Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 86Z38J7XH14gs9pjRNVDZbnkASo4t3taFrjonTiXQhQ=
Subject key identifier: C1:44:94:BD:D5:C7:7A:98:B8:92:E9:EF:EB:98:D1:98:6B:69:D7:44
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019ED4998664E792152CE4001DDE0D18C915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 196C
Signing time: Wed 17 Jun 2026 08:01:31 +0000
Manifest this update: Wed 17 Jun 2026 08:01:31 +0000
Manifest next update: Thu 18 Jun 2026 08:01:31 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: PThxvkYoM2ZV/27ns9biLU5Pg9HWwoFo23Sb0zq4i8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:86:64:e7:92:15:2c:e4:00:1d:de:0d:18:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jun 17 08:01:31 2026 GMT
Not After : Jun 18 08:01:31 2026 GMT
Subject: CN=c14494bdd5c77a98b892e9efeb98d1986b69d744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:cb:8a:21:30:76:6d:41:b7:73:e9:bc:76:
96:b5:20:13:0b:e6:30:a9:b0:88:16:17:3f:f3:97:
70:96:3c:80:e7:c3:e6:b9:30:12:a2:0c:c2:ba:82:
c3:4f:6b:6c:ff:dc:92:29:e2:04:24:10:be:2c:33:
4a:98:ae:e0:a5:16:d4:0a:c5:55:78:3d:be:0f:be:
3e:1e:43:8a:18:4b:63:1a:98:ef:f8:ab:39:a5:71:
83:3d:b1:36:7f:91:03:be:0e:8b:5f:4b:b8:9f:19:
97:fe:fe:fe:d9:33:52:3e:a9:c3:3e:47:98:83:32:
f1:0d:22:6d:e8:72:37:eb:34:71:ff:86:d9:5b:7e:
0e:b9:ac:78:71:6d:e0:f3:31:7c:c0:36:97:18:8e:
07:a7:42:6e:80:5f:ce:d2:ef:52:ad:ec:1b:97:c9:
93:d3:06:a0:a6:de:9a:63:67:41:39:1a:fa:cf:ea:
ce:86:90:66:06:bf:72:ce:e4:79:47:96:37:99:4a:
6c:fc:69:31:c0:22:01:01:6b:2b:2d:6e:22:1c:54:
9e:c9:92:bb:6e:5a:5e:de:ab:a2:67:cc:a1:97:92:
e8:7b:17:a2:03:cc:15:3c:44:e1:af:31:53:95:d3:
d2:9e:8a:fb:e5:8a:8f:4b:6d:cd:2e:4b:59:f2:83:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:94:BD:D5:C7:7A:98:B8:92:E9:EF:EB:98:D1:98:6B:69:D7:44
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:be:10:c1:cf:65:f1:69:93:8a:1d:e9:23:a9:6a:7b:2e:
5b:99:69:fb:6e:da:7c:a8:bb:18:2e:e5:d2:c7:37:ae:7f:b6:
5f:67:cd:c1:5b:11:c2:bb:c9:4d:4d:ed:7b:5f:e1:08:0c:60:
2f:64:77:27:11:e2:14:35:0c:db:40:11:55:fd:cb:15:ca:ca:
e2:ee:5e:2f:69:2f:7b:2b:3d:9c:d4:0e:06:44:39:b7:c4:37:
fd:8c:3b:64:ba:14:54:bd:fe:3e:1b:56:5b:4d:ea:fd:26:c8:
7b:24:1a:2c:41:c1:04:9f:6a:1a:41:fb:7b:7c:69:42:31:f5:
e7:34:6e:39:06:75:fe:98:80:ad:57:89:4e:29:66:1e:1d:bf:
f0:8e:17:40:65:47:6f:92:a9:12:90:ed:5a:6b:29:4a:55:c3:
f4:e9:6f:1a:25:8a:ef:75:12:0d:54:a9:c8:2b:9f:f7:80:3f:
e2:a3:e6:17:b4:19:bd:1e:8e:ad:88:1b:e9:e3:b4:ec:59:58:
36:d6:90:2d:2c:cc:b8:49:8a:81:fe:0d:49:ab:97:5d:14:60:
2f:80:d1:76:92:16:2e:3d:95:58:24:da:0a:9b:d1:2a:86:88:
5b:c6:8a:0a:d9:9f:24:57:5b:a9:b5:e0:ea:ad:05:8a:7a:a4:
cf:f6:ae:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UmYZk55IVLOQAHd4NGMkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2
MGQxNzYwHhcNMjYwNjE3MDgwMTMxWhcNMjYwNjE4MDgwMTMxWjAzMTEwLwYDVQQD
EyhjMTQ0OTRiZGQ1Yzc3YTk4Yjg5MmU5ZWZlYjk4ZDE5ODZiNjlkNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh3LiiEwdm1Bt3PpvHaWtSATC+Yw
qbCIFhc/85dwljyA58PmuTASogzCuoLDT2ts/9ySKeIEJBC+LDNKmK7gpRbUCsVV
eD2+D74+HkOKGEtjGpjv+Ks5pXGDPbE2f5EDvg6LX0u4nxmX/v7+2TNSPqnDPkeY
gzLxDSJt6HI36zRx/4bZW34Ouax4cW3g8zF8wDaXGI4Hp0JugF/O0u9Srewbl8mT
0wagpt6aY2dBORr6z+rOhpBmBr9yzuR5R5Y3mUps/GkxwCIBAWsrLW4iHFSeyZK7
blpe3quiZ8yhl5LoexeiA8wVPEThrzFTldPSnor75YqPS23NLktZ8oNfxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFElL3Vx3qYuJLp7+uY0ZhraddEMB8GA1UdIwQY
MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt
MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5
LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6W+EMHP
ZfFpk4od6SOpansuW5lp+27afKi7GC7l0sc3rn+2X2fNwVsRwrvJTU3te1/hCAxg
L2R3JxHiFDUM20ARVf3LFcrK4u5eL2kveys9nNQOBkQ5t8Q3/Yw7ZLoUVL3+PhtW
W03q/SbIeyQaLEHBBJ9qGkH7e3xpQjH15zRuOQZ1/piArVeJTilmHh2/8I4XQGVH
b5KpEpDtWmspSlXD9OlvGiWK73USDVSpyCuf94A/4qPmF7QZvR6OrYgb6eO07FlY
NtaQLSzMuEmKgf4NSauXXRRgL4DRdpIWLj2VWCTaCpvRKoaIW8aKCtmfJFdbqbXg
6q0Finqkz/auXA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:02 2026 by rpki-client