Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: uq9lrDmqu8+HcQoNvJMf993y7KZFN4fdbfm9qPdHjTQ=
Subject key identifier: BF:20:C8:0C:55:35:67:F2:41:B7:6D:84:3C:6B:79:11:33:2F:A1:9E
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019EFD277B50EAC7229BC0C53549FC29CCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1978
Signing time: Thu 25 Jun 2026 05:01:23 +0000
Manifest this update: Thu 25 Jun 2026 05:01:23 +0000
Manifest next update: Fri 26 Jun 2026 05:01:23 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: gMM2k2yEikhH8XYrjBHm7WU9M2v9xBy4tMrAlOvOCTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:7b:50:ea:c7:22:9b:c0:c5:35:49:fc:29:cc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Jun 25 05:01:23 2026 GMT
Not After : Jun 26 05:01:23 2026 GMT
Subject: CN=bf20c80c553567f241b76d843c6b7911332fa19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:88:f4:66:e5:0e:8d:2d:f3:93:7c:1a:e3:
7f:46:3a:b5:ee:b9:54:35:08:e3:e5:cb:77:92:a5:
cf:44:1f:f3:48:cc:35:90:3c:ce:d5:78:d7:6a:9c:
a8:64:63:30:ad:f8:cb:43:14:a8:87:49:71:b2:ea:
27:75:d9:22:40:1d:06:8d:dc:a2:67:e8:d0:e6:f6:
b1:8b:70:e7:3f:03:db:0a:ea:10:1f:58:b7:a8:bb:
95:4e:a9:36:a6:3e:99:f3:33:5d:3a:6e:ca:84:a0:
dd:2a:d9:3a:6e:db:93:c1:9a:38:64:ba:ab:58:93:
ad:93:bb:40:a5:c1:72:bd:51:af:0f:0f:8e:61:f6:
a5:c1:51:f9:14:be:01:90:50:3b:d8:29:c9:16:b8:
1a:c9:9a:92:e5:07:3a:a6:85:0c:e8:e1:9d:c6:b9:
48:21:0f:92:d5:a9:f0:da:b8:e3:d0:cd:1b:24:db:
7d:ff:b2:5d:aa:f3:33:ac:e1:b8:46:c9:59:eb:8a:
ee:b5:e9:90:94:e8:27:e1:45:a2:d7:d7:1c:bb:5c:
5b:fc:81:b6:9c:0c:9f:6d:64:d1:2c:45:ff:72:b1:
5d:ef:a3:a9:70:c5:ed:e8:9c:08:2c:72:a7:70:5e:
81:cb:a4:09:f4:54:99:24:c5:ff:b3:67:ab:07:52:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:C8:0C:55:35:67:F2:41:B7:6D:84:3C:6B:79:11:33:2F:A1:9E
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:74:6d:15:c6:58:48:ad:71:6c:d8:5d:07:32:b1:da:c8:5e:
ed:27:a6:53:7b:57:60:e3:45:31:e0:0a:dd:9a:3a:df:c7:66:
22:fd:5f:a3:a1:8b:6b:50:db:01:4c:ac:17:0b:29:21:53:5b:
25:4f:ed:bd:30:c1:8a:6e:01:03:4c:83:07:54:f9:0f:2d:81:
4f:4a:89:8f:74:8c:7d:de:66:6c:08:f9:03:73:32:ba:2e:4f:
4b:a0:56:e1:78:82:3c:e3:2b:2e:f1:f0:fd:e3:9e:2e:4f:ff:
c6:3e:f5:8a:0f:bf:8a:b2:97:dd:7c:ee:f1:37:7b:d7:99:04:
12:d5:f9:9b:7c:27:44:18:59:f0:3a:94:19:1b:a2:23:12:44:
fb:be:b8:1f:1b:41:af:c3:26:00:3c:9c:32:34:74:9c:8f:3d:
70:ca:53:18:97:96:59:c9:68:82:ef:25:bb:7a:f9:9e:30:a6:
8a:3e:51:73:1e:a4:2f:00:32:77:27:71:bb:eb:51:47:aa:71:
15:db:93:59:6a:6f:a8:b2:c7:2c:2c:d5:13:91:40:21:ac:a0:
6e:b7:16:26:72:6d:1e:58:36:6d:b7:3b:91:37:18:95:ce:51:
2b:3b:12:46:b2:fc:f9:e0:fb:21:e3:02:46:c7:f6:42:6e:89:
aa:55:0f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79J3tQ6scim8DFNUn8KczMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1
NTdmYTEwHhcNMjYwNjI1MDUwMTIzWhcNMjYwNjI2MDUwMTIzWjAzMTEwLwYDVQQD
EyhiZjIwYzgwYzU1MzU2N2YyNDFiNzZkODQzYzZiNzkxMTMzMmZhMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniaI9GblDo0t85N8GuN/Rjq17rlU
NQjj5ct3kqXPRB/zSMw1kDzO1XjXapyoZGMwrfjLQxSoh0lxsuonddkiQB0Gjdyi
Z+jQ5vaxi3DnPwPbCuoQH1i3qLuVTqk2pj6Z8zNdOm7KhKDdKtk6btuTwZo4ZLqr
WJOtk7tApcFyvVGvDw+OYfalwVH5FL4BkFA72CnJFrgayZqS5Qc6poUM6OGdxrlI
IQ+S1anw2rjj0M0bJNt9/7JdqvMzrOG4RslZ64rutemQlOgn4UWi19ccu1xb/IG2
nAyfbWTRLEX/crFd76OpcMXt6JwILHKncF6By6QJ9FSZJMX/s2erB1L7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8gyAxVNWfyQbdthDxreREzL6GeMB8GA1UdIwQY
MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt
NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm
LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXRtFcZY
SK1xbNhdBzKx2she7SemU3tXYONFMeAK3Zo638dmIv1fo6GLa1DbAUysFwspIVNb
JU/tvTDBim4BA0yDB1T5Dy2BT0qJj3SMfd5mbAj5A3Myui5PS6BW4XiCPOMrLvHw
/eOeLk//xj71ig+/irKX3Xzu8Td715kEEtX5m3wnRBhZ8DqUGRuiIxJE+764HxtB
r8MmADycMjR0nI89cMpTGJeWWclogu8lu3r5njCmij5Rcx6kLwAydydxu+tRR6px
FduTWWpvqLLHLCzVE5FAIaygbrcWJnJtHlg2bbc7kTcYlc5RKzsSRrL8+eD7IeMC
Rsf2Qm6JqlUPzw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:15 2026 by rpki-client