Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: Ufm4TQhIHMVmnu1HE0QLB5EyAa98eEHDG7oaJIE2z1s=
Subject key identifier: 8B:A5:72:CF:39:99:37:2E:13:9A:4E:20:72:61:24:88:0C:5C:C3:02
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019F190CBFC2B2BD84F776F832FC27EE6011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:33 +0000
Manifest this update: Tue 30 Jun 2026 15:01:33 +0000
Manifest next update: Wed 01 Jul 2026 15:01:33 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: KhminSOLVTG/IeQi1nQDfCp3i84z4TdZPLhHzh2sl3o=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:bf:c2:b2:bd:84:f7:76:f8:32:fc:27:ee:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jun 30 15:01:33 2026 GMT
Not After : Jul 1 15:01:33 2026 GMT
Subject: CN=8ba572cf3999372e139a4e20726124880c5cc302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:ca:ac:97:d9:d2:49:df:d2:fd:7b:79:54:
72:42:66:6d:24:48:2c:86:e5:5c:e7:9f:bc:d5:bb:
ec:9e:d3:a9:02:3a:12:22:6f:7d:46:7e:5a:51:bd:
12:20:8c:6c:14:90:31:45:a9:d2:bb:00:eb:84:7e:
2e:9a:5b:a3:4b:f4:33:cf:d2:bb:08:07:46:69:86:
78:34:d7:f1:cb:9c:c7:2d:71:42:35:eb:db:da:4c:
10:b2:44:d5:48:03:1d:22:b5:5a:6c:e5:25:27:9a:
b4:91:5a:c7:d7:ec:3c:b4:3e:ae:41:0e:b7:d6:5f:
37:60:8f:ac:fd:a4:f3:fd:00:2c:46:fb:ea:8f:0c:
d0:b4:06:83:01:61:61:a0:f5:0c:79:61:b1:13:0d:
ae:27:f4:99:a6:20:bc:44:c3:bc:3b:3c:b5:0b:46:
3f:c1:d7:89:78:28:0a:63:b3:94:87:02:8c:88:2c:
0a:0c:66:b1:1b:2a:ca:cb:e3:e2:88:3c:8e:f8:12:
67:a9:df:8c:5b:63:66:d7:c6:e5:2b:dc:64:27:39:
40:0c:18:46:22:c4:57:40:cc:ec:1a:13:cc:dd:f7:
d0:07:b5:c3:b4:98:77:73:50:22:c3:e0:0a:50:d5:
a1:88:0d:dd:d2:94:1b:0f:79:e1:bf:9d:d8:e3:a4:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:72:CF:39:99:37:2E:13:9A:4E:20:72:61:24:88:0C:5C:C3:02
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:36:a8:a8:87:e3:e1:5e:de:8a:a6:8b:e8:5b:3d:10:5b:a9:
5d:25:c9:23:67:da:3b:09:9f:fc:1f:5e:39:14:ca:7a:f4:d9:
60:17:11:31:3d:b2:b9:98:88:3e:80:b7:69:92:d3:22:f2:dd:
c8:8f:9d:2c:35:e1:ae:81:0d:10:51:1c:be:fc:77:ca:cc:d3:
7e:82:6d:fd:f9:0e:e2:68:0f:76:f9:97:ce:b0:4f:33:d4:83:
3d:fc:3d:ed:21:52:1f:4e:86:2b:31:54:08:8f:77:40:60:33:
44:69:e7:b1:26:b7:79:9b:38:59:74:37:d7:1b:09:b8:3f:8a:
53:ad:09:48:33:ea:17:8a:b9:79:50:73:97:79:0c:b3:80:3a:
66:62:25:9f:5c:d5:4e:4a:fc:9f:d8:33:8a:f9:f9:4a:75:4e:
b3:5d:9f:f8:bd:00:1f:ed:9c:ce:47:97:02:a9:22:bc:3a:3a:
d3:92:df:18:49:db:bf:54:33:df:a2:5e:35:eb:24:68:ef:26:
84:db:46:00:b6:52:ad:02:e5:7e:9d:ee:de:77:b8:7a:3a:25:
4f:24:85:0b:7f:d0:f4:e1:04:66:51:c3:4d:25:1f:82:68:4c:
e9:98:fa:fa:81:4b:c1:fb:21:4f:e3:23:48:50:2b:f6:eb:a3:
ed:0e:cb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDL/Csr2E93b4Mvwn7mARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjYwNjMwMTUwMTMzWhcNMjYwNzAxMTUwMTMzWjAzMTEwLwYDVQQD
Eyg4YmE1NzJjZjM5OTkzNzJlMTM5YTRlMjA3MjYxMjQ4ODBjNWNjMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbKrJfZ0knf0v17eVRyQmZtJEgs
huVc55+81bvsntOpAjoSIm99Rn5aUb0SIIxsFJAxRanSuwDrhH4umlujS/Qzz9K7
CAdGaYZ4NNfxy5zHLXFCNevb2kwQskTVSAMdIrVabOUlJ5q0kVrH1+w8tD6uQQ63
1l83YI+s/aTz/QAsRvvqjwzQtAaDAWFhoPUMeWGxEw2uJ/SZpiC8RMO8Ozy1C0Y/
wdeJeCgKY7OUhwKMiCwKDGaxGyrKy+PiiDyO+BJnqd+MW2Nm18blK9xkJzlADBhG
IsRXQMzsGhPM3ffQB7XDtJh3c1Aiw+AKUNWhiA3d0pQbD3nhv53Y46QOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIulcs85mTcuE5pOIHJhJIgMXMMCMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzaoqIfj
4V7eiqaL6Fs9EFupXSXJI2faOwmf/B9eORTKevTZYBcRMT2yuZiIPoC3aZLTIvLd
yI+dLDXhroENEFEcvvx3yszTfoJt/fkO4mgPdvmXzrBPM9SDPfw97SFSH06GKzFU
CI93QGAzRGnnsSa3eZs4WXQ31xsJuD+KU60JSDPqF4q5eVBzl3kMs4A6ZmIln1zV
Tkr8n9gzivn5SnVOs12f+L0AH+2czkeXAqkivDo605LfGEnbv1Qz36JeNeskaO8m
hNtGALZSrQLlfp3u3ne4ejolTySFC3/Q9OEEZlHDTSUfgmhM6Zj6+oFLwfshT+Mj
SFAr9uuj7Q7Ltg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:51 2026 by rpki-client