Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: vJZnuAGxfSnxzSICMzNFT/TPz9YLR1xrXoOkYKP6iG0=
Subject key identifier: A0:6C:58:E9:F5:0F:E0:DA:5D:74:76:64:3E:41:E3:05:85:96:EA:2C
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019EC2C91434737AAD6D16D8878159FD4DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 21:00:18 +0000
Manifest this update: Sat 13 Jun 2026 21:00:18 +0000
Manifest next update: Sun 14 Jun 2026 21:00:18 +0000
Files and hashes: 1: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: 43BGauBTufmvEPWioWLvLjIDXPVrojk/R65rKC3JW00=)
2: iAERyyADNkRh7t11PICWm-ALep4.roa (hash: Gs0IMRFAt2iHOW8BkO2nGyZushivLZn3vc6c0MIS3lQ=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:14:34:73:7a:ad:6d:16:d8:87:81:59:fd:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jun 13 21:00:18 2026 GMT
Not After : Jun 14 21:00:18 2026 GMT
Subject: CN=a06c58e9f50fe0da5d7476643e41e3058596ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:86:e4:e2:45:15:e4:f2:a6:42:07:d8:a6:
21:2c:1d:e1:c2:98:8b:1e:af:00:6d:75:f9:cc:bb:
e9:c3:97:53:b7:49:fa:77:1b:3a:29:c1:c5:df:7e:
c3:3c:b2:31:d0:eb:57:eb:8c:b4:50:71:be:89:aa:
f7:5e:66:59:25:e7:c8:de:ce:fb:cf:94:28:4a:09:
c9:00:2f:a4:7d:4a:12:46:13:0c:ae:76:40:f1:e2:
fe:94:39:e4:b3:62:44:57:3d:2a:fb:93:17:fa:d1:
52:8d:f6:dd:36:e3:d3:28:0b:2d:c1:c8:84:7e:db:
e0:66:f3:cd:95:88:e0:2e:ba:cb:6c:56:1e:46:cd:
04:9b:2a:c8:dc:1c:89:c4:69:38:b8:d0:31:8e:f4:
77:cc:df:be:80:98:60:18:d3:75:ef:aa:89:01:a5:
d0:89:29:64:1a:7c:6d:b8:e7:bc:e2:96:db:e9:6a:
4d:f3:eb:15:ad:5c:5a:21:fe:35:67:6d:7b:8c:10:
50:c1:4f:00:b9:6e:20:8f:8d:32:1a:1a:ef:a0:46:
a7:97:36:24:97:79:8e:fb:44:49:91:87:07:4e:89:
63:84:d1:2b:2a:b8:cb:05:91:d3:fa:9d:04:6e:33:
31:fa:70:7c:46:2e:fb:cf:d0:9f:43:43:2d:db:b4:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:58:E9:F5:0F:E0:DA:5D:74:76:64:3E:41:E3:05:85:96:EA:2C
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a4:d3:57:fc:5e:14:7f:0f:1f:62:09:6d:35:08:0e:0a:a0:
e2:60:40:c9:5c:01:82:3b:b7:68:24:eb:89:ec:51:c6:6f:91:
86:77:c0:3e:49:d7:17:f5:bb:67:56:5f:e2:23:23:90:a9:87:
94:e0:a2:2a:fd:85:4b:cf:be:a5:22:39:b0:17:ee:6c:91:56:
b1:f9:49:60:56:00:a5:b6:da:43:a9:16:cf:ae:1f:a6:5e:0f:
ab:6d:ab:03:9d:0b:06:e4:1d:07:e4:ad:00:3e:d6:43:ea:a8:
8b:ec:27:8a:cc:60:dc:b3:8c:43:fc:b8:44:37:e5:09:aa:a8:
2f:8c:e0:dc:ce:97:cd:d5:33:ee:e2:ef:6c:fa:51:b5:40:dd:
46:ee:87:46:e3:d9:89:11:6c:0b:6c:62:76:2a:89:a8:28:b1:
72:f9:13:9a:50:a1:7e:1e:7b:52:8b:08:03:63:c9:83:31:1a:
ee:ff:0b:e3:b2:80:13:f0:40:15:38:09:d0:6e:91:3d:a8:5c:
29:77:33:50:8c:28:09:fa:52:7b:92:ae:32:ff:2e:eb:ea:59:
73:43:ac:38:31:e7:22:55:b1:55:4c:58:de:97:b4:04:55:a6:
25:5a:37:31:0c:6a:6b:a8:f8:13:ef:e2:1f:f6:53:5d:8e:fb:
a7:e0:2a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyRQ0c3qtbRbYh4FZ/U3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjYwNjEzMjEwMDE4WhcNMjYwNjE0MjEwMDE4WjAzMTEwLwYDVQQD
EyhhMDZjNThlOWY1MGZlMGRhNWQ3NDc2NjQzZTQxZTMwNTg1OTZlYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyG5OJFFeTypkIH2KYhLB3hwpiL
Hq8AbXX5zLvpw5dTt0n6dxs6KcHF337DPLIx0OtX64y0UHG+iar3XmZZJefI3s77
z5QoSgnJAC+kfUoSRhMMrnZA8eL+lDnks2JEVz0q+5MX+tFSjfbdNuPTKAstwciE
ftvgZvPNlYjgLrrLbFYeRs0EmyrI3ByJxGk4uNAxjvR3zN++gJhgGNN176qJAaXQ
iSlkGnxtuOe84pbb6WpN8+sVrVxaIf41Z217jBBQwU8AuW4gj40yGhrvoEanlzYk
l3mO+0RJkYcHToljhNErKrjLBZHT+p0EbjMx+nB8Ri77z9CfQ0Mt27RP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBsWOn1D+DaXXR2ZD5B4wWFluosMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqTTV/xe
FH8PH2IJbTUIDgqg4mBAyVwBgju3aCTriexRxm+RhnfAPknXF/W7Z1Zf4iMjkKmH
lOCiKv2FS8++pSI5sBfubJFWsflJYFYApbbaQ6kWz64fpl4Pq22rA50LBuQdB+St
AD7WQ+qoi+wnisxg3LOMQ/y4RDflCaqoL4zg3M6XzdUz7uLvbPpRtUDdRu6HRuPZ
iRFsC2xidiqJqCixcvkTmlChfh57UosIA2PJgzEa7v8L47KAE/BAFTgJ0G6RPahc
KXczUIwoCfpSe5KuMv8u6+pZc0OsODHnIlWxVUxY3pe0BFWmJVo3MQxqa6j4E+/i
H/ZTXY77p+AqlQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:03 2026 by rpki-client