Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: ymbpsjWaQAoLX0+zc6PP4HYd5gj1DSESf27OrRdI+Gg=
Subject key identifier: D2:F0:E0:25:D9:27:85:71:38:F4:35:7E:C6:9C:96:20:0B:9E:4E:EE
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019EB87CE74D89788AFBAE047AFC4C1C8696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 21:00:53 +0000
Manifest this update: Thu 11 Jun 2026 21:00:53 +0000
Manifest next update: Fri 12 Jun 2026 21:00:53 +0000
Files and hashes: 1: ACMwaAvueA5hj2k5vPo_qhJ133c.roa (hash: cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=)
2: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: jtKmNHo2nMe9JJAU1/NwhiDm1KRwdPpOHk9bDUjSZN8=)
3: jnbKsQGegNxjdm1zgvtf-2y2JHU.roa (hash: f0JFyB2CkMNujvorViUmIgNxI65wDl2h0L0eKcz8mXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:e7:4d:89:78:8a:fb:ae:04:7a:fc:4c:1c:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jun 11 21:00:53 2026 GMT
Not After : Jun 12 21:00:53 2026 GMT
Subject: CN=d2f0e025d927857138f4357ec69c96200b9e4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:40:52:45:49:91:1a:a7:d3:12:3b:8c:93:
50:f1:3d:d5:c3:30:2a:03:4b:9e:58:40:7f:cc:a3:
ee:1d:d1:9d:e3:16:ac:5d:18:92:a7:a9:3f:71:e8:
be:2a:ee:b9:3e:f4:92:71:74:72:d6:fc:a5:1a:72:
0c:4e:99:0b:fc:2a:23:21:8c:ec:73:f7:85:20:db:
76:b6:91:a4:eb:f4:cc:33:a1:fe:6b:96:f6:03:f6:
44:02:89:6f:4b:a8:9f:c2:e6:b7:73:df:f4:49:ad:
50:54:d6:c9:61:b4:f0:3e:2a:32:09:8e:11:3f:b4:
79:2e:b8:69:db:d0:df:93:02:19:1a:ec:e2:6e:8f:
4d:ba:d3:6a:63:b5:7b:6a:10:ec:c5:d3:eb:67:25:
91:1b:b9:d5:07:d0:bb:8a:fe:37:7b:de:bf:32:e2:
c9:ef:e2:dd:0b:a5:46:0f:95:22:d7:4c:e1:cd:55:
af:ce:3f:62:21:0a:22:81:d6:5a:0e:d6:57:08:e0:
11:db:0c:ad:a2:87:c0:40:18:2a:6e:48:4d:55:ab:
35:22:9c:d9:c9:d6:82:5b:c5:af:67:1c:fd:e3:d0:
8c:1c:bb:4f:47:bb:39:92:c7:b9:a9:c4:b3:aa:1c:
26:24:20:e0:aa:ca:be:3b:d5:f0:2f:c2:17:1d:bd:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:E0:25:D9:27:85:71:38:F4:35:7E:C6:9C:96:20:0B:9E:4E:EE
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:36:50:a5:58:41:90:01:ac:11:35:68:57:5a:00:2e:04:dc:
33:3a:a8:8c:2f:dd:0a:ff:11:e4:fe:0a:c2:5c:44:ac:bd:0a:
1a:14:b8:51:2a:69:33:8a:b3:a2:54:e2:ef:fe:a3:63:81:8e:
10:3e:36:ba:fa:d8:e5:d3:f0:05:ee:91:07:44:bc:b9:cd:2d:
e8:0a:f0:4d:24:2a:9b:d3:36:63:00:7a:03:e7:ff:28:3d:51:
d0:41:dd:74:d5:24:23:8c:46:3e:e3:06:97:35:69:54:5e:02:
33:82:89:98:2d:69:93:ef:28:d2:13:cf:bd:c5:48:d0:24:56:
47:84:2b:e0:65:2a:68:7a:6c:ac:42:ac:86:fe:b5:f9:94:c2:
c2:04:d0:0d:b4:f2:d8:62:37:bd:de:79:be:35:87:71:da:1d:
d0:35:66:ce:ad:03:37:cb:e0:c2:34:b9:82:13:16:06:21:01:
b1:18:02:c2:43:7d:0e:7c:9c:4e:5c:9a:0e:b6:20:a6:59:43:
76:46:ac:c1:2c:75:38:07:ed:ca:12:16:e0:9f:ed:22:b7:07:
e2:d4:de:ad:f5:12:ee:2b:bb:36:79:80:8c:4e:a0:70:c7:d6:
9a:40:fe:da:03:d4:80:2b:6e:ab:04:d4:25:d9:ba:8b:9f:63:
52:a8:a0:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fOdNiXiK+64EevxMHIaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MmIwZDcyYmYwNzQzYmYyY2RjNzhiYTFmNTNlOWE5ODhm
OWFmMWUwHhcNMjYwNjExMjEwMDUzWhcNMjYwNjEyMjEwMDUzWjAzMTEwLwYDVQQD
EyhkMmYwZTAyNWQ5Mjc4NTcxMzhmNDM1N2VjNjljOTYyMDBiOWU0ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8BAUkVJkRqn0xI7jJNQ8T3VwzAq
A0ueWEB/zKPuHdGd4xasXRiSp6k/cei+Ku65PvSScXRy1vylGnIMTpkL/CojIYzs
c/eFINt2tpGk6/TMM6H+a5b2A/ZEAolvS6ifwua3c9/0Sa1QVNbJYbTwPioyCY4R
P7R5Lrhp29DfkwIZGuzibo9NutNqY7V7ahDsxdPrZyWRG7nVB9C7iv43e96/MuLJ
7+LdC6VGD5Ui10zhzVWvzj9iIQoigdZaDtZXCOAR2wytoofAQBgqbkhNVas1IpzZ
ydaCW8WvZxz949CMHLtPR7s5kse5qcSzqhwmJCDgqsq+O9XwL8IXHb0XKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLw4CXZJ4VxOPQ1fsacliALnk7uMB8GA1UdIwQY
MBaAFHUrDXK/B0O/LNx4uh9T6amI+a8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjct
NjkxMjE5MjEzNGU5LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjctNjkxMjE5MjEzNGU5
LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDZQpVhB
kAGsETVoV1oALgTcMzqojC/dCv8R5P4KwlxErL0KGhS4USppM4qzolTi7/6jY4GO
ED42uvrY5dPwBe6RB0S8uc0t6ArwTSQqm9M2YwB6A+f/KD1R0EHddNUkI4xGPuMG
lzVpVF4CM4KJmC1pk+8o0hPPvcVI0CRWR4Qr4GUqaHpsrEKshv61+ZTCwgTQDbTy
2GI3vd55vjWHcdod0DVmzq0DN8vgwjS5ghMWBiEBsRgCwkN9DnycTlyaDrYgpllD
dkaswSx1OAftyhIW4J/tIrcH4tTerfUS7iu7NnmAjE6gcMfWmkD+2gPUgCtuqwTU
Jdm6i59jUqigzw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:07 2026 by rpki-client