Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: L5xuTZ8gK0VRBOkhz/xlZRtZ0H41Oof8tElV25AGT98=
Subject key identifier: CF:0A:B8:40:DE:89:08:FA:0C:0D:77:D2:69:EC:F2:B9:7E:49:BB:99
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 019EC337F0A4A38DA41C15BFDD2E088D2E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 18EF
Signing time: Sat 13 Jun 2026 23:01:23 +0000
Manifest this update: Sat 13 Jun 2026 23:01:23 +0000
Manifest next update: Sun 14 Jun 2026 23:01:23 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: 1fzRXJJ3QOOHdVOjyuio9L8+SYvRTbjRWtGl3RtNycg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:f0:a4:a3:8d:a4:1c:15:bf:dd:2e:08:8d:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jun 13 23:01:23 2026 GMT
Not After : Jun 14 23:01:23 2026 GMT
Subject: CN=cf0ab840de8908fa0c0d77d269ecf2b97e49bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:ec:a8:fe:6d:c3:a8:b3:84:f3:bc:8f:d8:
86:5a:02:df:63:06:96:d9:97:fb:2b:8d:7d:e4:9d:
cd:3a:fd:58:46:12:10:09:29:02:c6:c9:69:17:d4:
44:68:8c:e2:48:99:99:43:3d:f0:89:60:c4:d9:14:
7a:48:d9:50:f7:78:ea:93:8e:a9:e3:68:62:07:f6:
38:f9:4a:4c:5a:11:ec:39:cd:59:5b:b5:4c:4b:a4:
2f:2e:66:9f:f2:01:45:5d:c2:a7:1c:d4:ca:8c:cf:
29:74:95:45:10:8e:25:d3:16:0f:59:07:b9:03:05:
cd:83:de:be:09:7b:10:dd:ba:29:7d:b1:e7:fe:1d:
34:f2:78:98:f4:db:d9:e0:35:46:88:49:71:47:e7:
6a:6b:89:e6:8a:69:75:33:fb:74:e4:3b:5b:88:92:
64:71:7c:c5:95:64:a0:f4:a8:82:ce:a3:8e:ba:48:
39:49:26:a1:d9:4d:1d:3f:e2:23:c5:4e:9d:81:33:
d7:c5:00:f4:fa:c1:55:c0:1e:90:34:10:4f:96:3b:
93:ff:3d:f0:cd:7d:36:4d:5c:5a:ab:e6:aa:20:7d:
86:e3:bd:c1:ef:4a:1c:46:27:6e:21:16:b2:ca:ce:
f9:df:9e:f9:5a:a8:3c:ea:d0:1e:85:ae:84:ed:fb:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:B8:40:DE:89:08:FA:0C:0D:77:D2:69:EC:F2:B9:7E:49:BB:99
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:11:db:3f:bb:8b:d4:eb:0c:95:c0:db:70:c0:5d:53:91:83:
8d:a8:18:a9:91:5a:96:ee:ae:a1:bb:8b:e5:88:ad:5f:fd:df:
5a:c2:1f:4e:ee:97:01:8d:a1:f2:9f:37:68:f0:d9:3e:de:a3:
34:49:e1:82:41:f5:06:a8:67:91:de:1b:7d:71:f5:59:c2:02:
f9:73:d5:43:98:15:8c:df:a6:90:f2:93:e4:3d:4d:e8:46:22:
1e:cf:f8:45:ea:bf:89:76:e5:0e:fc:63:60:d3:b0:3d:fa:9f:
2b:4a:12:c0:4d:6e:9d:e9:c9:38:33:e0:af:10:74:78:e1:14:
0c:20:a4:63:41:68:c0:86:e6:e5:8b:45:fb:32:e9:65:7e:be:
a2:5d:22:fa:1b:11:9f:87:4c:48:3a:a8:91:e4:9d:2b:0f:f1:
9a:07:5a:a7:a5:b8:88:fb:3f:68:e0:9c:26:74:85:6b:0f:39:
f2:58:19:08:a5:75:35:b3:27:05:5b:82:26:50:bf:a8:36:17:
0c:f4:00:59:26:61:9b:ea:e9:01:9b:c2:74:5a:32:17:bc:7a:
25:77:80:b3:12:6a:f0:f7:2c:0c:41:77:ad:1a:df:43:8f:c6:
21:b4:91:ec:6a:df:26:87:ae:eb:5c:6d:3b:dd:7c:70:e6:3b:
48:5c:2f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN/Cko42kHBW/3S4IjS6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjYwNjEzMjMwMTIzWhcNMjYwNjE0MjMwMTIzWjAzMTEwLwYDVQQD
EyhjZjBhYjg0MGRlODkwOGZhMGMwZDc3ZDI2OWVjZjJiOTdlNDliYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaTsqP5tw6izhPO8j9iGWgLfYwaW
2Zf7K4195J3NOv1YRhIQCSkCxslpF9REaIziSJmZQz3wiWDE2RR6SNlQ93jqk46p
42hiB/Y4+UpMWhHsOc1ZW7VMS6QvLmaf8gFFXcKnHNTKjM8pdJVFEI4l0xYPWQe5
AwXNg96+CXsQ3bopfbHn/h008niY9NvZ4DVGiElxR+dqa4nmiml1M/t05DtbiJJk
cXzFlWSg9KiCzqOOukg5SSah2U0dP+IjxU6dgTPXxQD0+sFVwB6QNBBPljuT/z3w
zX02TVxaq+aqIH2G473B70ocRiduIRayys753575Wqg86tAeha6E7fswBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8KuEDeiQj6DA130mns8rl+SbuZMB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxHbP7uL
1OsMlcDbcMBdU5GDjagYqZFalu6uobuL5YitX/3fWsIfTu6XAY2h8p83aPDZPt6j
NEnhgkH1Bqhnkd4bfXH1WcIC+XPVQ5gVjN+mkPKT5D1N6EYiHs/4Req/iXblDvxj
YNOwPfqfK0oSwE1unenJODPgrxB0eOEUDCCkY0FowIbm5YtF+zLpZX6+ol0i+hsR
n4dMSDqokeSdKw/xmgdap6W4iPs/aOCcJnSFaw858lgZCKV1NbMnBVuCJlC/qDYX
DPQAWSZhm+rpAZvCdFoyF7x6JXeAsxJq8PcsDEF3rRrfQ4/GIbSR7GrfJoeu61xt
O918cOY7SFwvWA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:02 2026 by rpki-client