Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: F3wr4zX1Wmn+2rCVpmPrfx77Rngx9B3lHvrcYbZjzu8=
Subject key identifier: E8:4C:D5:FD:BF:EA:99:71:A0:A7:C2:81:A2:82:50:A3:7F:08:A9:B6
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019E9B84F75120FB9E1F64AD50A67321BD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 194A
Signing time: Sat 06 Jun 2026 06:00:42 +0000
Manifest this update: Sat 06 Jun 2026 06:00:42 +0000
Manifest next update: Sun 07 Jun 2026 06:00:42 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: v6uWo/Xumkch01CQplCgjwmDMp9vK3B01Pb+f24q/48=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:f7:51:20:fb:9e:1f:64:ad:50:a6:73:21:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jun 6 06:00:42 2026 GMT
Not After : Jun 7 06:00:42 2026 GMT
Subject: CN=e84cd5fdbfea9971a0a7c281a28250a37f08a9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:f4:1e:96:ed:91:56:d9:61:84:f2:c0:50:
d1:9c:cf:a8:80:b0:7c:7d:aa:d4:85:f1:b0:1b:77:
c9:42:63:d6:c3:52:db:d7:4f:07:f1:2a:4b:e3:4a:
f1:ec:57:0d:d7:e4:97:dc:c1:2b:e0:42:58:86:44:
e1:a3:c7:a4:27:72:4f:41:36:93:4a:d6:dc:e7:f4:
ac:b3:cb:8b:bc:08:bd:8e:41:b5:2d:14:42:01:83:
0e:71:af:ba:3c:19:5b:58:a3:4f:2e:1f:d6:93:9a:
ba:ea:9c:e2:95:81:25:0c:8a:df:b0:a6:72:c6:4d:
b3:29:e7:78:32:1c:0b:6a:a6:9c:a5:a4:80:b8:41:
b0:61:ec:86:b6:3b:47:52:43:12:ac:8f:76:ea:1b:
1f:f3:17:de:4a:40:fc:2f:fc:c7:b2:f3:21:7d:66:
4c:e5:26:93:0d:c5:5c:39:9b:ff:07:56:85:a5:ca:
a6:f2:af:1e:2a:2d:b6:46:5d:38:31:10:18:19:58:
fc:09:58:79:c2:2b:8d:40:de:2e:74:b1:60:22:b5:
57:41:b0:70:6e:c7:5b:70:2f:f1:a6:de:49:7b:86:
4b:32:36:54:76:73:de:aa:b6:ba:0d:1a:9e:63:e4:
a9:ba:56:32:50:48:e1:fd:19:8a:17:8f:57:21:07:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:D5:FD:BF:EA:99:71:A0:A7:C2:81:A2:82:50:A3:7F:08:A9:B6
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1c:1b:85:46:40:8f:75:75:4d:9e:6b:e3:58:11:0b:2b:08:
b9:c9:98:0f:76:d4:f6:5e:5a:14:be:29:0d:1d:32:99:b5:a1:
05:2c:ff:0c:bc:ff:96:70:43:d2:81:17:f4:91:7e:dd:b1:ec:
d1:d7:60:1b:8c:40:b7:69:25:c6:d6:49:5f:6f:42:8e:07:30:
80:e9:be:c8:d6:4a:c8:d3:cf:3c:cf:80:84:38:ac:ad:25:f2:
67:89:54:9a:57:4b:8d:96:d3:20:7b:f9:3c:e3:56:51:48:76:
1b:6b:bb:4a:1a:ec:86:00:02:cc:79:1b:3c:74:7b:1a:31:03:
69:6f:b6:3c:91:ab:dd:3a:68:57:c7:80:9b:72:ee:00:f1:c3:
2c:6c:4c:21:cb:20:ce:45:a4:7f:9f:d2:18:bf:d1:c7:4c:0c:
72:53:53:d5:63:0d:54:13:af:f4:39:dd:6a:e2:55:6b:fa:50:
c9:10:a9:66:59:f1:0b:b9:de:33:42:fb:06:d8:47:6d:0e:bc:
25:fb:12:0b:8d:e5:07:09:43:e6:02:48:9d:b8:51:84:4c:f8:
3c:a5:92:de:55:54:12:6e:1f:0f:d0:6e:74:8d:1d:7e:79:73:
24:9b:73:c2:8f:0d:e4:1a:f8:29:81:42:b5:93:4b:fa:c8:2e:
db:dc:25:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhPdRIPueH2StUKZzIb0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3
MzIyMDkwHhcNMjYwNjA2MDYwMDQyWhcNMjYwNjA3MDYwMDQyWjAzMTEwLwYDVQQD
EyhlODRjZDVmZGJmZWE5OTcxYTBhN2MyODFhMjgyNTBhMzdmMDhhOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGr0HpbtkVbZYYTywFDRnM+ogLB8
farUhfGwG3fJQmPWw1Lb108H8SpL40rx7FcN1+SX3MEr4EJYhkTho8ekJ3JPQTaT
Stbc5/Sss8uLvAi9jkG1LRRCAYMOca+6PBlbWKNPLh/Wk5q66pzilYElDIrfsKZy
xk2zKed4MhwLaqacpaSAuEGwYeyGtjtHUkMSrI926hsf8xfeSkD8L/zHsvMhfWZM
5SaTDcVcOZv/B1aFpcqm8q8eKi22Rl04MRAYGVj8CVh5wiuNQN4udLFgIrVXQbBw
bsdbcC/xpt5Je4ZLMjZUdnPeqra6DRqeY+SpulYyUEjh/RmKF49XIQfGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhM1f2/6plxoKfCgaKCUKN/CKm2MB8GA1UdIwQY
MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt
YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm
LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxwbhUZA
j3V1TZ5r41gRCysIucmYD3bU9l5aFL4pDR0ymbWhBSz/DLz/lnBD0oEX9JF+3bHs
0ddgG4xAt2klxtZJX29CjgcwgOm+yNZKyNPPPM+AhDisrSXyZ4lUmldLjZbTIHv5
PONWUUh2G2u7ShrshgACzHkbPHR7GjEDaW+2PJGr3TpoV8eAm3LuAPHDLGxMIcsg
zkWkf5/SGL/Rx0wMclNT1WMNVBOv9DndauJVa/pQyRCpZlnxC7neM0L7BthHbQ68
JfsSC43lBwlD5gJInbhRhEz4PKWS3lVUEm4fD9BudI0dfnlzJJtzwo8N5Br4KYFC
tZNL+sgu29wlcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:17:10 2026 by rpki-client