Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: ovOcOpxXzCRqkMEY4oSf7pA60Q78ivHD9d1AfqLxfKY=
Subject key identifier: CE:C1:EE:CB:20:32:81:E1:DB:BB:E9:C1:12:DC:8C:31:17:4E:93:33
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019EC2929DCDB2B88CCCDEDA78AFB0A57C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 089C
Signing time: Sat 13 Jun 2026 20:00:48 +0000
Manifest this update: Sat 13 Jun 2026 20:00:48 +0000
Manifest next update: Sun 14 Jun 2026 20:00:48 +0000
Files and hashes: 1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: ch42rHZ8IO2+nBzwVBQzlckGpmPRd6AG/1YXl3vOG4o=)
2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:9d:cd:b2:b8:8c:cc:de:da:78:af:b0:a5:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jun 13 20:00:48 2026 GMT
Not After : Jun 14 20:00:48 2026 GMT
Subject: CN=cec1eecb203281e1dbbbe9c112dc8c31174e9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:90:c5:83:0a:c7:e4:5e:e5:0b:4e:f5:c4:
ef:14:84:6a:ea:f9:f6:96:65:29:9f:3e:00:36:9d:
29:31:83:79:79:0b:5f:50:ea:88:61:e3:3f:ec:2b:
4a:f2:99:90:c1:b4:cf:90:a0:d8:ce:7e:75:99:fc:
e7:0d:dd:8b:2d:2b:de:fc:e5:d6:77:71:5b:35:c3:
2a:41:0b:01:82:9c:28:41:e3:99:0c:63:fd:be:ee:
ef:8d:3c:ad:b1:e7:2f:08:e5:bc:52:4c:21:a9:0e:
80:1c:fe:03:86:4a:c6:78:52:9b:98:0f:65:27:2f:
51:93:13:d7:08:b6:48:09:6e:e8:2b:05:e0:78:24:
f3:b7:a3:a0:78:63:5a:71:f1:44:3d:9d:47:68:b4:
f6:0a:43:83:f2:ba:4e:e4:50:5f:fe:04:29:29:03:
28:91:be:d2:5c:2a:68:1a:59:48:ff:11:be:3a:48:
c0:f6:e5:96:00:94:ac:c0:96:aa:ee:dd:b3:5f:97:
85:e7:1d:a2:40:56:a6:d0:46:48:68:2e:6c:bc:ee:
72:97:0a:88:b6:8f:b1:32:bf:4e:21:de:76:67:34:
4f:78:20:b5:2b:2a:2e:f8:d5:84:ad:4a:e5:29:75:
77:c9:41:cb:a3:c0:a5:d6:83:69:e6:8e:b1:2e:a2:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:EE:CB:20:32:81:E1:DB:BB:E9:C1:12:DC:8C:31:17:4E:93:33
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0b:bc:43:54:8b:3d:dd:61:9a:30:25:81:9e:44:2e:10:0c:
69:d0:3e:c1:7b:22:96:24:e1:88:49:51:ae:b6:60:1c:52:c4:
b5:bc:b9:31:9f:a0:b0:c9:33:f6:15:2c:a6:40:e8:65:c7:14:
0c:25:35:88:76:a4:91:59:7e:55:aa:19:fe:c7:ff:18:83:b3:
29:ba:3b:ad:55:c9:f5:a6:12:ce:17:d0:be:6e:ea:92:23:85:
cb:73:a1:37:20:6c:fb:f3:0b:31:45:dc:31:d7:24:24:bd:6b:
ae:e8:ff:e3:78:5e:4a:5e:8c:9d:7e:12:d8:59:9e:d2:15:7d:
3c:db:73:af:b4:33:2b:32:43:18:8e:0c:aa:2f:48:45:64:1e:
e2:68:b7:db:52:e2:7c:d3:f8:6e:bd:15:d5:cc:77:89:bf:08:
d3:b1:8e:c2:93:dd:44:f9:d1:ad:f4:d6:2b:ad:8c:d6:f6:e4:
89:f0:04:54:43:50:36:8c:a5:94:27:16:f9:6d:99:24:5e:99:
69:f9:1c:0b:0c:db:81:85:66:ac:ba:a6:d1:b2:26:d1:37:1a:
7e:c5:96:36:98:05:f3:c4:14:77:7f:9a:2c:27:28:93:48:52:
57:fd:52:9b:26:af:b7:4d:a9:e6:9b:81:d4:84:ef:59:d7:ce:
74:2f:2c:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ckp3NsriMzN7aeK+wpXxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjYwNjEzMjAwMDQ4WhcNMjYwNjE0MjAwMDQ4WjAzMTEwLwYDVQQD
EyhjZWMxZWVjYjIwMzI4MWUxZGJiYmU5YzExMmRjOGMzMTE3NGU5MzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUSQxYMKx+Re5QtO9cTvFIRq6vn2
lmUpnz4ANp0pMYN5eQtfUOqIYeM/7CtK8pmQwbTPkKDYzn51mfznDd2LLSve/OXW
d3FbNcMqQQsBgpwoQeOZDGP9vu7vjTytsecvCOW8UkwhqQ6AHP4DhkrGeFKbmA9l
Jy9RkxPXCLZICW7oKwXgeCTzt6OgeGNacfFEPZ1HaLT2CkOD8rpO5FBf/gQpKQMo
kb7SXCpoGllI/xG+OkjA9uWWAJSswJaq7t2zX5eF5x2iQFam0EZIaC5svO5ylwqI
to+xMr9OId52ZzRPeCC1Kyou+NWErUrlKXV3yUHLo8Cl1oNp5o6xLqL5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7B7ssgMoHh27vpwRLcjDEXTpMzMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAu8Q1SL
Pd1hmjAlgZ5ELhAMadA+wXsiliThiElRrrZgHFLEtby5MZ+gsMkz9hUspkDoZccU
DCU1iHakkVl+VaoZ/sf/GIOzKbo7rVXJ9aYSzhfQvm7qkiOFy3OhNyBs+/MLMUXc
MdckJL1rruj/43heSl6MnX4S2Fme0hV9PNtzr7QzKzJDGI4Mqi9IRWQe4mi321Li
fNP4br0V1cx3ib8I07GOwpPdRPnRrfTWK62M1vbkifAEVENQNoyllCcW+W2ZJF6Z
afkcCwzbgYVmrLqm0bIm0TcafsWWNpgF88QUd3+aLCcok0hSV/1Smyavt02p5puB
1ITvWdfOdC8sYw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:22:49 2026 by rpki-client