Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: FCjQ2OrEHuakhv1q4XnLAwHJpc3sHtGburl7nEX3Bng=
Subject key identifier: FE:BC:33:AA:24:E4:F8:4A:10:DC:91:64:6A:44:CB:46:80:B2:15:A1
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019ED53E2EE0C0F5D030AC932063DA970891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 11:01:22 +0000
Manifest this update: Wed 17 Jun 2026 11:01:22 +0000
Manifest next update: Thu 18 Jun 2026 11:01:22 +0000
Files and hashes: 1: A8xv8vtzPNYcudy_CkqqgALd8rQ.roa (hash: Z6P1U4fiAAFfK/T39wGFzFC2aSrZXB1b41nd+Paxb+Y=)
2: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
3: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: aawReNe9xjLG/gf7qeA5Fc04ovaMmp3MwOD8rTRAfTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:2e:e0:c0:f5:d0:30:ac:93:20:63:da:97:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jun 17 11:01:22 2026 GMT
Not After : Jun 18 11:01:22 2026 GMT
Subject: CN=febc33aa24e4f84a10dc91646a44cb4680b215a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:c6:7c:ae:a0:53:38:ce:38:49:0d:22:83:
6b:9c:e3:1e:49:79:8f:04:e5:38:13:fa:f4:a6:34:
2b:b1:c8:73:38:83:e3:d4:3a:16:0a:ca:64:8f:b7:
ed:ea:a1:9f:d0:cb:72:50:05:e0:11:11:93:64:01:
8c:1f:81:4a:d0:09:0b:e2:1d:ad:f8:cd:da:80:01:
50:1b:f4:6e:e4:d9:77:de:dc:5e:58:9b:b7:21:63:
24:12:c3:30:ef:e2:b7:c0:cc:a3:f0:1c:46:f2:95:
4b:80:b1:d0:2f:41:ad:ff:53:9d:d9:d0:48:42:56:
a9:f8:ae:56:3d:a6:23:7f:ee:26:8a:39:5e:8b:73:
db:f1:ec:1f:ad:49:5f:6a:87:43:2d:9b:10:50:0e:
cd:77:59:41:fe:2d:0a:f7:37:e6:7b:40:ba:2a:7c:
b1:44:d5:06:ba:62:14:e1:f4:30:16:41:89:6c:05:
92:1d:ec:0d:60:73:9d:7b:1c:7f:e1:db:a3:c3:cd:
fa:31:9a:e2:d0:ef:b2:6f:75:6a:b1:07:b7:43:a7:
ab:0b:bb:08:22:2f:fe:c9:21:2f:6d:dd:1a:8e:ea:
1a:c9:80:e7:10:87:44:08:81:7d:86:4f:6d:12:a4:
0d:4e:e1:e2:51:bb:c7:06:4f:7a:d4:4a:e5:68:ad:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:33:AA:24:E4:F8:4A:10:DC:91:64:6A:44:CB:46:80:B2:15:A1
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:7d:da:a5:f2:3a:89:8c:c7:2d:5a:0b:a0:f0:18:ff:15:
28:96:76:41:a6:0c:fb:ea:51:cc:6b:ef:80:96:8e:20:4e:1d:
fe:ae:7e:38:ed:70:95:52:c6:63:29:22:e9:31:ae:9e:aa:fb:
e5:9b:ba:cd:c7:fd:ec:84:ce:fa:7c:61:3a:b2:e3:7e:6b:f2:
16:7a:2f:3a:47:8b:80:13:21:b4:5d:52:e5:d8:00:03:f4:25:
4a:e7:52:e1:24:5e:47:6d:b4:3e:5f:7d:60:a6:b3:e1:df:fb:
07:fe:5f:2a:34:53:28:2f:b7:a8:42:0a:93:7d:30:64:1f:81:
c9:e2:9b:ce:fd:55:a3:01:2f:d4:cd:97:3c:f0:46:de:a6:01:
8c:80:34:e8:cd:ed:c8:9a:3c:32:c7:b7:42:9c:14:1b:80:10:
84:06:50:f2:b8:f4:5c:3e:88:fc:f2:6f:9c:26:8f:c8:45:ce:
c1:67:04:a7:8f:8b:c8:a8:df:b6:0c:fb:9e:a9:45:57:e1:eb:
21:f9:5a:f3:e0:cd:6e:79:84:0e:c0:07:a2:b8:fa:a8:eb:25:
dc:e6:8b:64:db:2d:04:97:be:99:50:9f:3f:a9:7b:83:f2:d2:
fb:77:82:c8:1e:14:55:bc:8c:c8:b1:de:33:8c:12:ac:fe:cf:
18:6a:c4:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VPi7gwPXQMKyTIGPalwiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl
NTFhMjYwHhcNMjYwNjE3MTEwMTIyWhcNMjYwNjE4MTEwMTIyWjAzMTEwLwYDVQQD
EyhmZWJjMzNhYTI0ZTRmODRhMTBkYzkxNjQ2YTQ0Y2I0NjgwYjIxNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH3GfK6gUzjOOEkNIoNrnOMeSXmP
BOU4E/r0pjQrschzOIPj1DoWCspkj7ft6qGf0MtyUAXgERGTZAGMH4FK0AkL4h2t
+M3agAFQG/Ru5Nl33txeWJu3IWMkEsMw7+K3wMyj8BxG8pVLgLHQL0Gt/1Od2dBI
Qlap+K5WPaYjf+4mijlei3Pb8ewfrUlfaodDLZsQUA7Nd1lB/i0K9zfme0C6Knyx
RNUGumIU4fQwFkGJbAWSHewNYHOdexx/4dujw836MZri0O+yb3VqsQe3Q6erC7sI
Ii/+ySEvbd0ajuoayYDnEIdECIF9hk9tEqQNTuHiUbvHBk961ErlaK0ioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP68M6ok5PhKENyRZGpEy0aAshWhMB8GA1UdIwQY
MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt
Yjk0NzJhMmM1YjNlLzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl
LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtux92qXy
OomMxy1aC6DwGP8VKJZ2QaYM++pRzGvvgJaOIE4d/q5+OO1wlVLGYyki6TGunqr7
5Zu6zcf97ITO+nxhOrLjfmvyFnovOkeLgBMhtF1S5dgAA/QlSudS4SReR220Pl99
YKaz4d/7B/5fKjRTKC+3qEIKk30wZB+ByeKbzv1VowEv1M2XPPBG3qYBjIA06M3t
yJo8Mse3QpwUG4AQhAZQ8rj0XD6I/PJvnCaPyEXOwWcEp4+LyKjftgz7nqlFV+Hr
Ifla8+DNbnmEDsAHorj6qOsl3OaLZNstBJe+mVCfP6l7g/LS+3eCyB4UVbyMyLHe
M4wSrP7PGGrElw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:55:57 2026 by rpki-client