Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: +5ZrzZjhN991u8FvuXBQUJvTb2JyMtlddxaOMKp5meI=
Subject key identifier: 89:79:3C:CD:48:D1:E3:00:13:71:22:80:E4:46:BB:ED:B6:35:7F:59
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019EBF5AB8D1DFFDCB7B7407D0604A4095A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 0201
Signing time: Sat 13 Jun 2026 05:00:54 +0000
Manifest this update: Sat 13 Jun 2026 05:00:54 +0000
Manifest next update: Sun 14 Jun 2026 05:00:54 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: 8SzPE9bFXPLRKik9yxOgzX29cowRxBBaKy2F87JbFWI=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:b8:d1:df:fd:cb:7b:74:07:d0:60:4a:40:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Jun 13 05:00:54 2026 GMT
Not After : Jun 14 05:00:54 2026 GMT
Subject: CN=89793ccd48d1e30013712280e446bbedb6357f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:cb:11:a2:92:4b:a6:2b:80:a4:06:93:0d:
60:29:5a:27:f8:01:1b:f5:0d:8d:a2:91:8d:48:ef:
74:9c:34:59:53:21:1a:d7:ca:a0:23:e3:d2:8a:d1:
33:e7:c2:09:db:c3:70:25:96:6e:dd:df:f4:9b:33:
26:54:a8:b6:29:00:dc:e0:20:00:8e:cf:0b:bd:be:
bc:e9:78:71:4e:21:9e:10:08:54:6d:1c:a5:12:76:
2d:bc:28:cb:18:72:1f:43:6b:a2:68:87:7d:37:91:
ed:57:64:17:55:9b:b2:32:52:bc:47:19:fd:13:7a:
e9:25:27:72:b0:7d:60:d5:d6:29:ff:22:e3:21:f4:
54:6f:04:06:26:c3:8d:88:b7:ee:12:71:af:8d:69:
3e:96:95:99:dc:cc:05:96:1b:f5:22:ff:13:28:26:
01:48:ad:af:d2:c0:d5:1d:f5:a6:03:ff:f0:ca:fa:
48:02:e1:7e:12:24:ef:71:9a:15:f8:04:d4:dd:55:
40:3b:e8:da:09:7c:4c:f2:fa:32:ba:4c:e6:e2:6f:
25:a6:48:d3:13:4f:10:2d:51:ff:ee:45:9c:64:a3:
69:1b:6e:f6:03:4d:34:1d:1f:3b:b4:a5:fd:70:e0:
9d:08:0c:fc:57:79:77:a9:5d:ca:ec:07:25:e4:ea:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:3C:CD:48:D1:E3:00:13:71:22:80:E4:46:BB:ED:B6:35:7F:59
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:5f:e5:86:ce:50:c4:ad:89:4e:5f:7c:de:57:bd:f6:9b:
c3:4c:34:b6:ab:66:ba:e0:9f:27:2b:1d:1c:8b:d9:98:38:37:
a3:be:59:30:e7:17:3d:40:94:c9:48:d9:ec:ab:fc:be:02:6e:
22:75:36:1c:72:84:e6:8f:1e:a3:e4:33:da:ec:3c:27:ee:ef:
9a:68:2c:88:d6:f4:49:7c:fc:02:36:de:9c:a7:80:e7:af:c2:
17:5e:7c:24:af:46:16:2d:92:0d:42:8a:08:f7:dc:3f:d3:8e:
69:71:99:8a:18:30:f2:ce:08:cc:df:1e:89:ea:1a:d9:ef:b3:
10:40:89:fe:92:0e:e4:7a:f9:99:9c:05:1c:62:23:d0:18:f4:
be:e3:72:26:f5:f7:77:45:ea:44:ea:60:5f:67:7a:ff:9e:43:
00:10:48:61:4e:4a:c7:9a:1f:45:07:2b:3d:48:8d:1a:53:f9:
db:8f:a8:41:48:47:23:63:76:e2:14:2c:83:b3:98:00:1b:bc:
02:42:4f:ec:79:e2:65:4b:06:2d:17:77:e8:7d:50:83:f6:19:
ca:d8:7b:96:5a:19:cb:f6:53:3f:fa:0c:48:d7:a6:57:b6:71:
a4:aa:da:a3:0e:68:a5:11:6c:c0:a6:ad:d3:34:c1:bd:c4:38:
e3:e9:86:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WrjR3/3Le3QH0GBKQJWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz
NjY5ODYwHhcNMjYwNjEzMDUwMDU0WhcNMjYwNjE0MDUwMDU0WjAzMTEwLwYDVQQD
Eyg4OTc5M2NjZDQ4ZDFlMzAwMTM3MTIyODBlNDQ2YmJlZGI2MzU3ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrHLEaKSS6YrgKQGkw1gKVon+AEb
9Q2NopGNSO90nDRZUyEa18qgI+PSitEz58IJ28NwJZZu3d/0mzMmVKi2KQDc4CAA
js8Lvb686XhxTiGeEAhUbRylEnYtvCjLGHIfQ2uiaId9N5HtV2QXVZuyMlK8Rxn9
E3rpJSdysH1g1dYp/yLjIfRUbwQGJsONiLfuEnGvjWk+lpWZ3MwFlhv1Iv8TKCYB
SK2v0sDVHfWmA//wyvpIAuF+EiTvcZoV+ATU3VVAO+jaCXxM8voyukzm4m8lpkjT
E08QLVH/7kWcZKNpG272A000HR87tKX9cOCdCAz8V3l3qV3K7Acl5OrIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl5PM1I0eMAE3EigORGu+22NX9ZMB8GA1UdIwQY
MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt
N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk
LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElpf5YbO
UMStiU5ffN5Xvfabw0w0tqtmuuCfJysdHIvZmDg3o75ZMOcXPUCUyUjZ7Kv8vgJu
InU2HHKE5o8eo+Qz2uw8J+7vmmgsiNb0SXz8AjbenKeA56/CF158JK9GFi2SDUKK
CPfcP9OOaXGZihgw8s4IzN8eieoa2e+zEECJ/pIO5Hr5mZwFHGIj0Bj0vuNyJvX3
d0XqROpgX2d6/55DABBIYU5Kx5ofRQcrPUiNGlP524+oQUhHI2N24hQsg7OYABu8
AkJP7HniZUsGLRd36H1Qg/YZyth7lloZy/ZTP/oMSNemV7ZxpKraow5opRFswKat
0zTBvcQ44+mG7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:57:53 2026 by rpki-client