Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: eAY1iEFN/XZbUlvY6QdOLP4qhvp//CxF1zh16gkNMS8=
Subject key identifier: 6F:52:99:F7:58:5C:10:BA:0E:13:C2:60:EE:EB:6D:45:21:EB:EA:3D
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019F1831188FBD8311E81A77F707CA8057D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0A96
Signing time: Tue 30 Jun 2026 11:01:38 +0000
Manifest this update: Tue 30 Jun 2026 11:01:38 +0000
Manifest next update: Wed 01 Jul 2026 11:01:38 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: cORFH2E+8FnDCnwpihurq6rivJKYQdB30XsKIy9UdIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:18:8f:bd:83:11:e8:1a:77:f7:07:ca:80:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Jun 30 11:01:38 2026 GMT
Not After : Jul 1 11:01:38 2026 GMT
Subject: CN=6f5299f7585c10ba0e13c260eeeb6d4521ebea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:71:d1:54:48:e0:c5:2c:f4:15:2b:52:f1:
7b:2b:0e:93:f4:0f:71:19:c8:c2:21:22:15:e9:e7:
c1:63:a8:12:70:c1:d1:99:d9:73:2d:2a:ee:c7:66:
a0:7b:26:b5:83:62:43:f9:4d:0e:ea:4e:ca:05:cf:
1e:c7:84:bc:36:ec:d1:f0:05:ac:bf:d2:0d:18:69:
63:4f:32:dd:12:38:c8:44:4a:18:ec:a8:ab:4f:a5:
96:3a:d5:ca:9c:ed:e5:33:b9:77:cc:bb:5e:03:3b:
8d:4b:a8:76:05:1f:ee:7b:96:34:03:33:ee:25:9b:
63:f6:6a:b3:10:83:91:67:ac:05:1a:21:b3:38:f1:
62:86:45:1d:ad:26:6c:2a:93:68:a2:cd:d6:8a:56:
10:63:50:91:3c:03:24:1a:fd:d2:9a:a4:5a:90:e2:
9c:14:c0:4b:46:76:f0:90:d0:6e:f7:43:9d:0a:29:
b6:f3:b7:7e:55:2e:a9:8d:a3:9a:19:1f:7d:7b:7a:
9c:70:e1:e7:6a:b6:71:58:ba:57:3e:1b:d8:63:94:
c5:53:ff:70:2f:b8:d3:71:9c:d7:96:7e:7d:66:dd:
79:76:82:f1:64:dd:d5:28:49:3c:8d:f0:0d:c3:f5:
79:45:10:e8:b2:dc:8c:57:52:f0:d3:c0:4b:24:a6:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:99:F7:58:5C:10:BA:0E:13:C2:60:EE:EB:6D:45:21:EB:EA:3D
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:11:e8:60:23:a0:b1:13:17:b6:37:74:3c:7d:6e:bc:ed:19:
7c:0a:80:c0:98:25:57:89:a0:58:f4:33:b1:83:74:0a:d7:6a:
4c:b5:48:c4:bd:d3:35:17:c8:ca:15:ce:00:be:fa:3c:8c:f3:
83:65:5b:e0:67:6d:a7:05:d8:43:b6:e4:3b:6e:26:7d:a8:a7:
a8:de:d5:e9:58:f7:de:1c:2a:3d:b6:c2:e5:60:f4:f7:e7:7c:
a2:4b:b4:dd:98:2e:40:b7:12:9d:79:59:52:8d:e4:80:56:c6:
96:f4:3b:c4:38:da:50:c7:d3:37:24:c7:b5:54:f9:03:79:5a:
a6:1d:3f:fa:9a:02:94:d5:46:c6:58:5e:dd:f4:48:63:5a:21:
a1:c2:77:84:a8:f8:db:8c:f6:bc:ac:c4:7b:3a:0b:bd:5b:7c:
e9:9b:c0:08:31:65:33:7d:98:dc:46:23:3d:58:e0:fd:6e:c0:
4a:5d:c6:4f:63:22:2e:f6:f3:f0:a4:32:98:68:49:53:e9:cc:
e1:cf:94:60:b3:21:d8:97:f6:9e:32:04:81:39:be:b6:12:bd:
6e:d8:5d:00:db:1d:af:e7:5e:4c:8c:00:41:a4:f7:ac:6c:86:
86:44:40:4d:ad:d6:6d:d6:35:c3:6c:5e:b8:d7:d4:29:21:a4:
f5:a9:c7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMRiPvYMR6Bp39wfKgFfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTU4YTk0NTAzYTcwNDIxNzQ5ZGVmMDVlZmU2M2EzMTdk
MThhYzIwHhcNMjYwNjMwMTEwMTM4WhcNMjYwNzAxMTEwMTM4WjAzMTEwLwYDVQQD
Eyg2ZjUyOTlmNzU4NWMxMGJhMGUxM2MyNjBlZWViNmQ0NTIxZWJlYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eZx0VRI4MUs9BUrUvF7Kw6T9A9x
GcjCISIV6efBY6gScMHRmdlzLSrux2ageya1g2JD+U0O6k7KBc8ex4S8NuzR8AWs
v9INGGljTzLdEjjIREoY7KirT6WWOtXKnO3lM7l3zLteAzuNS6h2BR/ue5Y0AzPu
JZtj9mqzEIORZ6wFGiGzOPFihkUdrSZsKpNoos3WilYQY1CRPAMkGv3SmqRakOKc
FMBLRnbwkNBu90OdCim287d+VS6pjaOaGR99e3qccOHnarZxWLpXPhvYY5TFU/9w
L7jTcZzXln59Zt15doLxZN3VKEk8jfANw/V5RRDostyMV1Lw08BLJKYzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9SmfdYXBC6DhPCYO7rbUUh6+o9MB8GA1UdIwQY
MBaAFNeVipRQOnBCF0ne8F7+Y6MX0YrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEt
YWQ0MDA0YWE3NmMzLzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEtYWQ0MDA0YWE3NmMz
LzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxHoYCOg
sRMXtjd0PH1uvO0ZfAqAwJglV4mgWPQzsYN0CtdqTLVIxL3TNRfIyhXOAL76PIzz
g2Vb4GdtpwXYQ7bkO24mfainqN7V6Vj33hwqPbbC5WD09+d8oku03ZguQLcSnXlZ
Uo3kgFbGlvQ7xDjaUMfTNyTHtVT5A3laph0/+poClNVGxlhe3fRIY1ohocJ3hKj4
24z2vKzEezoLvVt86ZvACDFlM32Y3EYjPVjg/W7ASl3GT2MiLvbz8KQymGhJU+nM
4c+UYLMh2Jf2njIEgTm+thK9bthdANsdr+deTIwAQaT3rGyGhkRATa3WbdY1w2xe
uNfUKSGk9anHvw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:46 2026 by rpki-client