Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: W+oHjEScAdQeGAmlX7ROMgibbDQdqG2yYmSNAE7oj+g=
Subject key identifier: F8:69:FD:8D:37:0A:84:64:EF:EC:30:91:CE:50:D9:7C:ED:B6:8A:D4
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019EBEB64BB4BAF70C1C6505BFC270DE6C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 0124
Signing time: Sat 13 Jun 2026 02:01:18 +0000
Manifest this update: Sat 13 Jun 2026 02:01:18 +0000
Manifest next update: Sun 14 Jun 2026 02:01:18 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: ihlaTjkxb3Qjmu6RZM00lorGZv1NIeYj0Y0tVrWIoG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:4b:b4:ba:f7:0c:1c:65:05:bf:c2:70:de:6c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Jun 13 02:01:18 2026 GMT
Not After : Jun 14 02:01:18 2026 GMT
Subject: CN=f869fd8d370a8464efec3091ce50d97cedb68ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7d:a7:fa:d5:c4:38:5e:d9:4c:bf:59:d1:03:
5a:d5:0c:de:dd:5e:e0:be:4e:26:01:7a:8f:93:e4:
97:df:b2:62:8d:18:bd:c9:17:7b:b9:74:b2:78:5d:
84:9f:80:66:fd:ff:81:85:16:93:b5:5f:a5:da:3b:
ba:31:88:e9:9e:71:40:43:e3:ed:37:7e:29:5f:f3:
f1:92:74:ac:c1:ac:9c:ff:9c:1e:7b:24:3f:8b:84:
a5:cf:97:c7:f5:b5:a0:c2:5d:58:47:21:7c:70:c4:
95:6b:e0:e3:77:2f:fa:da:d2:1e:1f:13:65:8a:0a:
f8:7f:a3:dc:6a:41:b8:b1:e6:eb:de:c5:7f:3c:0d:
f9:30:ea:4b:a5:f1:ca:70:21:2d:6c:6a:a8:9e:13:
58:2b:36:75:67:4a:53:27:86:11:e6:01:7e:9a:8e:
64:d5:9b:9e:ba:56:14:25:00:04:1e:3f:25:9b:9b:
42:69:e4:e0:70:f2:f2:1c:0a:5c:4a:d6:8b:cb:80:
8e:38:66:b2:ba:c4:9d:8b:a0:29:a2:38:6a:bb:21:
0d:86:42:8a:90:bd:0e:a7:f1:28:32:d3:ec:34:1c:
3b:81:0a:bd:fb:8e:4c:ca:31:bc:7b:9d:93:d5:8b:
d0:5f:db:d6:21:f7:cd:b2:c5:ca:a5:1d:c9:94:c7:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:FD:8D:37:0A:84:64:EF:EC:30:91:CE:50:D9:7C:ED:B6:8A:D4
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:fa:96:3d:9c:ef:1c:eb:39:59:1c:34:22:29:0f:c4:4c:
e2:4d:94:f7:14:11:74:e5:df:61:e4:60:9c:43:c5:7c:a8:f5:
0c:76:67:11:2f:67:07:74:b4:05:ab:07:5f:dc:65:3a:66:db:
1a:97:bf:1e:fc:01:ce:98:45:bd:87:9e:f6:61:6e:e8:dc:39:
9e:39:17:16:b3:9f:c5:27:c6:f3:44:76:2a:6e:e5:be:31:bb:
fd:e7:ac:84:2c:33:8b:ae:d6:b6:23:96:97:47:2c:d2:49:d5:
d5:31:97:da:dc:b5:88:40:c2:6c:f4:ae:95:82:fa:e1:da:1e:
b6:52:bf:36:52:a1:0e:2f:84:3e:c4:2c:4e:71:7f:48:05:ac:
33:f3:3d:4f:d1:c3:79:02:c7:16:b4:19:dd:e7:0c:6c:c4:f6:
e6:5e:b2:d9:87:6c:af:27:c5:8f:32:ce:85:fb:28:aa:e3:da:
12:f8:88:bb:3f:4e:4e:92:e2:31:ae:4f:27:51:79:2e:a4:c2:
af:7f:80:5f:12:c8:27:b3:c6:29:2c:e7:af:ed:e0:62:b5:f8:
d2:69:09:53:91:76:f7:8f:81:ab:cd:fd:ae:32:35:ea:08:26:
b8:db:19:d5:37:eb:6c:57:cd:36:32:60:5b:2b:da:41:c2:bc:
89:d1:45:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tku0uvcMHGUFv8Jw3mwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQwMTdjNmUxYzhmZmQ2Mzk3MmUwMjQ0OTA5ODQ3N2Rk
ZjE3ZGYwHhcNMjYwNjEzMDIwMTE4WhcNMjYwNjE0MDIwMTE4WjAzMTEwLwYDVQQD
EyhmODY5ZmQ4ZDM3MGE4NDY0ZWZlYzMwOTFjZTUwZDk3Y2VkYjY4YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA632n+tXEOF7ZTL9Z0QNa1Qze3V7g
vk4mAXqPk+SX37JijRi9yRd7uXSyeF2En4Bm/f+BhRaTtV+l2ju6MYjpnnFAQ+Pt
N34pX/PxknSswayc/5weeyQ/i4Slz5fH9bWgwl1YRyF8cMSVa+Djdy/62tIeHxNl
igr4f6PcakG4sebr3sV/PA35MOpLpfHKcCEtbGqonhNYKzZ1Z0pTJ4YR5gF+mo5k
1ZueulYUJQAEHj8lm5tCaeTgcPLyHApcStaLy4COOGayusSdi6ApojhquyENhkKK
kL0Op/EoMtPsNBw7gQq9+45MyjG8e52T1YvQX9vWIffNssXKpR3JlMdxKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhp/Y03CoRk7+wwkc5Q2XzttorUMB8GA1UdIwQY
MBaAFLQkAXxuHI/9Y5cuAkSQmEd93xffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUt
MzU1ZjI2ZmNhMTI4LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUtMzU1ZjI2ZmNhMTI4
LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaf6lj2c
7xzrOVkcNCIpD8RM4k2U9xQRdOXfYeRgnEPFfKj1DHZnES9nB3S0BasHX9xlOmbb
Gpe/HvwBzphFvYee9mFu6Nw5njkXFrOfxSfG80R2Km7lvjG7/eeshCwzi67WtiOW
l0cs0knV1TGX2ty1iEDCbPSulYL64doetlK/NlKhDi+EPsQsTnF/SAWsM/M9T9HD
eQLHFrQZ3ecMbMT25l6y2YdsryfFjzLOhfsoquPaEviIuz9OTpLiMa5PJ1F5LqTC
r3+AXxLIJ7PGKSznr+3gYrX40mkJU5F294+Bq839rjI16ggmuNsZ1TfrbFfNNjJg
WyvaQcK8idFF+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:20 2026 by rpki-client