Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: h4Zv9bo8Z9025P2iaHK9stq+tAwgWKPgAc4rYeBgKPA=
Subject key identifier: 76:E9:38:00:7B:22:71:EB:5F:70:8D:CF:F6:25:C4:5D:0E:57:BD:F9
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 019F189E1E96986878B6C9D9CED36CC33F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 11EE
Signing time: Tue 30 Jun 2026 13:00:43 +0000
Manifest this update: Tue 30 Jun 2026 13:00:43 +0000
Manifest next update: Wed 01 Jul 2026 13:00:43 +0000
Files and hashes: 1: CwIjYjnTILTtmzxjO1L06aXYXx0.roa (hash: eJSJ7vi3vMU6tYUCxmim/j5RdYogwWkRqmaPqZMw+kY=)
2: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: db2eFyS6seiYKCTo9UVl6K2zml94bA6XGPgpx3rZPNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:1e:96:98:68:78:b6:c9:d9:ce:d3:6c:c3:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jun 30 13:00:43 2026 GMT
Not After : Jul 1 13:00:43 2026 GMT
Subject: CN=76e938007b2271eb5f708dcff625c45d0e57bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:bd:3d:10:1f:84:3b:9e:a1:2d:de:d7:08:
84:15:46:73:3e:d6:33:78:e2:7a:5d:34:98:1c:5a:
0e:36:b5:de:de:8e:71:2b:2f:6b:bc:ed:43:57:be:
21:d5:6c:a6:e2:aa:f7:d2:8e:3d:e9:78:fa:e8:ec:
8c:7a:4e:e7:94:7a:2c:5c:6f:e3:eb:d7:5c:98:b4:
ea:a6:ef:d9:fa:1f:53:29:14:4e:50:7b:ed:da:aa:
67:71:62:26:98:9f:88:32:09:42:1c:a3:93:10:4b:
84:1a:b7:95:5e:9d:fd:d9:eb:21:d7:44:62:a1:5e:
b3:cd:e7:98:ac:9e:8a:84:b5:c1:e0:44:0d:04:6d:
4e:e0:35:65:d8:3a:03:42:6f:4a:1c:2e:f5:a3:f4:
cb:9d:df:c4:8d:9f:0e:ef:71:5f:5e:54:3b:12:56:
40:6e:dd:20:e1:b2:a0:c2:a7:86:5d:b3:86:b4:15:
1a:8b:8a:a9:59:32:82:6a:16:6f:27:9a:84:f8:4c:
28:8b:2c:3a:ad:c6:54:86:93:c0:80:b4:da:08:82:
7f:81:e6:35:13:34:05:a5:e7:cc:af:29:46:3f:51:
b1:75:48:c5:35:3d:72:3d:28:14:4c:f5:1a:7d:e9:
9f:46:c9:c2:56:70:56:2d:ef:87:ca:61:4f:d3:a6:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:38:00:7B:22:71:EB:5F:70:8D:CF:F6:25:C4:5D:0E:57:BD:F9
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fa:35:20:41:3c:2d:f5:f6:cd:1e:61:16:5e:8f:b6:55:38:
a2:4e:d8:4d:3c:1e:da:42:3c:45:3e:f3:d6:1d:8a:d0:6a:f9:
8d:8e:7f:10:88:86:9a:10:09:e1:e2:9e:60:18:1a:41:dd:ef:
3e:25:c3:0f:72:c6:3b:13:f7:c7:a7:0e:c0:1f:a3:f3:be:09:
88:f8:95:05:3d:b3:59:61:15:c9:ce:f4:d2:95:ad:51:31:72:
a5:d2:6e:a0:04:60:9c:42:77:e8:17:cb:74:37:b1:08:87:3f:
38:c9:76:0b:ff:d4:7f:0d:79:15:e7:b1:d3:2a:eb:22:cb:ef:
57:65:81:93:0c:fe:52:aa:82:98:da:30:a2:68:f1:46:a5:1e:
d9:87:0c:4c:db:06:34:bc:38:52:7a:c8:83:b6:ce:6c:8f:57:
0c:c4:b4:d7:2c:79:2c:07:ef:08:8e:8c:c6:39:db:45:6c:d3:
10:e6:2a:bc:63:de:5d:26:e7:44:ab:76:b7:a9:33:ef:52:47:
08:87:44:22:c1:bf:be:3a:90:c5:21:aa:94:36:02:d6:f5:5b:
d6:f4:10:cd:43:0a:c0:34:67:44:f0:5d:b9:0a:e7:2e:12:57:
3e:60:62:66:09:5b:fb:6b:2e:7f:22:b7:62:88:c1:c8:be:3c:
fd:e4:ff:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynh6WmGh4tsnZztNswz8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjcxZmVjMzhmMDBjNDAyZjMwNjZmMTNjNzkyZTFhMGVk
MTZkYjMwHhcNMjYwNjMwMTMwMDQzWhcNMjYwNzAxMTMwMDQzWjAzMTEwLwYDVQQD
Eyg3NmU5MzgwMDdiMjI3MWViNWY3MDhkY2ZmNjI1YzQ1ZDBlNTdiZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gu9PRAfhDueoS3e1wiEFUZzPtYz
eOJ6XTSYHFoONrXe3o5xKy9rvO1DV74h1Wym4qr30o496Xj66OyMek7nlHosXG/j
69dcmLTqpu/Z+h9TKRROUHvt2qpncWImmJ+IMglCHKOTEEuEGreVXp392esh10Ri
oV6zzeeYrJ6KhLXB4EQNBG1O4DVl2DoDQm9KHC71o/TLnd/EjZ8O73FfXlQ7ElZA
bt0g4bKgwqeGXbOGtBUai4qpWTKCahZvJ5qE+Ewoiyw6rcZUhpPAgLTaCIJ/geY1
EzQFpefMrylGP1GxdUjFNT1yPSgUTPUafemfRsnCVnBWLe+HymFP06bUVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbpOAB7InHrX3CNz/YlxF0OV735MB8GA1UdIwQY
MBaAFA9nH+w48AxALzBm8Tx5LhoO0W2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTIt
OTc3MzA1YzcwMDUxLzEvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTItOTc3MzA1YzcwMDUx
LzEvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvo1IEE8
LfX2zR5hFl6PtlU4ok7YTTwe2kI8RT7z1h2K0Gr5jY5/EIiGmhAJ4eKeYBgaQd3v
PiXDD3LGOxP3x6cOwB+j874JiPiVBT2zWWEVyc700pWtUTFypdJuoARgnEJ36BfL
dDexCIc/OMl2C//Ufw15Feex0yrrIsvvV2WBkwz+UqqCmNowomjxRqUe2YcMTNsG
NLw4UnrIg7bObI9XDMS01yx5LAfvCI6MxjnbRWzTEOYqvGPeXSbnRKt2t6kz71JH
CIdEIsG/vjqQxSGqlDYC1vVb1vQQzUMKwDRnRPBduQrnLhJXPmBiZglb+2sufyK3
YojByL48/eT/dw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:45 2026 by rpki-client