Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: 3cvrdOYNl5C5F/EqQ/41lfRgtAKNmLE0QQO2ag5pAvA=
Subject key identifier: 4F:A8:90:DE:85:B6:17:99:33:67:F8:CD:9C:CB:47:8E:FE:6A:1B:E0
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019EC17FE45B5DBFDEAD6D08772279575532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1967
Signing time: Sat 13 Jun 2026 15:00:44 +0000
Manifest this update: Sat 13 Jun 2026 15:00:44 +0000
Manifest next update: Sun 14 Jun 2026 15:00:44 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: GtvACZH8IkYIJoWfDi3EMPvqU4DrMXYr9c5TQ6YPQ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:e4:5b:5d:bf:de:ad:6d:08:77:22:79:57:55:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jun 13 15:00:44 2026 GMT
Not After : Jun 14 15:00:44 2026 GMT
Subject: CN=4fa890de85b617993367f8cd9ccb478efe6a1be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:3a:f3:9c:6f:16:b5:88:d2:8e:89:34:41:
4f:29:f2:ec:ef:c2:7d:3d:3c:dd:95:b0:9a:5a:ac:
38:4b:cd:ed:07:b2:81:fa:5a:fa:c3:9c:81:9f:d5:
b2:01:b3:7b:b4:28:22:29:fe:d0:8f:b1:ba:fd:ca:
3f:60:9b:b4:67:65:a3:85:a4:64:6a:9c:53:68:ab:
d0:78:f5:98:97:42:ad:e4:49:e2:71:53:b2:a7:6f:
e3:5e:7e:3d:66:89:d0:33:a0:3d:0a:2e:19:c8:91:
fa:d8:fe:25:d9:8b:2c:18:68:9b:d6:b7:60:d5:7c:
08:d3:be:ea:d6:4e:2d:29:45:ec:f5:1d:e2:b6:25:
8e:88:c9:c6:97:7e:bf:90:42:5c:5b:04:0f:d5:76:
8f:77:46:11:92:c5:f1:49:5e:58:58:0b:7b:44:6f:
26:ed:f8:68:a8:42:1d:20:de:66:f8:ee:36:a1:c9:
a3:3d:20:d8:5f:7b:c2:b2:4b:41:9a:8e:e6:4a:69:
42:68:3b:a2:25:41:89:4f:bc:cc:40:f3:5e:7f:67:
23:64:65:dd:50:42:fa:77:b1:56:c4:7d:d8:9e:8d:
03:83:36:ce:00:90:d6:44:96:b3:d3:f0:8e:20:c8:
f9:f4:7f:08:c1:33:aa:f9:64:4b:4a:69:76:6c:50:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:90:DE:85:B6:17:99:33:67:F8:CD:9C:CB:47:8E:FE:6A:1B:E0
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:49:16:34:d5:32:27:ce:2a:a7:52:8b:ab:73:e5:4d:a7:
ef:54:32:00:ac:0d:f6:76:b2:af:50:27:64:ca:65:0d:ca:1d:
72:14:b4:24:4c:40:3d:47:1c:76:24:70:e7:47:58:48:2b:24:
56:10:80:07:e9:89:14:12:29:79:8d:0a:fe:6d:fe:b7:24:76:
4e:2f:60:92:71:ff:fc:f0:0b:56:ed:bf:47:67:88:f3:30:52:
89:d7:f2:45:29:a3:33:35:d2:8e:dd:fc:a5:20:c2:09:70:d9:
d6:36:f8:df:2b:52:6f:d1:4a:24:ac:e0:e4:69:04:e7:c3:63:
26:1d:ad:6e:72:55:d1:31:98:86:99:e2:88:06:b3:fd:ee:64:
1b:bd:2f:c1:64:4a:14:2d:01:3e:3f:5b:a0:26:b1:e9:89:e1:
3e:ef:ec:8c:23:35:29:c5:9e:3e:70:8d:8a:88:e2:ee:a3:09:
aa:46:13:89:8a:22:0b:4e:b0:b6:f1:ee:04:14:33:ec:a6:6a:
94:0e:41:06:65:d4:1e:09:72:89:4e:01:75:77:59:af:4e:b0:
c0:74:b9:67:c0:c8:66:fa:fb:5a:f3:89:58:b2:cb:23:ba:fb:
4d:44:4c:47:e5:79:cc:83:99:dd:a3:64:95:89:f5:6c:c2:f5:
e2:39:ae:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf+RbXb/erW0IdyJ5V1UyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjYwNjEzMTUwMDQ0WhcNMjYwNjE0MTUwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZmE4OTBkZTg1YjYxNzk5MzM2N2Y4Y2Q5Y2NiNDc4ZWZlNmExYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdo685xvFrWI0o6JNEFPKfLs78J9
PTzdlbCaWqw4S83tB7KB+lr6w5yBn9WyAbN7tCgiKf7Qj7G6/co/YJu0Z2WjhaRk
apxTaKvQePWYl0Kt5EnicVOyp2/jXn49ZonQM6A9Ci4ZyJH62P4l2YssGGib1rdg
1XwI077q1k4tKUXs9R3itiWOiMnGl36/kEJcWwQP1XaPd0YRksXxSV5YWAt7RG8m
7fhoqEIdIN5m+O42ocmjPSDYX3vCsktBmo7mSmlCaDuiJUGJT7zMQPNef2cjZGXd
UEL6d7FWxH3Yno0DgzbOAJDWRJaz0/COIMj59H8IwTOq+WRLSml2bFDPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+okN6FtheZM2f4zZzLR47+ahvgMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICRJFjTV
MifOKqdSi6tz5U2n71QyAKwN9nayr1AnZMplDcodchS0JExAPUccdiRw50dYSCsk
VhCAB+mJFBIpeY0K/m3+tyR2Ti9gknH//PALVu2/R2eI8zBSidfyRSmjMzXSjt38
pSDCCXDZ1jb43ytSb9FKJKzg5GkE58NjJh2tbnJV0TGYhpniiAaz/e5kG70vwWRK
FC0BPj9boCax6YnhPu/sjCM1KcWePnCNioji7qMJqkYTiYoiC06wtvHuBBQz7KZq
lA5BBmXUHglyiU4BdXdZr06wwHS5Z8DIZvr7WvOJWLLLI7r7TURMR+V5zIOZ3aNk
lYn1bML14jmuLg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:08 2026 by rpki-client