Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: EBkOlwRY0kZlJ47pGvMb+pMPzKvhUSdhW41YEdVcGrc=
Subject key identifier: 52:CF:55:F5:9C:A2:FF:96:59:5D:E9:9B:89:65:2C:DA:31:FF:07:DE
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019F189E84DD27590A878BBFF22DAC9CA45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 15A9
Signing time: Tue 30 Jun 2026 13:01:09 +0000
Manifest this update: Tue 30 Jun 2026 13:01:09 +0000
Manifest next update: Wed 01 Jul 2026 13:01:09 +0000
Files and hashes: 1: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (hash: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY=)
2: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: S3u7dFoc2yAimDJfB/x+eAGlrhVOGFdcnLKO5sm9dfk=)
3: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (hash: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:84:dd:27:59:0a:87:8b:bf:f2:2d:ac:9c:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jun 30 13:01:09 2026 GMT
Not After : Jul 1 13:01:09 2026 GMT
Subject: CN=52cf55f59ca2ff96595de99b89652cda31ff07de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:08:b9:82:f9:b3:2c:a3:e4:5f:2e:92:29:
83:fd:c4:d6:37:5c:00:19:b5:b4:25:06:cc:5b:6c:
b2:5c:47:42:e4:ff:64:6b:04:be:77:cd:f2:22:d7:
19:1f:b2:b5:1a:cd:bf:8f:fd:1d:68:c8:eb:b4:0b:
04:68:0a:c8:2f:e5:0e:e9:f8:e3:4c:09:8a:1b:a0:
0f:0e:0e:2a:82:f4:f6:60:31:a5:9c:05:a4:e6:1f:
87:ad:09:80:a0:16:fc:70:27:45:2b:c9:fa:a2:57:
06:6d:50:a2:25:38:bc:db:0d:25:c4:03:86:01:f1:
3f:e1:7c:c7:3c:10:f3:12:d4:fd:31:d2:57:1b:8d:
73:c5:6e:33:62:c9:91:3e:19:30:be:87:d1:43:2e:
12:75:4e:87:b6:14:3a:ac:cb:aa:08:a9:87:3f:1b:
30:06:81:4a:fd:c3:d0:9f:8d:95:b7:be:1d:a7:ff:
68:f0:6f:ff:72:af:3f:53:89:33:b7:50:8a:53:01:
fa:9a:b6:5f:c2:1f:d9:75:07:63:c5:13:64:89:48:
87:14:3b:e5:65:9a:b4:15:28:aa:b9:59:6c:81:c1:
1c:c5:db:e1:20:ba:a7:84:bd:89:fa:af:eb:d0:33:
10:b7:7b:b2:66:4c:0c:c9:85:96:bc:23:55:13:1c:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:55:F5:9C:A2:FF:96:59:5D:E9:9B:89:65:2C:DA:31:FF:07:DE
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c2:cc:3d:29:4a:21:93:03:c5:3e:6f:dc:50:99:be:25:fc:
53:01:20:cb:b6:f3:80:4c:42:83:70:13:dd:f3:f7:8b:33:76:
ef:0d:f8:ca:e4:fb:34:43:c2:b8:14:46:fd:23:70:e4:2c:8c:
63:3b:f4:e1:87:3b:9f:b9:a2:ad:d4:03:ee:fc:49:59:a9:04:
bf:f8:67:1e:04:16:03:dd:5b:8b:9b:51:10:bc:3e:d7:45:93:
a4:2e:1a:7c:d7:77:23:54:43:c3:47:83:6a:df:24:2e:24:80:
1f:81:c3:c2:e0:d6:87:0b:31:67:6c:68:65:ae:b4:89:ef:00:
94:61:8e:4e:9b:f5:23:69:24:c8:20:5f:57:a4:b3:3f:2e:39:
21:4d:3a:d7:50:54:c9:b5:17:d9:db:75:20:ba:ae:32:93:70:
27:d0:36:0b:75:ce:68:77:76:89:91:ee:c5:36:96:7b:6b:23:
46:be:0a:b4:aa:f0:02:35:31:f6:c8:88:2a:06:f7:b1:dc:5f:
74:68:ac:34:67:da:81:7f:2c:03:bc:79:f7:ba:92:bc:fc:e6:
51:34:43:da:a2:bf:4c:40:1c:cd:11:3a:69:18:65:4a:81:25:
86:37:b7:06:a1:5f:bd:64:15:4d:c0:9e:3b:c6:59:78:4d:6d:
de:e7:8e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnoTdJ1kKh4u/8i2snKRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjYwNjMwMTMwMTA5WhcNMjYwNzAxMTMwMTA5WjAzMTEwLwYDVQQD
Eyg1MmNmNTVmNTljYTJmZjk2NTk1ZGU5OWI4OTY1MmNkYTMxZmYwN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0IuYL5syyj5F8ukimD/cTWN1wA
GbW0JQbMW2yyXEdC5P9kawS+d83yItcZH7K1Gs2/j/0daMjrtAsEaArIL+UO6fjj
TAmKG6APDg4qgvT2YDGlnAWk5h+HrQmAoBb8cCdFK8n6olcGbVCiJTi82w0lxAOG
AfE/4XzHPBDzEtT9MdJXG41zxW4zYsmRPhkwvofRQy4SdU6HthQ6rMuqCKmHPxsw
BoFK/cPQn42Vt74dp/9o8G//cq8/U4kzt1CKUwH6mrZfwh/ZdQdjxRNkiUiHFDvl
ZZq0FSiquVlsgcEcxdvhILqnhL2J+q/r0DMQt3uyZkwMyYWWvCNVExyOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLPVfWcov+WWV3pm4llLNox/wfeMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcLMPSlK
IZMDxT5v3FCZviX8UwEgy7bzgExCg3AT3fP3izN27w34yuT7NEPCuBRG/SNw5CyM
Yzv04Yc7n7mirdQD7vxJWakEv/hnHgQWA91bi5tRELw+10WTpC4afNd3I1RDw0eD
at8kLiSAH4HDwuDWhwsxZ2xoZa60ie8AlGGOTpv1I2kkyCBfV6SzPy45IU0611BU
ybUX2dt1ILquMpNwJ9A2C3XOaHd2iZHuxTaWe2sjRr4KtKrwAjUx9siIKgb3sdxf
dGisNGfagX8sA7x597qSvPzmUTRD2qK/TEAczRE6aRhlSoElhje3BqFfvWQVTcCe
O8ZZeE1t3ueOtg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:12 2026 by rpki-client