Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: qLKzpnzRrNPOPiqPTranGlEj4QTK42vfdIA8pfWSLP4=
Subject key identifier: 71:A7:7D:0D:CA:D2:72:FA:E3:E6:39:68:1A:74:02:D9:D8:BD:06:40
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019EC1496779027E70BF519944DCDEC5F29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 14:01:13 +0000
Manifest this update: Sat 13 Jun 2026 14:01:13 +0000
Manifest next update: Sun 14 Jun 2026 14:01:13 +0000
Files and hashes: 1: 6gi0D2d3F-6yRjXm-eX58bSWUUA.roa (hash: NKrlT1w6l/oPfwmwNC99xSyujc091Feg3snRea0OXPM=)
2: BFse6czCzhUX4BFCXNbQpH61aUc.roa (hash: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4=)
3: Ky8jp1Zp3SE33IK4OJ5ro_Au50s.roa (hash: 3YeTlhlPLg4f3wbYqV7xvH/ZVjip5tcjie4ghX8ZC2U=)
4: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (hash: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w=)
5: SGh_0_StZ-bip9gscWJB5whR3RM.roa (hash: 6hZbIPbSJWU4puEyHHUPbKbE4av5+/Ai8H+XhwiWL6Q=)
6: _55ywDLnzvOKWe2unaSpuNQ0t3c.roa (hash: XA1Xcl34gTTJa1QUQQ662CXBI++I6u11CFStYV9ej58=)
7: slsZ68MPftYXN9pQnzxYluXDbhA.roa (hash: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U=)
8: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (hash: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8=)
9: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: RkCPWTxP1FiKGPRCqFIUP+X4mPg5twj5BhYpeBJKYBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:67:79:02:7e:70:bf:51:99:44:dc:de:c5:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jun 13 14:01:13 2026 GMT
Not After : Jun 14 14:01:13 2026 GMT
Subject: CN=71a77d0dcad272fae3e639681a7402d9d8bd0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:ae:90:6e:59:df:4b:be:e4:33:73:b0:a2:
2e:68:52:a7:d7:80:e2:7a:e4:fe:5c:36:76:2c:a0:
e0:0b:8f:e8:d0:50:68:3d:db:6a:94:ba:65:59:b5:
62:5c:66:ce:04:1f:ae:69:df:49:1d:c0:96:f6:75:
37:60:0c:f7:5d:b6:34:3d:8d:91:20:63:d5:8a:08:
f0:24:df:e3:cf:5b:61:07:2f:13:d9:c3:f5:90:7b:
54:88:6a:af:72:45:c1:a6:3a:db:45:61:82:89:f8:
07:95:c7:8b:34:9d:bf:1c:56:60:e6:f3:df:eb:e5:
1a:2e:23:36:e9:2b:b2:4d:24:3a:5e:da:84:63:10:
aa:b4:ef:d8:15:a9:96:a2:96:cc:c9:e6:64:66:f4:
c1:bf:35:15:eb:e9:0b:79:72:7d:71:15:18:82:e1:
75:9b:76:dd:74:e9:f4:d5:fb:f2:42:b8:5b:ae:f8:
4d:30:84:bd:1e:1c:09:66:59:78:03:c7:25:82:14:
05:5b:3f:e6:1a:19:6e:a4:bc:a1:0c:70:13:f0:ce:
2f:39:8c:ef:81:0a:95:ed:99:2e:e8:d2:18:7b:b2:
86:f8:48:a4:c5:3d:55:ec:78:1a:92:e3:8f:84:d3:
02:9c:7f:13:b1:b5:0a:c0:ff:96:47:0c:ef:5a:43:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:7D:0D:CA:D2:72:FA:E3:E6:39:68:1A:74:02:D9:D8:BD:06:40
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:dc:0c:dd:87:2a:fa:38:e4:ab:f7:7d:a1:3f:3f:5a:79:
4e:b0:ef:36:a8:38:1c:df:77:25:b9:f7:3c:8f:e4:b1:4d:44:
c5:9d:00:13:99:bf:c9:47:de:56:8b:e7:a5:20:75:3d:45:41:
af:b7:5a:8b:4d:13:a1:f6:df:14:94:be:64:d3:67:a4:c6:f7:
4b:99:92:12:4f:60:34:1b:89:24:01:72:d6:b6:22:ba:3f:f9:
55:a8:ee:cd:66:06:1d:5d:53:be:f4:9e:d5:25:85:ae:22:de:
b8:5b:d1:38:84:3c:37:fa:15:fe:74:f8:2d:6c:9f:1d:e6:54:
04:f2:79:de:04:2c:6e:a6:4a:2b:d6:a6:d0:9a:02:64:86:5f:
23:1d:f6:f4:f3:11:f3:77:72:1a:67:ab:e0:96:fe:2c:79:79:
d6:ec:1d:9e:f9:61:f1:e3:88:f6:70:97:1d:21:e2:e2:e8:53:
51:29:39:8e:d9:db:99:61:5a:58:55:1f:c8:17:e1:97:a2:51:
31:bb:23:a8:e3:61:56:18:e9:f1:54:73:8d:9c:2d:28:cb:55:
b4:4f:07:32:84:87:ed:e1:03:0b:5e:9d:6e:da:22:d2:c4:f0:
a2:a3:c9:87:b3:e6:b1:90:5d:10:0b:88:1c:d7:02:32:6b:32:
f2:06:c6:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSWd5An5wv1GZRNzexfKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl
MTBkNGUwHhcNMjYwNjEzMTQwMTEzWhcNMjYwNjE0MTQwMTEzWjAzMTEwLwYDVQQD
Eyg3MWE3N2QwZGNhZDI3MmZhZTNlNjM5NjgxYTc0MDJkOWQ4YmQwNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0WukG5Z30u+5DNzsKIuaFKn14Di
euT+XDZ2LKDgC4/o0FBoPdtqlLplWbViXGbOBB+uad9JHcCW9nU3YAz3XbY0PY2R
IGPVigjwJN/jz1thBy8T2cP1kHtUiGqvckXBpjrbRWGCifgHlceLNJ2/HFZg5vPf
6+UaLiM26SuyTSQ6XtqEYxCqtO/YFamWopbMyeZkZvTBvzUV6+kLeXJ9cRUYguF1
m3bddOn01fvyQrhbrvhNMIS9HhwJZll4A8clghQFWz/mGhlupLyhDHAT8M4vOYzv
gQqV7Zku6NIYe7KG+EikxT1V7HgakuOPhNMCnH8TsbUKwP+WRwzvWkOmHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGnfQ3K0nL64+Y5aBp0AtnYvQZAMB8GA1UdIwQY
MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt
MjA1NGQ0ZTkwM2JjLzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj
LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCfcDN2H
Kvo45Kv3faE/P1p5TrDvNqg4HN93Jbn3PI/ksU1ExZ0AE5m/yUfeVovnpSB1PUVB
r7dai00TofbfFJS+ZNNnpMb3S5mSEk9gNBuJJAFy1rYiuj/5VajuzWYGHV1TvvSe
1SWFriLeuFvROIQ8N/oV/nT4LWyfHeZUBPJ53gQsbqZKK9am0JoCZIZfIx329PMR
83dyGmer4Jb+LHl51uwdnvlh8eOI9nCXHSHi4uhTUSk5jtnbmWFaWFUfyBfhl6JR
MbsjqONhVhjp8VRzjZwtKMtVtE8HMoSH7eEDC16dbtoi0sTwoqPJh7PmsZBdEAuI
HNcCMmsy8gbGwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:43 2026 by rpki-client