Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: QeIle4wwEpASrxppOl9NTetQku9FJJWH7ziYU+0X4U4=
Subject key identifier: 08:AD:03:96:FD:88:38:50:53:C3:E3:14:6C:31:F2:9B:C9:98:04:36
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019EC3A563C8FBC3D5D1CFB563CD42693285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 195F
Signing time: Sun 14 Jun 2026 01:00:56 +0000
Manifest this update: Sun 14 Jun 2026 01:00:56 +0000
Manifest next update: Mon 15 Jun 2026 01:00:56 +0000
Files and hashes: 1: 07lXNimrQBF3__ddGT3TZzLhskg.roa (hash: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw=)
2: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (hash: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY=)
3: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: 4Z/ya7RCFuLeZNpuBfBNaVSjx83LkiaUVxibf1f7q7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:63:c8:fb:c3:d5:d1:cf:b5:63:cd:42:69:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jun 14 01:00:56 2026 GMT
Not After : Jun 15 01:00:56 2026 GMT
Subject: CN=08ad0396fd88385053c3e3146c31f29bc9980436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:ab:f6:5f:8e:8c:46:d8:c4:3f:db:89:57:
c3:4d:33:ee:1a:bb:15:f3:98:12:6f:33:26:da:1e:
dc:ee:a2:10:e7:7f:46:83:20:f1:7e:05:78:24:89:
76:51:69:48:ba:ae:91:b4:6c:04:66:ac:e5:3f:47:
b6:44:75:94:e6:88:76:14:7a:94:9d:06:1b:8d:5d:
30:9d:2c:fc:0b:98:80:0b:d4:0f:f4:54:32:a1:71:
09:09:ba:0f:35:d1:10:27:36:ef:48:2e:58:78:24:
fc:96:26:fd:59:02:10:13:08:6c:0e:b0:9a:78:b2:
1b:f0:1e:a1:72:28:32:ce:ab:a5:79:cd:f8:62:10:
ef:76:aa:b1:72:76:e6:75:7e:b4:8b:13:73:a4:51:
b6:70:8f:13:37:12:d1:52:5d:33:f8:0e:a9:a1:41:
b2:20:e5:17:13:52:13:bd:92:79:65:f0:9f:6e:db:
3c:59:3c:a1:ed:f7:63:c2:02:c8:5c:1c:f8:01:f5:
f0:a5:3a:b3:29:e1:de:ac:88:74:cd:5c:fa:1c:c3:
a3:94:5e:7a:86:9a:d6:68:1f:50:50:b9:2e:79:d5:
d9:cf:26:d8:1f:5d:fe:62:f6:6f:a4:2f:79:7f:13:
f2:5e:b9:1f:eb:56:80:12:b6:31:8e:c4:ba:2b:29:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:03:96:FD:88:38:50:53:C3:E3:14:6C:31:F2:9B:C9:98:04:36
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ae:19:ea:60:45:60:c0:eb:9b:65:a7:0b:ba:1b:52:a8:2c:
5e:e0:29:8d:51:29:2f:f1:95:a7:07:43:44:bf:22:eb:fc:fd:
32:b6:5f:73:f6:ff:cc:20:50:bd:d5:8f:f9:56:1c:77:4b:f6:
ce:17:2b:34:a7:65:12:a9:2a:1b:ab:f0:a9:78:52:63:0a:a3:
7d:09:93:d0:3e:a8:57:d7:ae:c9:fd:7a:76:62:29:89:7f:35:
aa:b6:26:fb:d6:b2:88:e7:0a:5f:59:79:bc:df:20:6a:c6:19:
1a:7f:32:86:b9:0a:1d:dc:4e:42:ac:4f:a9:2b:28:58:d3:61:
21:51:78:21:0d:3b:64:c2:9e:84:f8:d1:95:cb:34:b3:f1:14:
49:55:eb:48:90:f4:e1:eb:3b:f0:9a:a6:b8:56:bc:4c:f5:e6:
b7:98:93:ba:d1:f6:b8:d1:5c:4f:a4:21:aa:21:3d:4e:bd:2c:
0e:47:a6:bd:d8:f6:a0:2f:7a:49:23:f3:4a:88:fe:e5:e0:c3:
d7:06:78:85:b2:8a:aa:4b:8b:b3:e1:bb:55:2d:f5:f1:e5:f7:
90:41:aa:46:99:da:ab:7f:55:05:6a:7b:4e:ca:4b:1f:02:57:
e1:5b:51:27:5b:f8:6b:54:91:c8:1c:23:d3:c9:e7:02:5e:e1:
e0:50:0d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpWPI+8PV0c+1Y81CaTKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy
MDg0NTcwHhcNMjYwNjE0MDEwMDU2WhcNMjYwNjE1MDEwMDU2WjAzMTEwLwYDVQQD
EygwOGFkMDM5NmZkODgzODUwNTNjM2UzMTQ2YzMxZjI5YmM5OTgwNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Gr9l+OjEbYxD/biVfDTTPuGrsV
85gSbzMm2h7c7qIQ539GgyDxfgV4JIl2UWlIuq6RtGwEZqzlP0e2RHWU5oh2FHqU
nQYbjV0wnSz8C5iAC9QP9FQyoXEJCboPNdEQJzbvSC5YeCT8lib9WQIQEwhsDrCa
eLIb8B6hcigyzqulec34YhDvdqqxcnbmdX60ixNzpFG2cI8TNxLRUl0z+A6poUGy
IOUXE1ITvZJ5ZfCfbts8WTyh7fdjwgLIXBz4AfXwpTqzKeHerIh0zVz6HMOjlF56
hprWaB9QULkuedXZzybYH13+YvZvpC95fxPyXrkf61aAErYxjsS6Kyk3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAitA5b9iDhQU8PjFGwx8pvJmAQ2MB8GA1UdIwQY
MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK4Z6mBF
YMDrm2WnC7obUqgsXuApjVEpL/GVpwdDRL8i6/z9MrZfc/b/zCBQvdWP+VYcd0v2
zhcrNKdlEqkqG6vwqXhSYwqjfQmT0D6oV9euyf16dmIpiX81qrYm+9ayiOcKX1l5
vN8gasYZGn8yhrkKHdxOQqxPqSsoWNNhIVF4IQ07ZMKehPjRlcs0s/EUSVXrSJD0
4es78JqmuFa8TPXmt5iTutH2uNFcT6QhqiE9Tr0sDkemvdj2oC96SSPzSoj+5eDD
1wZ4hbKKqkuLs+G7VS318eX3kEGqRpnaq39VBWp7TspLHwJX4VtRJ1v4a1SRyBwj
08nnAl7h4FANjg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:20 2026 by rpki-client