Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: JNVdIbdB7zTltIiJSH0Gte+SdA8NHBQQ0a+1FLf1bv0=
Subject key identifier: 68:2E:1B:A9:43:6B:1A:D1:4A:68:F1:F8:2F:7F:03:07:26:6F:DE:F3
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019ED38615065CCE2CC9FAD3EF70B60C8071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0EB9
Signing time: Wed 17 Jun 2026 03:00:40 +0000
Manifest this update: Wed 17 Jun 2026 03:00:40 +0000
Manifest next update: Thu 18 Jun 2026 03:00:40 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: SiUsTehFJZAYdt44D2B01BlxqgXSnRMOdbBnRL1LF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:15:06:5c:ce:2c:c9:fa:d3:ef:70:b6:0c:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jun 17 03:00:40 2026 GMT
Not After : Jun 18 03:00:40 2026 GMT
Subject: CN=682e1ba9436b1ad14a68f1f82f7f0307266fdef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:4e:59:93:68:63:74:cb:54:2c:b7:f5:7c:
6b:e3:47:a5:ec:d2:d6:f8:c0:fd:e8:b8:2a:e2:98:
ae:18:13:2a:9c:f1:5e:cc:8b:2e:8b:26:9a:bd:0f:
97:cd:20:10:f4:09:eb:d1:54:66:e5:06:ec:19:1f:
0a:c6:e4:44:eb:b2:01:22:af:d7:25:47:e4:8f:ad:
a7:3c:74:b4:64:25:b0:2b:8d:09:d9:4b:9e:e8:34:
d9:ed:4e:f6:ca:24:09:cc:21:f8:7d:e9:dc:4c:51:
44:c4:a4:56:59:31:07:0c:59:bc:48:8e:48:7a:72:
87:82:8a:c5:6d:e6:70:8f:9c:c0:7c:29:f6:05:26:
ee:f5:23:7e:8c:58:a5:21:94:b5:11:8a:a4:78:c3:
7e:f3:9f:88:b3:f9:7e:29:c0:7e:16:9f:af:2b:07:
4a:13:c7:66:61:23:c0:b0:a2:b1:28:5f:7d:ef:72:
c3:82:6a:65:a1:06:88:05:a4:92:25:3f:7d:43:cc:
e4:33:90:fd:2a:35:25:43:d3:46:74:63:d2:66:6e:
f1:c6:70:9b:28:99:2f:39:4b:61:b3:ca:9b:57:c2:
5c:a5:6c:6c:41:d4:7c:1c:14:88:a5:47:71:82:46:
25:b9:ab:39:b1:56:52:d8:6e:db:6b:e8:9e:cd:c1:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2E:1B:A9:43:6B:1A:D1:4A:68:F1:F8:2F:7F:03:07:26:6F:DE:F3
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:63:be:0c:8f:02:fc:70:3d:1b:e1:93:57:a4:07:a8:1e:
0f:ec:16:2b:61:8f:2a:b6:e3:41:ed:1b:1a:f5:61:d3:da:96:
d2:e8:62:d3:98:1a:43:93:ab:df:6c:bf:5d:a0:36:b5:e3:d7:
e0:e8:8e:53:f8:44:55:a5:6f:19:02:e7:e2:0e:3a:e7:64:f1:
90:ca:e4:7d:79:ff:87:8d:28:e7:1b:4f:99:f1:39:cf:38:ae:
7a:09:87:e2:58:59:90:f9:97:fc:b5:e8:cc:19:b3:5d:80:dc:
a4:f0:0c:ae:60:bf:6b:2c:c8:28:7e:22:a0:0e:71:80:e7:54:
dc:e1:0b:f3:0c:64:db:ad:60:7c:65:74:85:bb:51:e6:f6:06:
f1:00:2d:dd:74:91:3a:64:5a:4d:6f:09:84:05:ea:9c:04:84:
de:bb:6d:73:e7:7f:ab:6d:c3:23:21:af:56:6c:bf:3b:9f:bc:
78:5c:f0:b2:9f:e3:29:ae:0b:22:79:ab:68:23:9b:2a:14:fb:
30:43:98:fb:7e:c2:90:19:69:29:76:69:6e:6e:fe:80:53:66:
df:ea:d8:f1:98:ad:b4:19:88:e7:88:c6:22:b3:ac:56:29:d0:
58:b1:33:29:80:be:f1:e8:c0:91:0a:47:26:d0:fb:4f:3a:97:
a5:40:fb:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ThhUGXM4syfrT73C2DIBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjYwNjE3MDMwMDQwWhcNMjYwNjE4MDMwMDQwWjAzMTEwLwYDVQQD
Eyg2ODJlMWJhOTQzNmIxYWQxNGE2OGYxZjgyZjdmMDMwNzI2NmZkZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ANOWZNoY3TLVCy39Xxr40el7NLW
+MD96Lgq4piuGBMqnPFezIsuiyaavQ+XzSAQ9Anr0VRm5QbsGR8KxuRE67IBIq/X
JUfkj62nPHS0ZCWwK40J2Uue6DTZ7U72yiQJzCH4fencTFFExKRWWTEHDFm8SI5I
enKHgorFbeZwj5zAfCn2BSbu9SN+jFilIZS1EYqkeMN+85+Is/l+KcB+Fp+vKwdK
E8dmYSPAsKKxKF9973LDgmploQaIBaSSJT99Q8zkM5D9KjUlQ9NGdGPSZm7xxnCb
KJkvOUths8qbV8JcpWxsQdR8HBSIpUdxgkYluas5sVZS2G7ba+iezcF07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGguG6lDaxrRSmjx+C9/Awcmb97zMB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex9jvgyP
AvxwPRvhk1ekB6geD+wWK2GPKrbjQe0bGvVh09qW0uhi05gaQ5Or32y/XaA2tePX
4OiOU/hEVaVvGQLn4g4652TxkMrkfXn/h40o5xtPmfE5zziuegmH4lhZkPmX/LXo
zBmzXYDcpPAMrmC/ayzIKH4ioA5xgOdU3OEL8wxk261gfGV0hbtR5vYG8QAt3XSR
OmRaTW8JhAXqnASE3rttc+d/q23DIyGvVmy/O5+8eFzwsp/jKa4LInmraCObKhT7
MEOY+37CkBlpKXZpbm7+gFNm3+rY8ZittBmI54jGIrOsVinQWLEzKYC+8ejAkQpH
JtD7TzqXpUD7DA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:44:40 2026 by rpki-client