Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: lQ9HQ1fQsYfjfRTFhuW1CWc8kxojfgmdEXtkpUdEhMo=
Subject key identifier: EC:E3:CB:9E:13:C7:B3:13:34:31:B7:D1:7A:B6:5A:07:CC:11:43:71
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019F17C335792CD7256BA172A1841B6E702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0BDD
Signing time: Tue 30 Jun 2026 09:01:36 +0000
Manifest this update: Tue 30 Jun 2026 09:01:36 +0000
Manifest next update: Wed 01 Jul 2026 09:01:36 +0000
Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: chBjWpPsT5nnr9mlKmbrUyNOlu8Wehg+40Gksm72Sik=)
2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:35:79:2c:d7:25:6b:a1:72:a1:84:1b:6e:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Jun 30 09:01:36 2026 GMT
Not After : Jul 1 09:01:36 2026 GMT
Subject: CN=ece3cb9e13c7b3133431b7d17ab65a07cc114371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:e2:bc:c6:30:d4:21:15:fa:ba:ee:e5:5c:
2c:2b:78:f6:24:0d:35:6a:5e:81:18:30:34:81:97:
e4:3a:c2:96:c6:35:bb:d7:03:de:01:51:7c:e5:54:
89:e3:9a:10:a3:f0:15:28:2d:ca:06:82:c9:7d:45:
37:0f:c4:0c:b0:ed:81:08:ff:f9:14:9a:01:72:de:
03:15:d5:5e:40:28:5e:be:89:43:27:5d:03:cf:61:
36:fb:91:66:6f:53:6d:53:2f:d5:4b:f7:b5:3b:e0:
23:d5:c7:e9:68:f8:8d:29:e9:99:76:ab:fc:79:8b:
68:79:07:57:01:f4:e6:e3:20:ad:b1:fa:91:d9:fe:
76:a4:ec:af:f3:4b:64:bd:ca:d8:53:7c:54:e6:84:
28:a6:02:94:b5:3c:61:b3:fe:fc:d7:11:59:f7:5d:
5d:3c:07:a8:c7:4c:2f:29:40:43:3b:74:4f:7d:cb:
28:1a:c4:43:21:30:5f:0d:b4:a2:21:d6:ae:99:bc:
02:b7:e2:74:6b:1a:53:37:0e:f3:a6:05:a1:ec:8b:
ab:21:d1:25:4e:ce:38:6c:a4:23:9e:5b:1f:32:39:
a9:fd:f3:9d:56:0a:5f:c1:7e:de:4c:14:f1:53:21:
a7:b7:63:1e:83:fc:ad:8f:31:e1:5e:d1:4c:c6:b1:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:CB:9E:13:C7:B3:13:34:31:B7:D1:7A:B6:5A:07:CC:11:43:71
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:47:df:f8:ae:5e:b0:ca:c7:83:b1:c2:99:23:55:a2:17:dc:
98:75:fb:60:3f:be:e2:e9:2c:7e:93:ff:7e:3f:bd:11:9a:74:
b0:92:f9:50:55:b3:ec:b3:22:28:a7:85:cd:59:67:f8:df:aa:
af:2f:19:18:f5:b9:1c:24:9b:b2:36:8f:a9:cb:22:99:b3:d0:
3f:d0:48:84:0d:46:8e:96:34:40:16:cd:0a:39:7b:66:b5:25:
c7:ad:16:4c:f7:fe:e5:00:c7:bc:20:bc:eb:58:b7:1a:3a:c5:
b8:8b:f7:4e:4f:be:4f:da:28:5e:6b:ec:a0:6e:96:6a:61:8c:
a9:23:c0:b2:3b:50:67:6b:a2:5b:22:75:c2:a3:da:ca:51:d4:
8e:c3:cb:c5:67:cb:5e:10:6a:5d:37:1b:0b:1a:c7:ec:2c:e3:
6d:4f:f6:07:e5:97:12:e4:bb:75:bc:d6:ca:59:f2:64:ce:a7:
3d:3e:6d:37:db:74:d9:5c:b3:79:30:e1:3a:bc:88:62:96:8c:
25:79:5b:8b:d4:73:a7:9b:ee:b3:aa:52:44:23:35:99:cc:fd:
ad:ba:cb:69:87:aa:05:c1:9a:6b:d1:a8:25:89:05:7a:0f:05:
b2:11:13:a1:0e:b7:57:2b:d4:89:d7:f7:a3:3c:79:4e:a1:a7:
49:1b:ef:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwzV5LNcla6FyoYQbbnAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3
YjAyNmIwHhcNMjYwNjMwMDkwMTM2WhcNMjYwNzAxMDkwMTM2WjAzMTEwLwYDVQQD
EyhlY2UzY2I5ZTEzYzdiMzEzMzQzMWI3ZDE3YWI2NWEwN2NjMTE0MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh7ivMYw1CEV+rru5VwsK3j2JA01
al6BGDA0gZfkOsKWxjW71wPeAVF85VSJ45oQo/AVKC3KBoLJfUU3D8QMsO2BCP/5
FJoBct4DFdVeQChevolDJ10Dz2E2+5Fmb1NtUy/VS/e1O+Aj1cfpaPiNKemZdqv8
eYtoeQdXAfTm4yCtsfqR2f52pOyv80tkvcrYU3xU5oQopgKUtTxhs/781xFZ911d
PAeox0wvKUBDO3RPfcsoGsRDITBfDbSiIdaumbwCt+J0axpTNw7zpgWh7IurIdEl
Ts44bKQjnlsfMjmp/fOdVgpfwX7eTBTxUyGnt2Meg/ytjzHhXtFMxrFVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzjy54Tx7MTNDG30Xq2WgfMEUNxMB8GA1UdIwQY
MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt
Y2JkYWVkMGQwMGFkLzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk
LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUff+K5e
sMrHg7HCmSNVohfcmHX7YD++4uksfpP/fj+9EZp0sJL5UFWz7LMiKKeFzVln+N+q
ry8ZGPW5HCSbsjaPqcsimbPQP9BIhA1GjpY0QBbNCjl7ZrUlx60WTPf+5QDHvCC8
61i3GjrFuIv3Tk++T9ooXmvsoG6WamGMqSPAsjtQZ2uiWyJ1wqPaylHUjsPLxWfL
XhBqXTcbCxrH7CzjbU/2B+WXEuS7dbzWylnyZM6nPT5tN9t02VyzeTDhOryIYpaM
JXlbi9Rzp5vus6pSRCM1mcz9rbrLaYeqBcGaa9GoJYkFeg8FshEToQ63VyvUidf3
ozx5TqGnSRvvWQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client