Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: Xl8zLP2kN7vGNaKQa7iBufuySV06sHUuQlU02Qry/XY=
Subject key identifier: CF:73:E3:4F:18:DE:B4:A9:D0:CC:89:B7:A6:03:C2:DA:F9:EC:BF:C5
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019EE88D94F9DF4FDFADD231B8BF4C76A0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0C8A
Signing time: Sun 21 Jun 2026 05:00:53 +0000
Manifest this update: Sun 21 Jun 2026 05:00:53 +0000
Manifest next update: Mon 22 Jun 2026 05:00:53 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: 9YNm4pRFqEDrpLDfbmi08Nnm/AlONIYrv20Y3iNxUhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8d:94:f9:df:4f:df:ad:d2:31:b8:bf:4c:76:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Jun 21 05:00:53 2026 GMT
Not After : Jun 22 05:00:53 2026 GMT
Subject: CN=cf73e34f18deb4a9d0cc89b7a603c2daf9ecbfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:9b:19:00:40:00:05:df:26:d7:3f:8b:ef:
cf:c4:af:4f:f5:3d:fb:d9:cd:90:12:cf:01:b0:df:
8d:ff:ca:4c:93:8a:38:8b:88:fc:c9:90:da:6e:9a:
de:25:2c:a6:23:30:48:5c:d3:b9:fc:aa:22:3a:c1:
d0:c9:f9:23:e6:3e:0d:4c:57:23:43:9b:e1:d0:02:
68:87:e9:e5:fa:b8:80:a9:16:d5:bc:9b:9b:56:7c:
0f:48:ed:83:75:75:66:1a:b9:d8:9b:c9:2d:ed:3b:
80:e7:0a:4a:d8:f1:14:77:a3:39:87:03:14:ab:4b:
cf:99:dc:6c:01:2c:65:cc:fe:64:ef:9c:c9:29:cf:
0a:a5:a4:00:3a:48:44:3c:90:a8:68:c9:53:a6:b0:
ff:11:0c:c7:f3:14:99:fb:27:29:dc:f8:c2:57:17:
42:9b:32:30:37:8e:70:c5:a9:a2:f2:fd:80:d1:aa:
14:23:e1:53:92:4c:ad:53:0b:fb:a1:30:01:e6:3a:
d5:b8:2f:df:50:04:af:82:d3:e5:cd:34:2a:95:36:
b9:34:43:38:08:c2:47:4d:93:ab:f9:1a:2e:67:87:
9c:30:34:cd:0a:d4:71:ba:e5:c9:bc:1b:26:89:c3:
25:8f:9a:c7:4b:a2:0c:e9:dc:14:17:80:6d:88:66:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:E3:4F:18:DE:B4:A9:D0:CC:89:B7:A6:03:C2:DA:F9:EC:BF:C5
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:24:63:ba:2d:61:c9:23:bb:18:f3:55:d6:19:91:cb:2d:0e:
65:1b:a4:ea:54:f4:35:46:38:d0:2a:1b:85:9c:20:2c:8c:ee:
9e:28:f2:0b:17:5f:5a:19:fd:50:40:42:31:c1:e3:8c:7c:c7:
9a:3b:83:36:ef:3a:50:5b:92:e4:b8:34:9b:d8:ae:eb:5a:00:
59:5d:c1:98:89:33:ff:f2:ce:f4:47:b2:ce:14:97:aa:1b:b4:
1e:e6:91:ee:79:22:d1:01:c5:09:6b:45:30:df:51:2e:e5:32:
ea:3c:b4:f4:20:e8:c5:b9:c2:e2:15:4c:34:6e:4d:3d:29:e5:
08:12:6a:8c:35:c1:7a:e9:9f:75:ce:cc:86:82:0e:e4:50:66:
19:8d:62:90:dd:20:fb:7d:95:e1:37:d5:16:43:07:36:e9:d1:
d9:90:be:fb:ee:1c:d7:8f:72:ca:e3:83:38:b7:99:21:7c:cf:
25:8a:5d:2e:d1:7f:37:55:03:f7:01:b9:0c:37:0a:97:63:75:
9a:03:7c:cb:d0:d4:59:6e:9b:b4:bc:83:62:0b:ce:21:42:ab:
0d:6c:0c:cf:06:9f:c9:16:fc:30:ff:b6:12:5f:9a:f2:d3:4f:
62:bb:80:e4:18:a5:b5:b9:0d:f2:a8:7e:cb:cc:1f:6c:9d:fa:
42:73:1b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ojZT530/frdIxuL9MdqDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDRiYzg5ZWViNGE5Yzg5ZjEwMDVlYWFkMjI3YzEzMjVl
ZDE1NjIwHhcNMjYwNjIxMDUwMDUzWhcNMjYwNjIyMDUwMDUzWjAzMTEwLwYDVQQD
EyhjZjczZTM0ZjE4ZGViNGE5ZDBjYzg5YjdhNjAzYzJkYWY5ZWNiZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5CbGQBAAAXfJtc/i+/PxK9P9T37
2c2QEs8BsN+N/8pMk4o4i4j8yZDabpreJSymIzBIXNO5/KoiOsHQyfkj5j4NTFcj
Q5vh0AJoh+nl+riAqRbVvJubVnwPSO2DdXVmGrnYm8kt7TuA5wpK2PEUd6M5hwMU
q0vPmdxsASxlzP5k75zJKc8KpaQAOkhEPJCoaMlTprD/EQzH8xSZ+ycp3PjCVxdC
mzIwN45wxami8v2A0aoUI+FTkkytUwv7oTAB5jrVuC/fUASvgtPlzTQqlTa5NEM4
CMJHTZOr+RouZ4ecMDTNCtRxuuXJvBsmicMlj5rHS6IM6dwUF4BtiGY61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9z408Y3rSp0MyJt6YDwtr57L/FMB8GA1UdIwQY
MBaAFHbUvInutKnInxAF6q0ifBMl7RViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt
MDkxZjdmOWI5NzYxLzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx
LzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyRjui1h
ySO7GPNV1hmRyy0OZRuk6lT0NUY40CobhZwgLIzunijyCxdfWhn9UEBCMcHjjHzH
mjuDNu86UFuS5Lg0m9iu61oAWV3BmIkz//LO9EeyzhSXqhu0HuaR7nki0QHFCWtF
MN9RLuUy6jy09CDoxbnC4hVMNG5NPSnlCBJqjDXBeumfdc7MhoIO5FBmGY1ikN0g
+32V4TfVFkMHNunR2ZC+++4c149yyuODOLeZIXzPJYpdLtF/N1UD9wG5DDcKl2N1
mgN8y9DUWW6btLyDYgvOIUKrDWwMzwafyRb8MP+2El+a8tNPYruA5BiltbkN8qh+
y8wfbJ36QnMbXg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 08:24:28 2026 by rpki-client