Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: OHMiz1MD6eh9Kr2+ume1El5TdEMPVfb3RipLcgwnq5o=
Subject key identifier: D2:B8:DB:CB:61:80:72:A1:FC:7D:10:DC:60:C3:AF:B8:8B:98:74:28
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 019F1943B09D3B07D0AB3E3A819A2029474E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 16:01:34 +0000
Manifest this update: Tue 30 Jun 2026 16:01:34 +0000
Manifest next update: Wed 01 Jul 2026 16:01:34 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: H5E2NnGoSX7U/PgFxBEeeAari8UIXnKgoGw6zVdJY0Y=)
2: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (hash: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:b0:9d:3b:07:d0:ab:3e:3a:81:9a:20:29:47:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jun 30 16:01:34 2026 GMT
Not After : Jul 1 16:01:34 2026 GMT
Subject: CN=d2b8dbcb618072a1fc7d10dc60c3afb88b987428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:91:94:64:5a:4c:34:d1:85:2b:31:5d:06:
b8:be:d3:05:e2:d0:f8:dc:09:a9:d3:b5:8d:70:5d:
bc:fe:4b:8f:c4:23:1f:94:00:df:cb:63:50:5d:0c:
5f:0a:82:e2:64:78:1f:7f:ed:5d:4c:07:2e:85:5d:
87:35:f4:b5:b4:8e:7b:cb:58:29:4c:0e:50:ff:69:
90:dc:5b:aa:2f:eb:0e:a7:2d:12:84:f0:4f:b1:18:
08:a0:66:21:d9:65:2f:6f:26:51:53:07:49:45:f4:
62:f6:cf:0b:9f:35:03:97:65:83:a8:66:22:ef:4c:
fd:23:64:41:b0:39:3c:95:ab:be:25:f2:3f:8e:98:
bf:48:0f:6c:6b:de:33:9b:8d:16:4a:2d:dd:0b:29:
ff:f3:44:8d:9d:41:42:68:72:d3:55:07:60:18:17:
c7:46:f0:dc:02:9e:5d:9b:f7:2d:bc:3b:0e:e3:9e:
61:88:28:88:42:6d:13:17:ea:7c:af:ad:4a:07:1e:
9d:56:92:53:cc:35:ee:34:be:ac:2d:b3:ff:86:7f:
5d:f2:7d:dc:6d:19:21:15:44:0a:fc:a3:dd:ef:2e:
f8:a4:35:d0:0f:cc:ed:15:91:1f:a9:d2:0b:9d:ce:
f3:e3:d8:bc:6d:25:d5:ed:7e:87:ac:d7:1c:79:90:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:DB:CB:61:80:72:A1:FC:7D:10:DC:60:C3:AF:B8:8B:98:74:28
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:59:17:6e:f5:0f:f7:3e:35:15:ba:50:30:e1:34:1d:07:
21:a5:41:34:ed:25:dd:10:ba:bb:06:d1:14:fa:bd:65:33:64:
7d:52:c6:b6:f9:eb:4e:25:48:a6:ae:ae:66:08:aa:f6:89:54:
8c:7d:d7:c5:3d:93:e5:4e:ca:ea:72:6f:25:a9:4b:64:89:14:
80:f9:0f:a5:21:c0:09:a1:b1:13:92:04:4e:5e:f8:66:37:d4:
23:39:af:b1:07:f7:92:ac:ff:6f:43:4b:e7:1a:2f:52:ff:ae:
2f:21:7b:75:38:62:ea:5a:4a:61:29:f6:85:28:e8:81:86:fe:
84:c8:e1:9b:de:70:56:f2:e2:5b:af:59:8a:ea:01:d6:82:36:
eb:e9:f6:11:82:ca:d0:12:a6:76:d5:dc:0d:55:b9:9b:bd:9f:
e9:a7:bf:16:8e:c5:9d:37:11:c2:a9:fd:9b:0a:85:c4:30:aa:
18:44:b2:1d:04:75:95:61:d2:d0:6d:37:2a:d4:d9:79:b3:26:
7a:8a:a6:aa:63:0e:47:1a:86:20:2b:6a:51:2e:8d:7b:af:c8:
88:00:66:eb:47:a1:b6:ac:2c:89:3e:00:a1:25:39:3e:ac:84:
89:ae:df:0f:c4:b2:0d:8f:18:58:75:d2:c9:e7:2e:fb:40:1e:
f2:22:b2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ7CdOwfQqz46gZogKUdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjYwNjMwMTYwMTM0WhcNMjYwNzAxMTYwMTM0WjAzMTEwLwYDVQQD
EyhkMmI4ZGJjYjYxODA3MmExZmM3ZDEwZGM2MGMzYWZiODhiOTg3NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vCRlGRaTDTRhSsxXQa4vtMF4tD4
3Amp07WNcF28/kuPxCMflADfy2NQXQxfCoLiZHgff+1dTAcuhV2HNfS1tI57y1gp
TA5Q/2mQ3FuqL+sOpy0ShPBPsRgIoGYh2WUvbyZRUwdJRfRi9s8LnzUDl2WDqGYi
70z9I2RBsDk8lau+JfI/jpi/SA9sa94zm40WSi3dCyn/80SNnUFCaHLTVQdgGBfH
RvDcAp5dm/ctvDsO455hiCiIQm0TF+p8r61KBx6dVpJTzDXuNL6sLbP/hn9d8n3c
bRkhFUQK/KPd7y74pDXQD8ztFZEfqdILnc7z49i8bSXV7X6HrNcceZBDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK428thgHKh/H0Q3GDDr7iLmHQoMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQJZF271
D/c+NRW6UDDhNB0HIaVBNO0l3RC6uwbRFPq9ZTNkfVLGtvnrTiVIpq6uZgiq9olU
jH3XxT2T5U7K6nJvJalLZIkUgPkPpSHACaGxE5IETl74ZjfUIzmvsQf3kqz/b0NL
5xovUv+uLyF7dThi6lpKYSn2hSjogYb+hMjhm95wVvLiW69ZiuoB1oI26+n2EYLK
0BKmdtXcDVW5m72f6ae/Fo7FnTcRwqn9mwqFxDCqGESyHQR1lWHS0G03KtTZebMm
eoqmqmMORxqGICtqUS6Ne6/IiABm60ehtqwsiT4AoSU5PqyEia7fD8SyDY8YWHXS
yecu+0Ae8iKy7Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client