Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: PVVluQpHP8p5PYu2xBVIVKlhAHWht9MCoqe/2TbM5hY=
Subject key identifier: 19:5D:29:8D:25:AE:E8:59:CB:C7:FC:8D:2C:C1:EF:8B:89:2B:A4:4A
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019EC0DAB7E917294489BE8D775ECB63B960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 085A
Signing time: Sat 13 Jun 2026 12:00:19 +0000
Manifest this update: Sat 13 Jun 2026 12:00:19 +0000
Manifest next update: Sun 14 Jun 2026 12:00:19 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: 9ICYm6y7w2Lsaxqj4VTrBtydj57ZGaibR10jUzHN+WQ=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:b7:e9:17:29:44:89:be:8d:77:5e:cb:63:b9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jun 13 12:00:19 2026 GMT
Not After : Jun 14 12:00:19 2026 GMT
Subject: CN=195d298d25aee859cbc7fc8d2cc1ef8b892ba44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:ba:99:e2:68:d7:c5:f9:01:7a:4a:8b:85:
9b:d8:18:04:e8:c6:62:cf:74:7d:92:6e:23:77:11:
c0:46:e9:42:1d:6e:03:b6:ca:e2:bf:ef:41:a9:4e:
e6:33:a3:97:78:c7:c6:09:12:50:03:60:6f:5a:cd:
5b:b6:40:d8:bc:72:ba:6b:60:0e:19:c6:87:87:58:
ef:f3:b4:e8:d2:36:63:05:cd:93:42:6e:a9:af:02:
f7:f5:90:df:bc:45:2c:fe:4f:8a:9f:8f:ec:e7:51:
1b:d6:ae:3d:12:0c:1d:09:30:32:2b:74:79:c5:92:
b1:ff:18:af:00:5b:bf:e2:e1:4b:a5:5f:d8:74:6d:
37:66:8e:93:8b:5f:a9:fc:80:94:ca:04:c1:7b:c7:
19:67:9a:f2:7f:5c:22:3e:f6:d7:4b:ca:ac:85:c7:
9b:0a:8a:2c:3a:ed:e0:3e:c3:da:3b:80:ba:f6:d6:
64:fe:18:05:49:aa:77:57:20:16:af:c2:d5:11:19:
37:c4:80:eb:1c:b1:16:0e:37:22:74:7f:37:d7:1b:
66:0c:70:28:cc:9c:89:79:14:fe:e7:c2:13:19:fc:
9c:2a:ed:29:c1:63:3c:71:be:b1:86:08:14:eb:fd:
44:38:f7:70:3c:8f:a6:d9:ff:48:5d:10:98:fc:07:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:29:8D:25:AE:E8:59:CB:C7:FC:8D:2C:C1:EF:8B:89:2B:A4:4A
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:ed:38:df:ac:8a:82:10:5d:46:a7:2e:d7:71:0d:a6:22:
83:08:26:cb:d4:42:64:a0:50:9d:f8:45:bf:b0:9a:c2:13:12:
52:58:6a:0f:f1:80:bb:97:7b:6d:d3:16:9d:5a:b4:af:5f:a3:
b2:95:d1:d4:53:e2:0a:82:24:e0:2d:a6:b4:6c:8b:b9:26:69:
f4:43:c5:ef:b7:f9:4e:ee:9b:34:0b:30:74:ee:50:5a:c1:83:
65:6b:43:21:81:99:ae:e9:da:e4:46:b5:f1:43:20:59:1a:e0:
85:55:c5:6d:e0:ba:7e:54:b9:f3:30:62:ff:43:ec:ae:52:83:
6c:0a:b5:9c:69:2c:e9:24:6a:0b:f0:c9:c4:f1:2b:2c:5a:f0:
5e:eb:a3:2b:6e:84:58:ab:1a:84:db:bc:7b:82:98:64:bf:e4:
22:8f:96:7d:f2:78:a2:8b:fe:f6:6b:3a:7f:03:ca:32:a2:d9:
01:9e:c6:45:86:bc:a1:ee:f8:b9:31:b3:e7:0d:03:03:bf:b5:
5d:29:fb:75:f2:4f:e4:39:35:25:92:c9:4c:05:b4:e0:8e:50:
0b:e5:55:6e:28:88:2c:31:ee:fe:45:b6:9d:2b:4d:c0:61:4d:
40:d3:b1:dc:eb:87:a0:39:80:88:06:97:5d:39:5f:6e:5f:fe:
ee:03:7a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2rfpFylEib6Nd17LY7lgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi
ZDNjNmUwHhcNMjYwNjEzMTIwMDE5WhcNMjYwNjE0MTIwMDE5WjAzMTEwLwYDVQQD
EygxOTVkMjk4ZDI1YWVlODU5Y2JjN2ZjOGQyY2MxZWY4Yjg5MmJhNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvi6meJo18X5AXpKi4Wb2BgE6MZi
z3R9km4jdxHARulCHW4Dtsriv+9BqU7mM6OXeMfGCRJQA2BvWs1btkDYvHK6a2AO
GcaHh1jv87To0jZjBc2TQm6prwL39ZDfvEUs/k+Kn4/s51Eb1q49EgwdCTAyK3R5
xZKx/xivAFu/4uFLpV/YdG03Zo6Ti1+p/ICUygTBe8cZZ5ryf1wiPvbXS8qshceb
CoosOu3gPsPaO4C69tZk/hgFSap3VyAWr8LVERk3xIDrHLEWDjcidH831xtmDHAo
zJyJeRT+58ITGfycKu0pwWM8cb6xhggU6/1EOPdwPI+m2f9IXRCY/AcvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBldKY0lruhZy8f8jSzB74uJK6RKMB8GA1UdIwQY
MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt
NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1
LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTLtON+s
ioIQXUanLtdxDaYigwgmy9RCZKBQnfhFv7CawhMSUlhqD/GAu5d7bdMWnVq0r1+j
spXR1FPiCoIk4C2mtGyLuSZp9EPF77f5Tu6bNAswdO5QWsGDZWtDIYGZruna5Ea1
8UMgWRrghVXFbeC6flS58zBi/0PsrlKDbAq1nGks6SRqC/DJxPErLFrwXuujK26E
WKsahNu8e4KYZL/kIo+WffJ4oov+9ms6fwPKMqLZAZ7GRYa8oe74uTGz5w0DA7+1
XSn7dfJP5Dk1JZLJTAW04I5QC+VVbiiILDHu/kW2nStNwGFNQNOx3OuHoDmAiAaX
XTlfbl/+7gN6IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:24 2026 by rpki-client