGiBUaOR3851T65bqonFutJcfX8HQM/ytTIXVo/IR4gi7JAPCnRLDy6gaIWvXCef
IeRe+K1jEZPSwgNmW8GphoLJZaSf4WQnuRfVNZSjiE4g10Lefu9ZuqQKkSfzr3L4
Rp/5m7u10IfKDLbkuKbrKqj4UrjXRiWghpqkMOViQzYJ2B0zH9lf+WX2TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrzUQ4PPUUpdNopSOk0if/J/JfQMB8GA1UdIwQY
MBaAFNYzQ/fMbCN9o/i4ETjAUdj5PJxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEt
NTMxODBlZWM1NmZiLzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEtNTMxODBlZWM1NmZi
LzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHB8y+/f
/eDjxGWEETXadCqj03MIaZS5jmi079IozDbeCKOXfanKu99JvAaLEmbVRnQftUAT
2MGqAJpEZRhgzD5WQVs6qmzajxCMIfzeWl6tCNf4IB9iE+1T2IfLrOVW+zn0dTJr
ynztOcMMBP0D9cV2e9g0Pin7pkg9zoszz/cALcOObQaxCuuxrkkSk0oIGrhuA04B
md1i1dzol4XOu1fbc/46Z0EsiwFLAjThrs7CfMaM95HNVUySkh5eYkz6evP9ZfkC
xltK7ElI7fBfM8URL0bhXSzn8XTJDXI006tnppJZ2/P3mk15HtyZTyVU4+xsgPKb
wvuTVmjOj+kVWA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:49 2026 by rpki-client