Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: hawqheRgzZM8wfp1FzOVlI91cGLomhLoeMHbh/UZSxA=
Subject key identifier: 0E:AD:81:EE:36:60:8A:D8:F2:99:F5:42:1E:73:C9:E2:8F:24:6D:DD
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019EC1B68B1A3471824DFDA64FE703789272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 16:00:26 +0000
Manifest this update: Sat 13 Jun 2026 16:00:26 +0000
Manifest next update: Sun 14 Jun 2026 16:00:26 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: ASMvCQ/xg5ypFTlGbgp8N1ATox0gn5Su8ZsyJwDI0HA=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:8b:1a:34:71:82:4d:fd:a6:4f:e7:03:78:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jun 13 16:00:26 2026 GMT
Not After : Jun 14 16:00:26 2026 GMT
Subject: CN=0ead81ee36608ad8f299f5421e73c9e28f246ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:ef:04:d1:a9:28:fa:be:1a:6d:fe:82:fb:
a6:6c:fd:8b:a8:da:7c:c5:6d:0b:d5:8c:c1:9e:02:
0e:22:45:6f:68:6e:c9:a5:6b:3f:8b:2b:cd:73:32:
70:76:be:47:8d:58:4e:3c:7c:fb:84:ca:53:42:48:
4c:41:5e:e5:46:6a:47:12:c5:7a:9c:b3:73:e5:2c:
05:86:1f:01:2c:d7:3f:6b:11:eb:9b:bb:bd:ec:38:
fd:dd:fc:72:66:b4:77:1e:85:2e:bb:dc:41:7a:98:
6a:b6:58:f1:01:28:99:ca:bf:47:a5:aa:03:53:11:
51:7b:4f:36:d4:57:e0:f3:8c:a0:12:41:75:99:12:
3f:a4:cd:82:7d:2b:04:7f:fc:be:b8:f4:65:64:c6:
90:97:9b:0b:07:11:73:dc:5a:14:d4:9d:8b:42:cb:
23:77:32:6d:dc:82:3a:13:1e:fd:98:0c:3d:8e:ef:
0c:07:1a:45:17:b8:cc:ec:8c:25:a5:b6:82:91:fe:
e0:b7:ac:52:f1:0f:04:a4:03:81:9d:2a:d2:b6:3b:
f3:fa:65:94:3f:25:79:fe:31:5b:00:3a:db:53:7b:
0d:25:af:f8:c9:52:1d:8b:1a:5d:95:5e:e8:85:ae:
fe:2b:d6:ec:3d:da:d4:41:7f:33:60:74:08:29:be:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:81:EE:36:60:8A:D8:F2:99:F5:42:1E:73:C9:E2:8F:24:6D:DD
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:25:20:b6:c1:e8:c0:98:4d:7a:0f:98:50:0e:2b:aa:b7:04:
e7:af:4d:23:f6:55:75:fb:55:37:5b:ef:df:ec:40:f3:39:4b:
af:80:c7:0c:ad:54:dc:5f:12:14:91:53:68:23:72:a6:f0:47:
94:97:b8:00:b5:7c:e9:67:8e:69:2f:b1:0c:21:7d:06:c6:aa:
98:b9:dd:8a:43:95:39:4f:96:2e:68:ad:5d:af:fd:e5:1b:e7:
93:98:96:fd:61:62:b9:2b:9d:5c:0b:3d:99:b8:df:98:17:3e:
c4:5e:48:2d:c3:96:da:ca:94:f3:f1:d6:ac:a2:06:17:63:98:
7a:40:fa:05:a2:50:81:ed:52:05:8a:04:2c:ca:12:2a:89:72:
0d:ea:bf:2f:02:fc:77:67:02:c9:d0:fe:12:f3:b6:3b:25:00:
ab:28:dc:4f:b5:9c:00:19:83:0c:ee:be:d7:8b:61:bb:f8:98:
ae:2e:af:ce:11:78:15:95:29:39:7a:13:ab:49:dc:aa:71:91:
9e:51:bc:53:e9:ef:29:1d:19:1b:11:23:c3:7f:3a:02:aa:de:
ab:f4:eb:ba:cd:aa:ab:3d:27:89:92:63:aa:3b:a4:7c:77:24:
c1:49:40:eb:8d:7c:0e:8a:df:a7:06:47:9b:20:82:6a:3b:b2:
fe:75:e2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtosaNHGCTf2mT+cDeJJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjYwNjEzMTYwMDI2WhcNMjYwNjE0MTYwMDI2WjAzMTEwLwYDVQQD
EygwZWFkODFlZTM2NjA4YWQ4ZjI5OWY1NDIxZTczYzllMjhmMjQ2ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxrvBNGpKPq+Gm3+gvumbP2LqNp8
xW0L1YzBngIOIkVvaG7JpWs/iyvNczJwdr5HjVhOPHz7hMpTQkhMQV7lRmpHEsV6
nLNz5SwFhh8BLNc/axHrm7u97Dj93fxyZrR3HoUuu9xBephqtljxASiZyr9HpaoD
UxFRe0821Ffg84ygEkF1mRI/pM2CfSsEf/y+uPRlZMaQl5sLBxFz3FoU1J2LQssj
dzJt3II6Ex79mAw9ju8MBxpFF7jM7IwlpbaCkf7gt6xS8Q8EpAOBnSrStjvz+mWU
PyV5/jFbADrbU3sNJa/4yVIdixpdlV7oha7+K9bsPdrUQX8zYHQIKb5zAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6tge42YIrY8pn1Qh5zyeKPJG3dMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyUgtsHo
wJhNeg+YUA4rqrcE569NI/ZVdftVN1vv3+xA8zlLr4DHDK1U3F8SFJFTaCNypvBH
lJe4ALV86WeOaS+xDCF9BsaqmLndikOVOU+WLmitXa/95Rvnk5iW/WFiuSudXAs9
mbjfmBc+xF5ILcOW2sqU8/HWrKIGF2OYekD6BaJQge1SBYoELMoSKolyDeq/LwL8
d2cCydD+EvO2OyUAqyjcT7WcABmDDO6+14thu/iYri6vzhF4FZUpOXoTq0ncqnGR
nlG8U+nvKR0ZGxEjw386Aqreq/Trus2qqz0niZJjqjukfHckwUlA6418DorfpwZH
myCCajuy/nXi0g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:32 2026 by rpki-client