Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: 6q6f2X4TLvdg9l9dkgUtEoGuKS3kq4VcNfl9x/TwUic=
Subject key identifier: 09:08:22:63:24:E3:8A:9D:DC:C7:E2:34:02:5C:AD:11:06:69:74:0F
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019ED499CB11ACC5A939E6268540A4EEB20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 07F4
Signing time: Wed 17 Jun 2026 08:01:49 +0000
Manifest this update: Wed 17 Jun 2026 08:01:49 +0000
Manifest next update: Thu 18 Jun 2026 08:01:49 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: xGcIKvtq69v95O0GLhYbtfa1btIh0yyHJpeefheITck=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:cb:11:ac:c5:a9:39:e6:26:85:40:a4:ee:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jun 17 08:01:49 2026 GMT
Not After : Jun 18 08:01:49 2026 GMT
Subject: CN=0908226324e38a9ddcc7e234025cad110669740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:39:a6:3a:7b:e7:2f:88:58:fe:3e:48:72:
9b:88:88:dd:9c:ba:26:6e:2b:bf:3b:03:a4:54:b8:
50:c9:45:b5:cb:8f:be:30:fe:76:bc:3e:08:f4:1d:
d0:9e:05:7f:82:3a:2d:b8:8e:af:73:5c:85:a5:11:
73:d1:7c:65:56:70:b0:d6:51:5e:74:96:ce:b6:c4:
5f:85:c9:8d:78:68:c7:a6:61:97:3f:87:a4:05:70:
ac:44:3c:6d:16:b3:11:ff:46:36:99:bb:cf:b8:a8:
1f:a1:8b:a0:16:15:b1:c4:8c:72:17:f4:8a:b2:93:
76:df:1c:23:ad:fa:c6:a7:e8:41:90:24:27:5a:95:
45:fa:46:f8:78:33:9d:a8:4d:e4:a7:96:e8:11:6b:
74:fc:31:41:10:12:68:c4:6e:cb:e9:15:cc:af:9a:
ca:74:7d:7f:70:1f:4e:91:05:45:e5:7b:fe:ea:54:
f0:00:d2:f4:d2:d8:2b:df:a1:a5:02:57:2c:60:29:
49:40:25:79:0b:e8:e7:06:1a:74:d9:5c:20:61:5d:
03:4d:20:8a:7d:47:0c:63:fe:3c:76:57:84:84:4d:
3d:ca:d8:13:a9:2b:4e:80:0a:e8:30:eb:b9:21:9f:
58:57:4d:ff:cc:b3:69:54:8b:f3:c2:da:20:20:c3:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:22:63:24:E3:8A:9D:DC:C7:E2:34:02:5C:AD:11:06:69:74:0F
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d3:a5:aa:aa:13:ec:dc:9a:fa:68:6f:57:79:87:3c:15:2d:
ed:41:f2:0d:7c:ee:a4:90:65:3f:56:95:c4:0a:19:68:f9:3d:
17:7c:67:d9:2a:11:ed:fb:2d:ea:b6:a4:22:fc:90:2e:1f:18:
7f:a5:54:2c:9e:e7:1d:08:6f:84:fd:87:13:f6:a5:a5:68:de:
56:14:52:20:b3:13:99:e7:fb:37:d7:62:8a:f7:98:7d:69:cf:
81:9b:37:58:2f:18:ac:fd:8d:af:a7:d3:b1:90:6a:fb:32:b5:
d3:e0:a5:ac:af:1d:e8:e0:7c:e7:b4:d2:fd:d8:e9:6f:8e:47:
56:18:46:13:6c:ff:a4:52:ab:cd:01:21:76:85:3c:16:ae:a3:
a0:fe:38:e1:0a:97:52:5a:8c:97:cb:3d:df:0a:c9:9d:d8:94:
62:1e:d8:c7:b8:60:b1:70:88:56:99:25:1e:1e:b0:63:13:c6:
50:69:c0:ee:45:36:5f:4b:2e:98:d3:02:68:30:5c:f2:df:af:
88:23:6d:d8:29:fd:a0:40:4b:6b:72:b8:b6:91:87:07:11:ad:
a7:eb:64:44:d3:b7:29:83:75:98:27:92:f0:b2:89:84:14:61:
b3:4a:94:90:40:27:12:f1:8c:b3:b7:5c:b9:73:97:2c:00:12:
d5:67:af:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UmcsRrMWpOeYmhUCk7rIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjYwNjE3MDgwMTQ5WhcNMjYwNjE4MDgwMTQ5WjAzMTEwLwYDVQQD
EygwOTA4MjI2MzI0ZTM4YTlkZGNjN2UyMzQwMjVjYWQxMTA2Njk3NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3E5pjp75y+IWP4+SHKbiIjdnLom
biu/OwOkVLhQyUW1y4++MP52vD4I9B3QngV/gjotuI6vc1yFpRFz0XxlVnCw1lFe
dJbOtsRfhcmNeGjHpmGXP4ekBXCsRDxtFrMR/0Y2mbvPuKgfoYugFhWxxIxyF/SK
spN23xwjrfrGp+hBkCQnWpVF+kb4eDOdqE3kp5boEWt0/DFBEBJoxG7L6RXMr5rK
dH1/cB9OkQVF5Xv+6lTwANL00tgr36GlAlcsYClJQCV5C+jnBhp02VwgYV0DTSCK
fUcMY/48dleEhE09ytgTqStOgAroMOu5IZ9YV03/zLNpVIvzwtogIMP82QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkIImMk44qd3MfiNAJcrREGaXQPMB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw
LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9OlqqoT
7Nya+mhvV3mHPBUt7UHyDXzupJBlP1aVxAoZaPk9F3xn2SoR7fst6rakIvyQLh8Y
f6VULJ7nHQhvhP2HE/alpWjeVhRSILMTmef7N9diiveYfWnPgZs3WC8YrP2Nr6fT
sZBq+zK10+ClrK8d6OB857TS/djpb45HVhhGE2z/pFKrzQEhdoU8Fq6joP444QqX
UlqMl8s93wrJndiUYh7Yx7hgsXCIVpklHh6wYxPGUGnA7kU2X0sumNMCaDBc8t+v
iCNt2Cn9oEBLa3K4tpGHBxGtp+tkRNO3KYN1mCeS8LKJhBRhs0qUkEAnEvGMs7dc
uXOXLAAS1Wev7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:19 2026 by rpki-client