Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: s0afDCF83h8km24vceQBpf7ryPj1L2om2lcxZK/m3yQ=
Subject key identifier: F1:D9:7F:FD:75:B6:FF:64:E7:9A:BB:69:13:9A:A6:BA:A7:89:3B:95
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019F0D089EBE54E44B97BA47C3A47FECF178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 09B4
Signing time: Sun 28 Jun 2026 07:01:36 +0000
Manifest this update: Sun 28 Jun 2026 07:01:36 +0000
Manifest next update: Mon 29 Jun 2026 07:01:36 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: VhcRdiI4Rn8Dtt6OuH/xRApsV+4NdaYw0TLVCI2txBo=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:08:9e:be:54:e4:4b:97:ba:47:c3:a4:7f:ec:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jun 28 07:01:36 2026 GMT
Not After : Jun 29 07:01:36 2026 GMT
Subject: CN=f1d97ffd75b6ff64e79abb69139aa6baa7893b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:00:4d:8a:a3:e5:ce:67:ae:87:cd:f3:7b:
24:ff:37:aa:a6:5b:48:f0:fb:2c:f8:df:46:f5:58:
2c:18:cd:08:fa:1f:9b:b0:12:cb:09:e0:e3:32:b6:
c7:d5:f1:9a:ea:f6:1c:b8:3a:9f:2e:9c:fc:9c:71:
bc:77:87:46:43:79:56:93:a7:0a:39:9f:b5:9b:4d:
af:10:9e:61:90:d8:a4:fd:a1:41:09:f9:79:e1:14:
6c:c4:3f:f4:4d:a0:1e:57:12:e3:78:e9:e6:43:72:
90:36:8a:7c:fd:76:73:cc:99:4e:0b:c4:18:e8:db:
22:88:c7:02:33:a1:f5:92:6f:a9:a0:12:10:64:ef:
48:85:8b:fa:ba:cf:29:a8:aa:fe:cd:30:9c:4a:f8:
c8:c8:fa:fd:01:eb:8d:a2:b4:1e:00:ae:70:ae:6a:
ce:f4:ab:6a:f8:d6:90:84:34:65:cc:2c:21:7e:55:
62:6c:6d:45:ab:4d:b1:8b:b2:61:b2:14:78:e5:34:
45:52:17:e7:7a:bd:44:bd:2f:dd:98:17:2e:a4:ad:
ef:f6:db:33:16:82:1c:52:ff:37:c5:28:ee:bd:ef:
64:0c:05:f3:ce:19:09:59:ea:43:d2:c5:a1:fe:ce:
5e:03:e1:39:b6:03:0b:6b:ef:f3:8a:ec:d7:cb:f3:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:7F:FD:75:B6:FF:64:E7:9A:BB:69:13:9A:A6:BA:A7:89:3B:95
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7b:e1:0b:8c:d4:f6:10:c1:00:e9:e8:13:b2:17:40:8c:9d:
3b:b7:07:70:70:12:55:dc:25:b3:fd:5d:1f:36:14:4a:7c:e1:
8a:62:f3:e3:6b:51:aa:49:69:fd:ef:e5:7b:8c:84:bd:e1:4a:
e1:a6:6b:4b:db:c7:58:cb:cc:9b:d9:3f:ff:6a:ae:2d:30:e8:
7a:b4:aa:96:aa:c8:2f:82:d6:f2:63:2b:14:22:6b:99:24:6e:
6e:ef:41:e9:9e:6d:41:ca:ad:15:1a:79:50:0b:84:06:94:e1:
ff:4e:78:12:40:38:cd:13:83:f1:6c:12:d9:ba:7c:c7:97:05:
7f:21:e6:26:29:69:be:5d:9e:07:9a:68:8a:3c:7b:f8:98:e8:
98:03:1c:76:a1:89:7b:ee:a1:7d:e7:24:32:36:11:2c:36:3c:
22:31:12:92:6b:e2:fc:44:9b:90:32:ab:9e:0b:3e:d6:38:78:
32:2e:01:c2:9f:02:b6:89:c3:6b:ab:03:00:bd:ed:d2:b0:67:
7f:ad:22:c4:98:c4:6c:55:ab:e7:8a:56:49:c0:81:17:55:02:
eb:13:64:fb:67:80:48:19:4c:f5:74:89:e0:83:1c:09:18:db:
7f:a0:a8:7b:29:e8:c7:7b:0c:c1:8f:b6:44:c9:97:c0:ee:6f:
d8:27:b9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8NCJ6+VORLl7pHw6R/7PF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi
YjdlYjAwHhcNMjYwNjI4MDcwMTM2WhcNMjYwNjI5MDcwMTM2WjAzMTEwLwYDVQQD
EyhmMWQ5N2ZmZDc1YjZmZjY0ZTc5YWJiNjkxMzlhYTZiYWE3ODkzYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztQATYqj5c5nrofN83sk/zeqpltI
8Pss+N9G9VgsGM0I+h+bsBLLCeDjMrbH1fGa6vYcuDqfLpz8nHG8d4dGQ3lWk6cK
OZ+1m02vEJ5hkNik/aFBCfl54RRsxD/0TaAeVxLjeOnmQ3KQNop8/XZzzJlOC8QY
6NsiiMcCM6H1km+poBIQZO9IhYv6us8pqKr+zTCcSvjIyPr9AeuNorQeAK5wrmrO
9Ktq+NaQhDRlzCwhflVibG1Fq02xi7JhshR45TRFUhfner1EvS/dmBcupK3v9tsz
FoIcUv83xSjuve9kDAXzzhkJWepD0sWh/s5eA+E5tgMLa+/ziuzXy/NP4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHZf/11tv9k55q7aROaprqniTuVMB8GA1UdIwQY
MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt
NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5
LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnvhC4zU
9hDBAOnoE7IXQIydO7cHcHASVdwls/1dHzYUSnzhimLz42tRqklp/e/le4yEveFK
4aZrS9vHWMvMm9k//2quLTDoerSqlqrIL4LW8mMrFCJrmSRubu9B6Z5tQcqtFRp5
UAuEBpTh/054EkA4zROD8WwS2bp8x5cFfyHmJilpvl2eB5poijx7+JjomAMcdqGJ
e+6hfeckMjYRLDY8IjESkmvi/ESbkDKrngs+1jh4Mi4Bwp8CtonDa6sDAL3t0rBn
f60ixJjEbFWr54pWScCBF1UC6xNk+2eASBlM9XSJ4IMcCRjbf6Coeynox3sMwY+2
RMmXwO5v2Ce5fg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 16:21:41 2026 by rpki-client