Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: 1AKGOE3KpaAiknAuVl7NIiwj9kk5xoPJ4N9V4ceqFK4=
Subject key identifier: 2A:76:92:97:3E:B0:2A:B7:49:73:AC:B2:C1:8A:92:D8:92:C7:47:00
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019ED507528FB46D4C543D4B033F47D69F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 10:01:27 +0000
Manifest this update: Wed 17 Jun 2026 10:01:27 +0000
Manifest next update: Thu 18 Jun 2026 10:01:27 +0000
Files and hashes: 1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: OJx+Ut/X00FVD5hKJ5rPEx1mGEA1RxahZQa+wFoDQGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:52:8f:b4:6d:4c:54:3d:4b:03:3f:47:d6:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jun 17 10:01:27 2026 GMT
Not After : Jun 18 10:01:27 2026 GMT
Subject: CN=2a7692973eb02ab74973acb2c18a92d892c74700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:bb:44:f7:01:38:0c:48:22:86:78:90:34:
62:83:35:30:e7:09:da:c4:8e:0c:46:c9:85:36:87:
74:41:9e:1b:3d:70:06:ef:cc:87:5f:60:8e:ff:79:
3d:fc:f8:81:5a:e0:b9:87:c6:65:da:af:78:7f:35:
9a:26:c4:2f:3d:cb:df:d9:14:c8:7c:2f:62:46:0b:
a8:6c:26:6d:f9:0b:7e:7c:1b:90:a0:87:e5:19:73:
9f:cb:f3:11:63:0f:df:ae:e2:ed:dc:d8:a0:da:00:
03:80:50:70:ad:22:49:f0:59:46:51:8f:90:dc:0e:
6b:cf:41:47:a6:33:4d:81:07:35:db:bd:c6:9d:ae:
e1:50:66:73:42:19:12:5b:56:e3:ac:21:4a:6e:4c:
ff:81:0d:87:d3:0d:8f:d0:60:7f:df:6d:16:39:ca:
85:50:64:2f:5d:44:8f:53:0f:12:24:1c:a6:94:a0:
9d:6b:78:2c:5b:89:60:ad:36:de:7a:40:99:23:04:
a4:90:bc:cf:d7:25:a2:67:d3:8c:05:59:32:4a:7a:
36:42:40:1e:6d:40:89:30:84:38:b1:15:b3:e7:0c:
fb:04:29:46:e2:af:d0:88:b3:6a:c3:03:37:9a:3c:
fa:30:58:1c:52:94:8f:26:54:3f:a2:d1:8e:ce:d8:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:92:97:3E:B0:2A:B7:49:73:AC:B2:C1:8A:92:D8:92:C7:47:00
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:82:d7:e7:32:0b:f1:e9:53:01:bf:24:05:bb:cd:ab:6e:c0:
91:2a:dd:71:6e:0f:16:8b:b3:7e:7e:46:67:1e:82:94:f6:d6:
e0:0e:b3:f7:d0:31:db:81:5c:17:bb:13:91:cf:fa:f3:32:7a:
9f:8f:0f:52:1c:14:50:aa:f3:2b:9c:25:53:b3:99:60:67:b5:
93:c4:d0:00:1b:f1:d4:bb:f9:e9:dd:78:3f:93:06:bf:7a:be:
09:19:6a:dc:f7:bd:24:3c:ea:a4:4f:31:66:94:57:44:5f:31:
8b:7c:df:e8:21:20:1a:4d:c8:2d:5b:7b:1d:95:4e:d4:c6:81:
e4:78:f7:0f:9b:3f:37:f2:5b:9f:5f:ed:a5:c4:3f:ab:f3:49:
b6:5c:03:73:5f:1d:31:81:27:c7:57:76:58:9b:16:b5:05:af:
8d:30:bb:0e:a0:d5:f7:1c:90:cb:1c:1d:6e:8b:60:b5:28:f8:
2a:e7:65:82:43:4e:f5:06:e8:cb:c1:29:4a:7e:49:b2:7d:db:
61:98:69:84:ec:b1:6f:52:2d:d0:3e:1a:a9:52:bc:75:83:13:
a6:83:94:59:4b:c5:b0:ae:0d:f3:15:c6:25:dd:58:20:72:d1:
b3:c6:34:aa:e6:ee:92:48:2f:82:bc:dc:ed:a5:74:3d:ec:4d:
b1:2e:d2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VB1KPtG1MVD1LAz9H1p+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjYwNjE3MTAwMTI3WhcNMjYwNjE4MTAwMTI3WjAzMTEwLwYDVQQD
EygyYTc2OTI5NzNlYjAyYWI3NDk3M2FjYjJjMThhOTJkODkyYzc0NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8m7RPcBOAxIIoZ4kDRigzUw5wna
xI4MRsmFNod0QZ4bPXAG78yHX2CO/3k9/PiBWuC5h8Zl2q94fzWaJsQvPcvf2RTI
fC9iRguobCZt+Qt+fBuQoIflGXOfy/MRYw/fruLt3Nig2gADgFBwrSJJ8FlGUY+Q
3A5rz0FHpjNNgQc1273Gna7hUGZzQhkSW1bjrCFKbkz/gQ2H0w2P0GB/320WOcqF
UGQvXUSPUw8SJBymlKCda3gsW4lgrTbeekCZIwSkkLzP1yWiZ9OMBVkySno2QkAe
bUCJMIQ4sRWz5wz7BClG4q/QiLNqwwM3mjz6MFgcUpSPJlQ/otGOztivLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp2kpc+sCq3SXOsssGKktiSx0cAMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYLX5zIL
8elTAb8kBbvNq27AkSrdcW4PFouzfn5GZx6ClPbW4A6z99Ax24FcF7sTkc/68zJ6
n48PUhwUUKrzK5wlU7OZYGe1k8TQABvx1Lv56d14P5MGv3q+CRlq3Pe9JDzqpE8x
ZpRXRF8xi3zf6CEgGk3ILVt7HZVO1MaB5Hj3D5s/N/Jbn1/tpcQ/q/NJtlwDc18d
MYEnx1d2WJsWtQWvjTC7DqDV9xyQyxwdbotgtSj4KudlgkNO9Qboy8EpSn5Jsn3b
YZhphOyxb1It0D4aqVK8dYMTpoOUWUvFsK4N8xXGJd1YIHLRs8Y0qubukkgvgrzc
7aV0PexNsS7SRw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:36:06 2026 by rpki-client