Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: gbTYIzHV0kAbxrrOfR72+sluyGuIR9WmBpVrf4uh7Wc=
Subject key identifier: B2:00:70:1D:29:63:C2:60:C0:A9:5E:35:9A:DF:A4:82:35:1F:34:22
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019EBFFEEB4D937C98BA07972B222595B6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 01F5
Signing time: Sat 13 Jun 2026 08:00:15 +0000
Manifest this update: Sat 13 Jun 2026 08:00:15 +0000
Manifest next update: Sun 14 Jun 2026 08:00:15 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: qUk6Gt/mUOAj3BrHR5OIbtJVL6SnCLQdLcqu+Rwitvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:eb:4d:93:7c:98:ba:07:97:2b:22:25:95:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Jun 13 08:00:15 2026 GMT
Not After : Jun 14 08:00:15 2026 GMT
Subject: CN=b200701d2963c260c0a95e359adfa482351f3422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:a4:06:fb:8b:62:29:53:f7:b9:c1:9e:6b:
53:5a:82:af:4c:d1:10:66:5f:81:94:ef:93:86:a7:
19:49:88:1a:8e:fd:98:11:a4:14:19:c2:92:41:08:
63:f2:ac:21:d1:12:13:90:68:ff:f2:b5:30:bc:f0:
7e:9f:d1:a2:61:6f:be:fb:8a:31:f7:c0:ba:08:85:
c5:7e:44:6a:d0:f7:8a:7e:ea:b8:4d:4b:31:20:2f:
77:f2:a4:87:57:2e:a2:09:04:fe:f4:e3:a0:b3:cd:
09:c0:b0:b4:c2:b5:53:6f:a3:83:b0:26:8c:11:87:
8a:4f:c1:fd:d9:81:10:fe:bd:2c:92:ec:5a:a0:63:
b8:df:76:ad:93:eb:a1:2a:ee:c9:90:fd:cc:da:d2:
41:68:59:8b:c5:57:c2:2c:fc:17:05:75:6a:c1:2f:
7b:29:5b:e1:2c:51:d3:5b:6d:26:da:92:a3:32:ba:
e8:3c:44:96:f5:b3:33:3b:0a:37:59:e3:18:3a:25:
97:c0:b3:ff:b3:c3:7e:e7:53:5e:18:65:00:7e:b9:
b1:08:35:44:33:57:df:7c:9e:5c:d3:df:e3:88:a3:
16:77:1c:0a:31:26:4e:1a:56:ea:f9:61:ad:b4:bd:
0a:22:fa:df:a4:48:1f:11:b6:dc:00:bd:d2:72:90:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:70:1D:29:63:C2:60:C0:A9:5E:35:9A:DF:A4:82:35:1F:34:22
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:06:18:c2:f3:ad:3f:87:d0:c7:59:92:44:ea:d3:55:4f:
86:ae:9f:ff:51:4b:ad:5f:d8:33:c3:8c:16:18:2f:69:df:4a:
11:a2:b4:01:6c:85:39:67:2b:63:80:45:56:28:4c:1b:11:a2:
9b:40:f9:04:ff:98:11:14:e8:82:4a:2a:be:4d:d0:e4:72:db:
af:a4:33:01:b7:54:c2:2d:5f:ef:b7:65:d5:59:34:7d:18:ed:
13:e2:7f:60:ef:6b:3b:f7:2e:a2:e6:f5:1f:56:66:ce:a7:d2:
01:70:8f:99:8b:67:7a:69:0a:eb:e9:2a:74:60:50:c2:ac:b1:
2a:93:ea:fd:cb:a1:ab:56:c4:48:43:bd:ec:1c:7e:2f:3d:d7:
1f:35:05:78:e6:df:36:04:52:13:bc:a2:c2:4a:6c:6b:38:99:
c7:a4:59:7b:c0:d7:c0:43:31:08:66:37:b7:86:42:2d:74:d1:
3f:df:d3:06:27:40:4d:69:66:4c:a6:ce:f8:99:98:3f:63:4d:
66:9a:f6:9b:c0:12:38:da:8f:cc:d7:dd:92:9b:fe:e3:49:02:
f9:20:c1:47:19:f9:d7:6d:8c:cc:32:ba:97:92:a2:31:b5:9a:
37:14:25:2c:71:8b:87:79:17:a8:d9:94:60:b6:7f:ef:ce:3e:
ae:af:c8:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//utNk3yYugeXKyIllbbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy
ODM3MTMwHhcNMjYwNjEzMDgwMDE1WhcNMjYwNjE0MDgwMDE1WjAzMTEwLwYDVQQD
EyhiMjAwNzAxZDI5NjNjMjYwYzBhOTVlMzU5YWRmYTQ4MjM1MWYzNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteOkBvuLYilT97nBnmtTWoKvTNEQ
Zl+BlO+ThqcZSYgajv2YEaQUGcKSQQhj8qwh0RITkGj/8rUwvPB+n9GiYW+++4ox
98C6CIXFfkRq0PeKfuq4TUsxIC938qSHVy6iCQT+9OOgs80JwLC0wrVTb6ODsCaM
EYeKT8H92YEQ/r0skuxaoGO433atk+uhKu7JkP3M2tJBaFmLxVfCLPwXBXVqwS97
KVvhLFHTW20m2pKjMrroPESW9bMzOwo3WeMYOiWXwLP/s8N+51NeGGUAfrmxCDVE
M1fffJ5c09/jiKMWdxwKMSZOGlbq+WGttL0KIvrfpEgfEbbcAL3ScpCXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIAcB0pY8JgwKleNZrfpII1HzQiMB8GA1UdIwQY
MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt
OGFkM2MwZDExNTY1LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1
LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfIGGMLz
rT+H0MdZkkTq01VPhq6f/1FLrV/YM8OMFhgvad9KEaK0AWyFOWcrY4BFVihMGxGi
m0D5BP+YERTogkoqvk3Q5HLbr6QzAbdUwi1f77dl1Vk0fRjtE+J/YO9rO/cuoub1
H1ZmzqfSAXCPmYtnemkK6+kqdGBQwqyxKpPq/cuhq1bESEO97Bx+Lz3XHzUFeObf
NgRSE7yiwkpsaziZx6RZe8DXwEMxCGY3t4ZCLXTRP9/TBidATWlmTKbO+JmYP2NN
Zpr2m8ASONqPzNfdkpv+40kC+SDBRxn5122MzDK6l5KiMbWaNxQlLHGLh3kXqNmU
YLZ/784+rq/IdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:08 2026 by rpki-client