
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: YrZnuDxU6ON6CAJIouqFnO/K8m4rqVESzCFqJX+q7lQ=
Subject key identifier: 39:40:CD:D2:9E:A3:FA:0B:1F:1A:BE:16:C3:4C:43:25:21:75:DE:8B
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019E1CEC10CE39B75D7B920C434EB98F49EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 06D6
Signing time: Tue 12 May 2026 16:01:33 +0000
Manifest this update: Tue 12 May 2026 16:01:33 +0000
Manifest next update: Wed 13 May 2026 16:01:33 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: D+TepejVDkYjI4VYAShcozW4fZQqBAGg/KUkJtCpy48=)
3: wYNkgivHmczBfVK47-ZJaMoKgac.asa (hash: 1Kkc1HWLJWlsQ7tek7Nc/E33P76aNAyNEBUZAmhQX4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:10:ce:39:b7:5d:7b:92:0c:43:4e:b9:8f:49:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: May 12 16:01:33 2026 GMT
Not After : May 13 16:01:33 2026 GMT
Subject: CN=3940cdd29ea3fa0b1f1abe16c34c43252175de8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:cf:b8:cc:c9:9b:81:34:ca:33:85:12:14:
ab:ba:d0:46:eb:ee:b3:12:90:03:cb:d3:76:97:d5:
30:10:46:47:f1:36:98:2c:44:c4:69:2a:d2:9b:cb:
e8:9c:41:75:f1:70:02:b7:e1:d5:8a:b4:05:ec:ed:
00:11:cc:65:30:92:ae:e0:27:7c:82:17:85:08:6f:
5d:23:88:7f:4b:7d:8f:aa:2f:5f:81:08:fd:6d:51:
a6:5e:72:82:b1:76:1f:66:33:81:e9:e3:13:48:8b:
82:db:3b:3f:d8:e6:62:f8:d8:98:aa:a2:6a:e2:70:
12:76:eb:e1:14:0e:af:cb:74:30:5b:fe:bf:b6:39:
1b:6c:44:b3:eb:89:16:98:57:34:8e:c0:93:f3:1c:
9f:fa:c6:2d:2d:6f:07:80:d1:b2:ca:2b:58:ad:d9:
1c:e6:a8:b7:eb:d1:2c:b6:f5:cc:97:0f:1e:06:83:
c9:dc:6e:19:c2:52:1e:fc:99:77:b2:c5:ce:5c:58:
fa:4a:74:56:5e:f0:7f:3b:0e:94:05:9e:2b:de:bd:
3d:51:af:15:60:f2:1b:79:ce:4e:9a:7e:e8:dc:ea:
0d:dc:d9:24:bd:13:1b:3e:88:95:bb:6f:96:8d:62:
6e:33:de:51:a8:b2:ae:67:bb:b2:67:2a:c8:9f:83:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:CD:D2:9E:A3:FA:0B:1F:1A:BE:16:C3:4C:43:25:21:75:DE:8B
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:18:c9:f7:d3:0b:8a:5b:a0:47:e4:3b:ba:46:54:27:17:
6a:a5:8d:1b:53:6e:bb:4d:f6:1d:35:dd:d7:f8:8a:e0:63:05:
e5:f1:6c:1f:8f:ba:44:2d:b5:a4:20:86:df:98:fe:2d:30:3a:
41:0b:73:6b:d2:e4:88:3b:17:77:9d:75:b5:0c:de:9e:6e:a1:
4c:41:9b:f4:be:47:8d:f4:6e:70:33:46:11:40:a1:87:50:a5:
af:6a:c0:e3:7b:3a:76:57:90:b0:fd:7f:21:75:d7:c1:4b:99:
ef:be:be:89:97:e4:99:7c:5e:6b:7b:b4:67:0a:a8:26:49:ae:
9e:47:a7:ff:ed:9a:1e:5b:e8:45:b3:12:0a:6d:39:8f:51:42:
f1:2f:04:f3:33:4d:9b:e5:5e:7b:1b:8e:47:b4:f1:cd:b0:86:
50:cf:4f:36:68:0f:fd:c1:0c:be:d9:08:e9:c2:79:d0:2d:29:
de:74:ba:ac:b8:14:15:f4:06:18:eb:54:b2:e0:ec:8d:e6:4b:
43:4d:62:24:8f:8a:77:3d:27:0c:d3:42:85:27:4d:8f:3f:66:
d0:0f:44:58:fc:56:29:10:c3:8e:3e:d6:ca:51:17:96:bb:d0:
a4:2a:16:ee:23:25:26:19:36:28:b4:14:db:09:47:e3:ad:10:
00:5f:32:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7BDOObdde5IMQ065j0nuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw
YWI2MzkwHhcNMjYwNTEyMTYwMTMzWhcNMjYwNTEzMTYwMTMzWjAzMTEwLwYDVQQD
EygzOTQwY2RkMjllYTNmYTBiMWYxYWJlMTZjMzRjNDMyNTIxNzVkZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiePPuMzJm4E0yjOFEhSrutBG6+6z
EpADy9N2l9UwEEZH8TaYLETEaSrSm8vonEF18XACt+HVirQF7O0AEcxlMJKu4Cd8
gheFCG9dI4h/S32Pqi9fgQj9bVGmXnKCsXYfZjOB6eMTSIuC2zs/2OZi+NiYqqJq
4nASduvhFA6vy3QwW/6/tjkbbESz64kWmFc0jsCT8xyf+sYtLW8HgNGyyitYrdkc
5qi369EstvXMlw8eBoPJ3G4ZwlIe/Jl3ssXOXFj6SnRWXvB/Ow6UBZ4r3r09Ua8V
YPIbec5Omn7o3OoN3NkkvRMbPoiVu2+WjWJuM95RqLKuZ7uyZyrIn4NRIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlAzdKeo/oLHxq+FsNMQyUhdd6LMB8GA1UdIwQY
MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt
ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz
LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGwYyffT
C4pboEfkO7pGVCcXaqWNG1Nuu032HTXd1/iK4GMF5fFsH4+6RC21pCCG35j+LTA6
QQtza9LkiDsXd511tQzenm6hTEGb9L5HjfRucDNGEUChh1Clr2rA43s6dleQsP1/
IXXXwUuZ776+iZfkmXxea3u0ZwqoJkmunken/+2aHlvoRbMSCm05j1FC8S8E8zNN
m+VeexuOR7TxzbCGUM9PNmgP/cEMvtkI6cJ50C0p3nS6rLgUFfQGGOtUsuDsjeZL
Q01iJI+Kdz0nDNNChSdNjz9m0A9EWPxWKRDDjj7WylEXlrvQpCoW7iMlJhk2KLQU
2wlH460QAF8ynQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:26:38 2026 by rpki-client