Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: icdpFJGxd+t7BPQPpOLSFO/QOWgqS0zNV3Lh+opraAI=
Subject key identifier: 05:CA:AA:D3:86:00:7E:85:18:9B:7C:65:9E:37:05:6B:68:D1:CC:B6
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019EC0A3B927BB3587040F9775C6D908F9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:15 +0000
Manifest this update: Sat 13 Jun 2026 11:00:15 +0000
Manifest next update: Sun 14 Jun 2026 11:00:15 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: uCGAG385kBYclYw6wN4jNNSFTHpuC4TsgupH0cNm8PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:b9:27:bb:35:87:04:0f:97:75:c6:d9:08:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jun 13 11:00:15 2026 GMT
Not After : Jun 14 11:00:15 2026 GMT
Subject: CN=05caaad386007e85189b7c659e37056b68d1ccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:42:34:06:99:64:0a:87:b8:d2:96:75:50:
c4:17:05:72:fa:f3:41:58:41:56:ca:35:d5:c3:f0:
35:95:69:dc:f9:71:31:19:ee:7b:47:06:52:23:64:
34:2f:22:07:35:40:08:a8:a3:e0:ab:7a:10:af:1b:
97:46:8f:a5:79:8c:02:1c:ef:7f:a2:13:40:17:12:
af:d0:d3:a2:30:fd:26:ce:da:0b:d0:b0:7d:5b:df:
f8:49:87:c1:12:07:36:4c:0c:50:b1:0f:7d:14:2b:
cf:f5:1f:3a:27:14:e9:e2:84:91:33:d6:03:8f:f2:
1a:2b:e1:4d:c1:68:87:fb:7f:40:19:df:0a:98:d1:
bf:60:64:f6:c0:df:76:9d:3e:66:97:32:20:44:fe:
f2:d4:a9:ff:5e:53:a9:44:f3:58:b5:72:e2:bf:b4:
7e:7f:af:08:3d:d7:35:ca:f8:f1:03:62:5d:24:f0:
5a:bb:c4:39:19:c7:12:66:8a:9b:46:fc:ed:d5:13:
84:18:59:b3:73:10:3d:32:34:cc:36:ca:05:00:f0:
0d:77:03:e8:ba:20:00:aa:53:e5:7b:6d:f1:3f:79:
4a:e5:c7:b8:f3:e0:8c:a2:2d:44:a8:3b:ac:06:ba:
a7:5f:3a:f0:61:e5:e6:51:fc:1e:5a:ef:d3:8b:8b:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:AA:D3:86:00:7E:85:18:9B:7C:65:9E:37:05:6B:68:D1:CC:B6
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:fb:57:cd:5f:70:ed:82:bf:12:4e:07:3b:53:d6:67:5d:
b7:b8:b5:3f:39:22:4d:3c:fd:2d:61:00:3c:4b:cb:d3:4d:bf:
36:08:5e:0c:e2:b9:ab:43:0f:ab:e1:ae:11:c2:23:33:3e:74:
55:bb:2d:1d:b3:b5:37:9b:af:7c:45:b2:f0:1b:00:81:e7:0f:
66:a7:f8:f8:26:a2:67:78:0a:5c:1c:f7:2c:c6:53:a5:5a:65:
29:c0:81:9a:3a:85:04:33:71:77:40:68:1c:18:67:78:8e:54:
e7:df:51:00:94:a8:56:75:2c:79:48:02:6e:66:e0:0f:db:2b:
ea:6f:fe:67:38:fb:37:0e:49:44:c1:e1:ed:37:dc:0a:cf:2e:
7d:05:fa:53:19:de:be:20:33:67:d0:ff:f2:a1:a2:18:f6:5f:
cd:99:61:5c:d6:8e:9f:2c:3e:2f:0d:9e:58:99:87:14:3c:47:
a8:a3:48:18:9b:e8:39:0f:44:5a:f8:cd:bc:51:2b:f7:05:59:
c9:5f:81:8f:25:8a:b3:5b:b7:de:82:25:bb:a0:e2:9f:16:d6:
77:81:c7:58:0c:4b:38:00:d5:56:5b:f9:d9:7a:5c:16:25:57:
fb:f2:ac:89:91:c9:ae:e1:f6:23:ed:96:2e:8b:e2:b7:28:14:
68:e2:dd:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao7knuzWHBA+XdcbZCPmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjYwNjEzMTEwMDE1WhcNMjYwNjE0MTEwMDE1WjAzMTEwLwYDVQQD
EygwNWNhYWFkMzg2MDA3ZTg1MTg5YjdjNjU5ZTM3MDU2YjY4ZDFjY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ANCNAaZZAqHuNKWdVDEFwVy+vNB
WEFWyjXVw/A1lWnc+XExGe57RwZSI2Q0LyIHNUAIqKPgq3oQrxuXRo+leYwCHO9/
ohNAFxKv0NOiMP0mztoL0LB9W9/4SYfBEgc2TAxQsQ99FCvP9R86JxTp4oSRM9YD
j/IaK+FNwWiH+39AGd8KmNG/YGT2wN92nT5mlzIgRP7y1Kn/XlOpRPNYtXLiv7R+
f68IPdc1yvjxA2JdJPBau8Q5GccSZoqbRvzt1ROEGFmzcxA9MjTMNsoFAPANdwPo
uiAAqlPle23xP3lK5ce48+CMoi1EqDusBrqnXzrwYeXmUfweWu/Ti4stgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXKqtOGAH6FGJt8ZZ43BWto0cy2MB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0v7V81f
cO2CvxJOBztT1mddt7i1PzkiTTz9LWEAPEvL002/NgheDOK5q0MPq+GuEcIjMz50
VbstHbO1N5uvfEWy8BsAgecPZqf4+CaiZ3gKXBz3LMZTpVplKcCBmjqFBDNxd0Bo
HBhneI5U599RAJSoVnUseUgCbmbgD9sr6m/+Zzj7Nw5JRMHh7TfcCs8ufQX6Uxne
viAzZ9D/8qGiGPZfzZlhXNaOnyw+Lw2eWJmHFDxHqKNIGJvoOQ9EWvjNvFEr9wVZ
yV+BjyWKs1u33oIlu6DinxbWd4HHWAxLOADVVlv52XpcFiVX+/KsiZHJruH2I+2W
LovitygUaOLdiA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:20 2026 by rpki-client