Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: y1Q9BRwEH/x9fm1HJjsU3op9M+jeuDA06gZWc+rdL8U=
Subject key identifier: AF:3A:93:32:1A:F4:45:AC:BE:1A:1A:AC:55:D1:A7:AF:C7:17:73:E9
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019EC0DAE6D6887EE41D3E4102DB9B67404C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1567
Signing time: Sat 13 Jun 2026 12:00:31 +0000
Manifest this update: Sat 13 Jun 2026 12:00:31 +0000
Manifest next update: Sun 14 Jun 2026 12:00:31 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: FX4SeiAfVk1oJ3ZX0t___kVvznw.roa (hash: sXBIiV4q77E68XFfHYdEfXRYe3LlOJvfM3L5/gohbgE=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 5Ak7c5+7r/yjEJUMVMC705MqrhJS6bIQeiYvqNHkM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:e6:d6:88:7e:e4:1d:3e:41:02:db:9b:67:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jun 13 12:00:31 2026 GMT
Not After : Jun 14 12:00:31 2026 GMT
Subject: CN=af3a93321af445acbe1a1aac55d1a7afc71773e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:25:e6:0f:37:88:0d:bf:ab:58:22:23:58:
9e:c3:b6:49:29:5f:e0:b9:8c:1b:30:f1:4e:56:da:
63:1f:d8:b2:08:0c:8d:96:20:ee:a9:01:1e:4f:46:
c7:70:9f:82:21:89:57:55:e7:06:21:85:01:9c:1c:
8f:41:73:48:54:54:bc:b6:18:91:8f:e5:84:56:47:
fd:c6:7e:57:9d:3e:67:60:dd:c9:f0:34:c4:08:1a:
58:9f:da:82:7d:e9:2e:dd:91:9a:19:2b:b7:4c:1c:
d0:3a:37:0c:1e:22:76:34:63:d4:2b:b7:0e:72:73:
af:80:da:44:16:b9:1d:2d:88:0d:be:7a:de:aa:aa:
ff:a2:4f:31:fb:90:67:65:15:43:06:f2:14:39:2b:
90:81:9f:b2:57:f7:20:d5:9e:63:2d:a5:ac:f3:bf:
91:47:18:36:a4:4d:eb:2a:de:1b:dd:58:4a:5f:30:
7b:46:40:34:e7:82:3d:50:94:d7:04:68:fb:55:b4:
6f:67:62:25:ab:18:00:43:e0:66:22:e3:e7:6d:1f:
c5:99:34:ce:08:21:c9:d1:24:07:ad:b8:89:ec:77:
c6:15:cc:60:c8:d1:c1:6b:50:c1:54:d0:85:c8:fc:
c7:09:3c:e8:f7:9b:15:92:f6:dd:4b:df:6b:51:89:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:93:32:1A:F4:45:AC:BE:1A:1A:AC:55:D1:A7:AF:C7:17:73:E9
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:00:3b:8f:ae:42:a0:6e:da:36:06:23:72:38:e7:81:56:
8d:33:54:bb:43:9d:9c:41:53:2d:19:e9:e8:08:73:8b:a3:41:
43:93:98:fe:0d:7d:6c:8e:3c:5e:84:d9:48:be:d4:8d:f2:85:
0b:b5:c8:55:53:72:93:7f:aa:51:ef:c9:90:61:a0:39:a4:c7:
f8:e6:1a:cc:bd:47:90:c1:56:d4:cb:81:be:02:e7:60:44:5e:
e9:41:b1:12:1a:a2:d6:4c:60:f8:6c:1d:6e:da:78:00:1e:bf:
72:14:06:91:fb:37:e1:aa:ad:dd:a1:cb:3b:ae:d6:43:b8:9f:
8f:61:00:cc:c4:46:2b:10:f2:18:c7:d8:d4:57:70:8f:8c:b1:
b8:cd:a6:e3:ff:3f:49:44:f4:5d:ee:32:95:cf:8b:82:37:39:
17:eb:34:28:f1:db:f4:ce:9f:81:b0:f7:ce:2e:fc:4d:00:b6:
a1:e4:4b:cd:57:49:24:de:9e:db:e3:7e:47:c8:53:ad:bf:07:
42:e3:82:a4:91:83:0f:0d:a8:ab:33:e4:32:c6:d9:da:64:36:
c0:46:2c:03:83:45:3a:5e:49:72:72:7b:18:c1:1a:3c:bc:d4:
d0:7c:14:c9:07:00:fe:d5:41:59:a3:57:61:12:09:0e:8c:54:
64:37:29:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2ubWiH7kHT5BAtubZ0BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj
NjcwNzMwHhcNMjYwNjEzMTIwMDMxWhcNMjYwNjE0MTIwMDMxWjAzMTEwLwYDVQQD
EyhhZjNhOTMzMjFhZjQ0NWFjYmUxYTFhYWM1NWQxYTdhZmM3MTc3M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVkl5g83iA2/q1giI1iew7ZJKV/g
uYwbMPFOVtpjH9iyCAyNliDuqQEeT0bHcJ+CIYlXVecGIYUBnByPQXNIVFS8thiR
j+WEVkf9xn5XnT5nYN3J8DTECBpYn9qCfeku3ZGaGSu3TBzQOjcMHiJ2NGPUK7cO
cnOvgNpEFrkdLYgNvnreqqr/ok8x+5BnZRVDBvIUOSuQgZ+yV/cg1Z5jLaWs87+R
Rxg2pE3rKt4b3VhKXzB7RkA054I9UJTXBGj7VbRvZ2IlqxgAQ+BmIuPnbR/FmTTO
CCHJ0SQHrbiJ7HfGFcxgyNHBa1DBVNCFyPzHCTzo95sVkvbdS99rUYm12wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK86kzIa9EWsvhoarFXRp6/HF3PpMB8GA1UdIwQY
MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt
Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl
LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ74AO4+u
QqBu2jYGI3I454FWjTNUu0OdnEFTLRnp6Ahzi6NBQ5OY/g19bI48XoTZSL7UjfKF
C7XIVVNyk3+qUe/JkGGgOaTH+OYazL1HkMFW1MuBvgLnYERe6UGxEhqi1kxg+Gwd
btp4AB6/chQGkfs34aqt3aHLO67WQ7ifj2EAzMRGKxDyGMfY1Fdwj4yxuM2m4/8/
SUT0Xe4ylc+Lgjc5F+s0KPHb9M6fgbD3zi78TQC2oeRLzVdJJN6e2+N+R8hTrb8H
QuOCpJGDDw2oqzPkMsbZ2mQ2wEYsA4NFOl5JcnJ7GMEaPLzU0HwUyQcA/tVBWaNX
YRIJDoxUZDcpIg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:03 2026 by rpki-client