Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: ev0yJ2udGN/qbboY04B68epdXAmzv1wmDJvtXlPdKAU=
Subject key identifier: 09:69:7E:13:D6:10:03:ED:69:A6:3B:09:E2:03:20:62:33:78:03:98
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019E910178BA65DBB23FC4F2BF663B7EDA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0E9D
Signing time: Thu 04 Jun 2026 05:00:53 +0000
Manifest this update: Thu 04 Jun 2026 05:00:53 +0000
Manifest next update: Fri 05 Jun 2026 05:00:53 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: fX/qFjfg2R6maLuJ8LHr0gSA9mxEIQk3eGAanHrQuiM=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:78:ba:65:db:b2:3f:c4:f2:bf:66:3b:7e:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jun 4 05:00:53 2026 GMT
Not After : Jun 5 05:00:53 2026 GMT
Subject: CN=09697e13d61003ed69a63b09e203206233780398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:f8:5d:a4:e5:59:48:ea:7e:fd:9c:65:b7:
d7:82:8a:8e:5a:5c:fc:5b:34:e3:09:3e:d5:88:02:
89:63:b2:c3:21:81:1d:f2:d4:32:ad:8b:45:94:2f:
91:a0:49:22:bc:f4:29:cf:2b:b9:a4:4e:c8:60:1d:
a6:a2:d2:00:13:eb:fe:e3:33:3b:95:df:c0:8e:01:
01:03:89:4f:ff:ab:8b:ab:ca:53:85:9b:0c:a9:10:
dd:1e:ff:69:ad:c1:a5:8a:83:0a:29:ea:f1:3f:4b:
e2:a9:32:20:1a:88:95:00:2a:6a:9e:ec:46:28:f8:
50:fb:c7:b8:7a:77:3e:ee:b3:81:56:ad:e5:4d:9c:
e6:70:a7:7d:47:ec:ff:14:63:f7:f6:06:fa:e1:6b:
ac:b0:69:79:f8:72:38:7f:53:53:88:ab:83:32:ec:
30:6e:59:f2:b2:b9:34:ac:15:7b:3c:c3:0b:bc:1a:
4a:58:82:c7:fc:a7:fd:64:76:42:50:ce:57:28:e6:
04:94:15:ce:d1:91:4a:e3:16:cf:e1:40:dc:8b:a0:
7b:c7:ad:9e:36:98:d6:c9:d2:bd:2a:23:83:21:cf:
b5:18:7f:5e:a1:96:63:4a:cf:9b:cd:4c:eb:74:5e:
ff:eb:b3:9d:ed:3b:42:00:34:d8:e2:61:a8:cd:69:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:7E:13:D6:10:03:ED:69:A6:3B:09:E2:03:20:62:33:78:03:98
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:dd:ef:bc:a1:a2:c0:6a:ea:cf:43:f9:0c:dd:2d:c3:2a:
33:41:5a:76:d9:73:27:ce:6f:dc:c0:a4:59:91:60:2b:30:12:
88:d7:91:88:8b:4f:34:61:80:d7:22:ea:db:cf:e2:ba:de:d9:
17:c8:5e:55:15:4c:bc:7f:77:c2:57:3a:d5:2b:60:68:c6:32:
76:2f:0d:6a:61:3f:b3:3d:b3:00:16:99:ad:5b:32:b3:b4:bb:
f8:e1:c3:65:2b:d9:22:5d:9e:e2:46:f5:ca:4d:fa:b7:07:14:
73:4c:05:aa:f9:cd:91:8f:92:23:ef:06:9a:4b:b4:5a:22:6e:
a7:7b:4d:4b:b3:c3:e8:0a:70:f3:43:31:98:45:e1:cc:2a:4a:
c9:9c:8d:18:b3:a3:05:09:16:3c:8d:aa:7b:4e:b5:d8:ea:d6:
0e:62:9e:38:de:de:b1:0b:8d:1a:da:bc:d4:76:cc:d5:d6:81:
15:2d:bf:6a:58:06:e3:c7:5f:d7:06:37:ab:e1:78:27:46:7a:
74:82:52:61:ee:56:c0:17:1b:8c:fc:2e:0a:75:58:d0:21:a3:
06:9d:41:62:10:b8:6f:63:e4:13:f8:39:56:3e:33:6b:7d:d0:
3a:5d:b9:21:b3:72:6a:78:8f:c0:a9:b9:c8:ae:fd:19:30:83:
1c:c9:f1:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RAXi6ZduyP8Tyv2Y7ftoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjYwNjA0MDUwMDUzWhcNMjYwNjA1MDUwMDUzWjAzMTEwLwYDVQQD
EygwOTY5N2UxM2Q2MTAwM2VkNjlhNjNiMDllMjAzMjA2MjMzNzgwMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRn4XaTlWUjqfv2cZbfXgoqOWlz8
WzTjCT7ViAKJY7LDIYEd8tQyrYtFlC+RoEkivPQpzyu5pE7IYB2motIAE+v+4zM7
ld/AjgEBA4lP/6uLq8pThZsMqRDdHv9prcGlioMKKerxP0viqTIgGoiVACpqnuxG
KPhQ+8e4enc+7rOBVq3lTZzmcKd9R+z/FGP39gb64WussGl5+HI4f1NTiKuDMuww
blnysrk0rBV7PMMLvBpKWILH/Kf9ZHZCUM5XKOYElBXO0ZFK4xbP4UDci6B7x62e
NpjWydK9KiODIc+1GH9eoZZjSs+bzUzrdF7/67Od7TtCADTY4mGozWkA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlpfhPWEAPtaaY7CeIDIGIzeAOYMB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5jd77yh
osBq6s9D+QzdLcMqM0FadtlzJ85v3MCkWZFgKzASiNeRiItPNGGA1yLq28/iut7Z
F8heVRVMvH93wlc61StgaMYydi8NamE/sz2zABaZrVsys7S7+OHDZSvZIl2e4kb1
yk36twcUc0wFqvnNkY+SI+8Gmku0WiJup3tNS7PD6Apw80MxmEXhzCpKyZyNGLOj
BQkWPI2qe0612OrWDmKeON7esQuNGtq81HbM1daBFS2/algG48df1wY3q+F4J0Z6
dIJSYe5WwBcbjPwuCnVY0CGjBp1BYhC4b2PkE/g5Vj4za33QOl25IbNyaniPwKm5
yK79GTCDHMnxmw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:42 2026 by rpki-client