Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: DfwijXxM3UgNs0r2S8LkPsgiS5JJ0RlhIDtMhrJ9M8o=
Subject key identifier: D8:F9:3D:31:12:41:A6:85:4F:F3:7E:9C:23:63:A2:06:45:CA:31:CE
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019F197AA8DC174CE38E74D581C85AC1B345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 070F
Signing time: Tue 30 Jun 2026 17:01:36 +0000
Manifest this update: Tue 30 Jun 2026 17:01:36 +0000
Manifest next update: Wed 01 Jul 2026 17:01:36 +0000
Files and hashes: 1: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: Y7aQeol6vW37b69cNwUEfY8lTTCo8KqCXMLCu0KJp1Q=)
2: Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa (hash: deUDIfKP8EAYYGoQ4lRaCxh8/fRxNHbmoAk7A20/nwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:a8:dc:17:4c:e3:8e:74:d5:81:c8:5a:c1:b3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jun 30 17:01:36 2026 GMT
Not After : Jul 1 17:01:36 2026 GMT
Subject: CN=d8f93d311241a6854ff37e9c2363a20645ca31ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:f3:79:48:c0:2f:3e:4e:0d:be:fb:fe:ed:
c6:64:90:2b:b1:41:79:99:43:0c:93:74:d3:68:0a:
e5:2c:1e:2e:49:b9:83:2f:87:80:ae:9b:10:4a:70:
a8:75:e2:91:10:42:d9:d9:18:af:36:6a:56:79:cb:
50:0d:0d:06:c4:5d:dc:1c:f0:68:10:a0:d4:57:0b:
cf:8e:15:5c:59:b2:bc:b6:df:18:32:ee:b6:93:e9:
e1:ec:55:f2:c2:9f:8e:81:0c:e1:4c:7d:77:76:90:
08:05:2d:8f:93:be:fd:5a:ce:10:f5:19:cf:41:5f:
b8:33:59:34:6f:41:24:3b:e4:7b:26:a7:2c:9c:6f:
1d:38:26:3e:66:e8:c9:36:08:27:97:3c:f7:9f:99:
16:84:4e:cb:30:5e:93:3c:4a:86:17:3f:3b:41:c8:
45:bd:e8:43:13:20:c2:d0:0a:b9:f9:69:8c:ee:b3:
47:f3:2a:c9:a9:42:1b:be:d7:50:f0:53:f4:0b:63:
20:bd:82:85:b5:67:08:1f:b3:c8:6d:ff:2b:cc:60:
f8:65:80:2a:b9:fd:e3:07:a5:f9:0d:8c:ee:d7:16:
b1:ce:10:b9:b0:21:97:23:d5:d3:bd:96:35:61:2f:
f8:51:11:29:27:ba:e7:aa:1d:92:80:7d:10:89:88:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:3D:31:12:41:A6:85:4F:F3:7E:9C:23:63:A2:06:45:CA:31:CE
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a7:8e:81:60:b6:9b:80:78:2c:d7:32:7a:2c:1a:35:ff:b6:
14:c2:1b:fa:23:e4:13:80:0f:59:88:46:25:8b:ba:f2:94:60:
46:83:e1:10:47:d6:c1:ab:45:fc:d9:a0:e0:bb:66:1b:8b:9a:
65:55:92:5e:7b:8e:44:d8:01:d4:f5:e6:b1:a3:1e:82:06:65:
73:88:0d:57:c5:3c:3d:72:7c:2e:8e:00:d7:86:b7:87:e6:6f:
ab:52:7a:20:26:3a:5d:86:6a:dd:c4:81:15:ac:7d:60:14:66:
a8:16:b6:83:57:0a:8f:8c:3f:e6:40:28:68:0d:36:5a:97:d3:
a1:a3:ee:67:b4:6b:f2:78:2c:cf:f5:ab:7e:a1:c4:98:0f:ba:
9d:56:d5:41:ee:5c:0a:6b:e5:6c:bb:5a:11:cd:b4:2b:41:3a:
05:2b:4c:09:8f:ca:a2:fd:7c:96:4a:69:9d:c9:27:b1:85:9a:
82:bf:ea:0b:8a:4e:95:91:05:88:3f:4f:20:26:14:fa:9a:1a:
b7:c9:71:43:9f:54:4e:76:60:c1:0a:05:8b:8c:cf:53:5e:a1:
b6:cd:46:af:b0:c2:9b:30:0e:7e:80:ba:61:66:08:4a:40:24:
08:82:80:3f:57:5f:ae:cb:a5:d7:f2:e8:ad:a0:43:f9:b6:35:
31:bb:37:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZeqjcF0zjjnTVgchawbNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2
OGVkMGUwHhcNMjYwNjMwMTcwMTM2WhcNMjYwNzAxMTcwMTM2WjAzMTEwLwYDVQQD
EyhkOGY5M2QzMTEyNDFhNjg1NGZmMzdlOWMyMzYzYTIwNjQ1Y2EzMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/zeUjALz5ODb77/u3GZJArsUF5
mUMMk3TTaArlLB4uSbmDL4eArpsQSnCodeKREELZ2RivNmpWectQDQ0GxF3cHPBo
EKDUVwvPjhVcWbK8tt8YMu62k+nh7FXywp+OgQzhTH13dpAIBS2Pk779Ws4Q9RnP
QV+4M1k0b0EkO+R7JqcsnG8dOCY+ZujJNggnlzz3n5kWhE7LMF6TPEqGFz87QchF
vehDEyDC0Aq5+WmM7rNH8yrJqUIbvtdQ8FP0C2MgvYKFtWcIH7PIbf8rzGD4ZYAq
uf3jB6X5DYzu1xaxzhC5sCGXI9XTvZY1YS/4UREpJ7rnqh2SgH0QiYjaTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj5PTESQaaFT/N+nCNjogZFyjHOMB8GA1UdIwQY
MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt
OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj
LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaeOgWC2
m4B4LNcyeiwaNf+2FMIb+iPkE4APWYhGJYu68pRgRoPhEEfWwatF/Nmg4LtmG4ua
ZVWSXnuORNgB1PXmsaMeggZlc4gNV8U8PXJ8Lo4A14a3h+Zvq1J6ICY6XYZq3cSB
Fax9YBRmqBa2g1cKj4w/5kAoaA02WpfToaPuZ7Rr8ngsz/WrfqHEmA+6nVbVQe5c
CmvlbLtaEc20K0E6BStMCY/Kov18lkppncknsYWagr/qC4pOlZEFiD9PICYU+poa
t8lxQ59UTnZgwQoFi4zPU16hts1Gr7DCmzAOfoC6YWYISkAkCIKAP1dfrsul1/Lo
raBD+bY1Mbs3qQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:57 2026 by rpki-client