Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: gDSRzC+ekQ4dlbOAh6U8oK8PjcV3PgzaVUOvq75SzIM=
Subject key identifier: 74:B3:6A:FB:71:FE:72:E0:C5:EB:10:B9:F0:97:2F:98:0C:EA:77:D5
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019EC0DB0D11EB16B94AE11EFFE391ED2097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 12:00:41 +0000
Manifest this update: Sat 13 Jun 2026 12:00:41 +0000
Manifest next update: Sun 14 Jun 2026 12:00:41 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: 3z9+OVWla3JcPOX1DcUUcvv7pb9OrOMSu/r/8poRHQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:0d:11:eb:16:b9:4a:e1:1e:ff:e3:91:ed:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jun 13 12:00:41 2026 GMT
Not After : Jun 14 12:00:41 2026 GMT
Subject: CN=74b36afb71fe72e0c5eb10b9f0972f980cea77d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:b2:de:d4:d3:11:32:a7:ff:2c:30:e5:60:
5d:7f:78:9f:01:c2:cd:8f:f5:60:7d:7a:09:ce:ef:
a1:96:e8:77:81:c4:93:7d:4c:e8:dd:31:f5:24:78:
c9:86:9b:a1:5c:84:9a:fb:5b:14:17:cd:08:60:48:
d1:7a:c9:7b:12:1b:82:29:74:ee:57:9d:ec:05:1b:
39:e6:da:50:cd:2a:20:97:a7:2b:2f:c1:e4:70:61:
19:c6:26:84:eb:ff:b7:be:4f:e7:df:91:d6:ef:06:
57:d7:55:5c:e5:47:82:82:66:85:36:5a:8c:f9:a1:
70:7f:98:cd:d0:eb:2a:7a:c5:3e:28:f8:6f:4d:9e:
10:c0:b4:e8:03:27:23:54:9d:34:36:70:4d:fe:05:
e1:3f:a0:78:40:45:c0:c3:79:6d:2b:05:45:1c:12:
c6:66:7f:e5:53:71:8f:c5:d0:0f:72:b2:1a:5c:3f:
78:64:bf:90:26:5d:68:49:c5:9a:d3:02:9c:f0:ef:
df:39:ea:af:dd:c0:d1:46:58:3b:7e:18:c4:b8:7e:
af:a7:dd:1b:75:ac:eb:6a:c1:95:3f:9d:89:01:aa:
79:2c:32:65:da:5e:ae:6f:3d:3c:8d:87:4f:79:e0:
32:41:86:15:72:12:f0:cd:9f:b1:73:54:79:fe:7d:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B3:6A:FB:71:FE:72:E0:C5:EB:10:B9:F0:97:2F:98:0C:EA:77:D5
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:4e:4b:d0:7d:a6:fe:95:63:46:ea:38:57:29:bb:0d:f9:
bc:ef:e5:57:2c:45:99:b2:ad:59:d7:af:66:b7:e1:0e:ba:bc:
83:b4:15:66:ff:6f:d4:1e:7f:3b:da:43:ea:d3:d9:f8:c4:e4:
4c:92:b9:51:98:fa:80:01:1b:c6:a6:54:ce:a3:ff:5e:2e:10:
96:2d:a4:c1:99:02:17:a1:cd:69:93:80:43:20:33:50:04:04:
50:80:b0:eb:88:80:85:ac:1f:da:d2:19:29:a3:cb:f8:45:99:
2e:56:69:76:5b:45:17:34:28:05:0e:3c:94:6d:e2:f8:24:32:
0f:a2:cb:01:4d:9a:ae:f0:05:ac:9f:50:31:90:98:2e:05:da:
0d:e9:90:5d:1d:19:2a:cb:97:fa:37:e2:86:4e:8b:de:e1:0d:
a6:69:0f:d6:ab:c7:b7:d0:48:cd:dd:0b:8f:91:dc:a5:62:c9:
e8:a0:3b:06:10:87:ec:6f:c1:43:b4:0d:c1:67:9c:10:60:da:
49:7d:78:cd:d9:ea:2b:38:1a:f3:24:b3:43:3f:35:a0:16:56:
73:08:53:a5:7e:0d:8e:4a:a2:dd:16:7e:57:19:50:43:e2:03:
be:25:b5:99:2d:6c:f7:59:07:78:18:a7:5e:40:ce:38:46:b8:
e8:e4:da:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2w0R6xa5SuEe/+OR7SCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw
Y2QzZTcwHhcNMjYwNjEzMTIwMDQxWhcNMjYwNjE0MTIwMDQxWjAzMTEwLwYDVQQD
Eyg3NGIzNmFmYjcxZmU3MmUwYzVlYjEwYjlmMDk3MmY5ODBjZWE3N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32y3tTTETKn/yww5WBdf3ifAcLN
j/VgfXoJzu+hluh3gcSTfUzo3TH1JHjJhpuhXISa+1sUF80IYEjResl7EhuCKXTu
V53sBRs55tpQzSogl6crL8HkcGEZxiaE6/+3vk/n35HW7wZX11Vc5UeCgmaFNlqM
+aFwf5jN0OsqesU+KPhvTZ4QwLToAycjVJ00NnBN/gXhP6B4QEXAw3ltKwVFHBLG
Zn/lU3GPxdAPcrIaXD94ZL+QJl1oScWa0wKc8O/fOeqv3cDRRlg7fhjEuH6vp90b
dazrasGVP52JAap5LDJl2l6ubz08jYdPeeAyQYYVchLwzZ+xc1R5/n2uPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSzavtx/nLgxesQufCXL5gM6nfVMB8GA1UdIwQY
MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt
YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1
LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp5OS9B9
pv6VY0bqOFcpuw35vO/lVyxFmbKtWdevZrfhDrq8g7QVZv9v1B5/O9pD6tPZ+MTk
TJK5UZj6gAEbxqZUzqP/Xi4Qli2kwZkCF6HNaZOAQyAzUAQEUICw64iAhawf2tIZ
KaPL+EWZLlZpdltFFzQoBQ48lG3i+CQyD6LLAU2arvAFrJ9QMZCYLgXaDemQXR0Z
KsuX+jfihk6L3uENpmkP1qvHt9BIzd0Lj5HcpWLJ6KA7BhCH7G/BQ7QNwWecEGDa
SX14zdnqKzga8ySzQz81oBZWcwhTpX4Njkqi3RZ+VxlQQ+IDviW1mS1s91kHeBin
XkDOOEa46OTaMw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:42:05 2026 by rpki-client