Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: GxJ5ivtusVp+0oe4kxfvIMrshzHFfyHCzEcBJ7UUdys=
Subject key identifier: 66:A7:61:AB:C8:5A:98:D0:11:9F:64:29:24:9A:D4:BC:A8:10:50:3F
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019EB921C8CA0A38AE063A69624A4804019B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 13EA
Signing time: Fri 12 Jun 2026 00:00:59 +0000
Manifest this update: Fri 12 Jun 2026 00:00:59 +0000
Manifest next update: Sat 13 Jun 2026 00:00:59 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: N8DC+crUIXmnTPLxv/BtQDsJOftnSenOfzmkEz7EijE=)
2: x50nfPWrcxkZfg31dDtVSDNo-l0.roa (hash: Zf8Bocjkzb8ajAA1WIwAKEh12BnqmBQgyIDI1yF5zzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:c8:ca:0a:38:ae:06:3a:69:62:4a:48:04:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Jun 12 00:00:59 2026 GMT
Not After : Jun 13 00:00:59 2026 GMT
Subject: CN=66a761abc85a98d0119f6429249ad4bca810503f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:0a:6d:39:30:d8:5b:89:ea:29:02:a3:3a:
ba:24:a7:a4:c9:79:96:65:fb:db:fe:bc:a1:67:49:
94:88:72:dd:bd:f7:ce:4b:98:7c:9a:3e:ac:3d:2d:
fb:a5:29:4a:a0:a6:19:b1:75:cb:bf:1e:05:8e:87:
94:ee:0a:bc:b9:7a:d3:99:8b:cf:b2:e1:23:02:7c:
ab:eb:a2:05:fb:06:15:bd:57:61:81:19:8f:52:87:
ec:7a:f6:27:86:39:a3:5a:35:6d:f1:f4:1a:26:a8:
80:46:9c:bd:c6:71:6a:5d:7a:2c:b2:1a:91:4e:1a:
e3:2d:27:d2:f0:3b:73:2c:80:05:f2:ca:40:09:98:
07:6f:8a:9c:a7:39:51:0b:d1:f0:c1:dd:9e:5d:76:
ce:a8:ab:5d:9c:06:57:7a:f6:67:9e:97:55:ce:7f:
95:8d:a1:00:cf:08:68:01:c7:cb:23:32:6d:97:6e:
47:34:d7:f4:58:9f:fd:ae:50:7d:9d:bd:65:30:fd:
d3:6b:8d:d4:b3:0e:78:cf:b0:cf:c6:b9:36:ad:c1:
a9:05:a8:95:69:fb:83:92:6f:2c:f1:78:f6:1b:06:
2b:eb:93:3d:a5:3e:cc:91:57:f4:1d:1f:a8:39:b8:
f5:c9:d3:33:0a:10:1a:39:ac:4e:2c:35:42:88:2e:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:61:AB:C8:5A:98:D0:11:9F:64:29:24:9A:D4:BC:A8:10:50:3F
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:14:cb:6c:7e:37:6b:cb:ae:09:f3:cf:b2:95:0b:84:7a:39:
56:43:ab:bf:fd:e2:79:c6:eb:e7:2d:75:1a:38:25:33:5d:e4:
09:a5:5f:68:d2:fe:16:ee:a3:6a:6a:16:b9:9c:40:03:c8:06:
a7:a2:d8:66:34:6c:86:d0:c1:a1:d3:e5:b5:55:61:7b:dd:8c:
52:16:56:d3:a9:92:52:10:96:ac:5b:1b:59:9f:b6:f1:64:29:
d7:38:18:a9:11:c0:6a:2b:ff:18:19:93:e9:bb:0b:62:7b:4a:
ad:33:25:4e:6e:6e:f6:41:c4:49:c6:7c:0b:d0:1d:8c:f0:7a:
fd:3c:06:04:36:00:7c:78:c9:73:52:cf:6a:6a:7f:43:4b:cf:
9f:6a:02:5c:18:a4:b2:a5:39:3e:6e:dd:9f:3c:29:9e:31:71:
fd:8c:57:7f:29:c9:9c:e5:ce:ec:9a:ee:22:68:8c:0b:f3:86:
37:38:bb:69:1a:5c:a2:dc:fa:72:e1:34:e6:36:72:60:5e:b6:
02:11:70:b9:fa:93:95:62:a9:41:11:5f:3b:02:b0:d7:68:05:
eb:76:6e:29:5b:69:53:56:a5:91:c8:3b:85:d7:26:38:15:d9:
6f:6b:5b:ea:a4:02:ce:79:c4:ab:35:f6:a5:b6:3a:d1:2a:98:
2f:fe:53:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IcjKCjiuBjppYkpIBAGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0
YWMwNGEwHhcNMjYwNjEyMDAwMDU5WhcNMjYwNjEzMDAwMDU5WjAzMTEwLwYDVQQD
Eyg2NmE3NjFhYmM4NWE5OGQwMTE5ZjY0MjkyNDlhZDRiY2E4MTA1MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiQKbTkw2FuJ6ikCozq6JKekyXmW
Zfvb/ryhZ0mUiHLdvffOS5h8mj6sPS37pSlKoKYZsXXLvx4FjoeU7gq8uXrTmYvP
suEjAnyr66IF+wYVvVdhgRmPUofsevYnhjmjWjVt8fQaJqiARpy9xnFqXXosshqR
ThrjLSfS8DtzLIAF8spACZgHb4qcpzlRC9Hwwd2eXXbOqKtdnAZXevZnnpdVzn+V
jaEAzwhoAcfLIzJtl25HNNf0WJ/9rlB9nb1lMP3Ta43Usw54z7DPxrk2rcGpBaiV
afuDkm8s8Xj2GwYr65M9pT7MkVf0HR+oObj1ydMzChAaOaxOLDVCiC65+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGanYavIWpjQEZ9kKSSa1LyoEFA/MB8GA1UdIwQY
MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt
MzUwMjY1OGFlNmY1LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1
LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRTLbH43
a8uuCfPPspULhHo5VkOrv/3iecbr5y11GjglM13kCaVfaNL+Fu6jamoWuZxAA8gG
p6LYZjRshtDBodPltVVhe92MUhZW06mSUhCWrFsbWZ+28WQp1zgYqRHAaiv/GBmT
6bsLYntKrTMlTm5u9kHEScZ8C9AdjPB6/TwGBDYAfHjJc1LPamp/Q0vPn2oCXBik
sqU5Pm7dnzwpnjFx/YxXfynJnOXO7JruImiMC/OGNzi7aRpcotz6cuE05jZyYF62
AhFwufqTlWKpQRFfOwKw12gF63ZuKVtpU1alkcg7hdcmOBXZb2tb6qQCznnEqzX2
pbY60SqYL/5T4g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:23 2026 by rpki-client