Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: Qbb+go/uWHQmxVugat4+6w5K/sP+fWtFHGpPmkIug4s=
Subject key identifier: 6C:84:F0:DB:DC:CC:59:79:B0:CE:9A:E9:C3:8F:BD:1B:99:B3:E5:F2
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019F189E3D75583CFECF425E135C0CB55CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 13:00:51 +0000
Manifest this update: Tue 30 Jun 2026 13:00:51 +0000
Manifest next update: Wed 01 Jul 2026 13:00:51 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: fQmQYxLSyyeRBJEN/M+LUpGNLqvM64o71GjOUvgHV2k=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:3d:75:58:3c:fe:cf:42:5e:13:5c:0c:b5:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jun 30 13:00:51 2026 GMT
Not After : Jul 1 13:00:51 2026 GMT
Subject: CN=6c84f0dbdccc5979b0ce9ae9c38fbd1b99b3e5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:a1:cd:eb:fa:41:47:22:6d:25:e9:37:b9:
8f:7b:1c:db:d2:a7:9d:e6:ea:e9:2d:7f:93:81:3b:
ac:06:dd:d9:4d:bb:99:5e:fd:37:88:f1:bd:1e:9f:
6c:c8:16:0a:92:d9:3f:86:4d:59:00:c4:d5:e9:64:
35:07:35:99:c5:2a:49:67:13:14:26:5e:65:db:1e:
59:62:9b:b6:7e:17:2e:86:be:a8:26:79:08:e7:30:
4e:cb:53:be:7f:cf:19:e1:a2:97:1b:c2:09:8c:71:
79:3b:e1:a2:ed:b5:a5:86:ae:60:1e:fc:ed:9e:21:
d1:20:d7:f1:97:a2:c6:57:71:15:e4:90:29:52:56:
eb:4a:68:ef:05:40:d2:ed:8d:8d:d4:eb:d8:7b:9c:
b7:b0:ff:6c:94:44:62:a5:bc:29:e0:6b:30:09:f8:
48:64:f4:f5:28:60:c5:9e:1f:87:5a:04:5e:4b:46:
d6:05:64:96:6e:fa:f6:17:6d:56:19:a1:f7:eb:29:
b4:1b:93:ea:f5:d4:5b:9e:ca:71:3c:89:3e:91:5c:
c2:27:3d:ef:0c:6b:e6:ce:c0:0d:7b:2e:cb:1b:41:
2a:99:d4:ae:95:2a:25:b6:4f:ab:35:1e:b4:47:8f:
01:03:e6:68:e8:94:47:57:9c:51:a5:a5:41:65:1a:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:F0:DB:DC:CC:59:79:B0:CE:9A:E9:C3:8F:BD:1B:99:B3:E5:F2
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4d:9c:f8:de:33:42:d5:2d:fc:9c:0c:4a:87:0f:c6:1e:8a:
53:64:8f:18:0d:c2:8a:84:73:c6:36:f1:9e:f4:9d:bd:6a:8e:
36:98:ec:89:1a:92:dc:03:50:9e:f8:ca:35:b4:55:62:42:a8:
65:cc:fc:ec:27:d9:ab:82:27:b5:8e:59:fa:6b:78:4b:74:b4:
f5:89:73:9b:58:dd:35:50:71:c4:fa:a1:5c:62:4f:05:57:4f:
eb:4a:7c:37:30:9f:e2:0b:15:7d:d1:f3:a6:a7:62:a4:16:b5:
bd:a6:be:1a:90:38:33:f9:a3:3f:37:08:4b:23:7d:8c:51:90:
be:29:b5:67:f2:a4:20:57:d3:6a:6f:fc:61:fd:a5:0f:81:41:
55:2a:eb:4e:1b:76:93:6e:8f:cc:ba:32:0e:c8:6b:a5:fd:03:
50:d5:dd:3f:c2:29:a0:0c:d1:ec:f4:7c:82:82:e7:e0:b0:00:
13:de:bc:fa:34:63:21:66:5b:9f:86:de:79:b4:66:58:b9:85:
d8:ff:ef:00:d1:83:f7:0f:f7:96:92:14:fa:66:cf:83:b1:30:
84:b4:25:4e:fc:f8:3e:99:73:e2:90:5f:0d:cc:0c:14:93:f9:
00:4b:29:ad:68:3d:52:42:38:62:4f:15:4b:20:67:7f:cd:ed:
38:92:33:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynj11WDz+z0JeE1wMtVzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzhlYTQ2Y2MyMWQ0NWVkNjEyNjhkNGE5ZjU2NzMyYzg1
ZTIxNTAwHhcNMjYwNjMwMTMwMDUxWhcNMjYwNzAxMTMwMDUxWjAzMTEwLwYDVQQD
Eyg2Yzg0ZjBkYmRjY2M1OTc5YjBjZTlhZTljMzhmYmQxYjk5YjNlNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hGhzev6QUcibSXpN7mPexzb0qed
5urpLX+TgTusBt3ZTbuZXv03iPG9Hp9syBYKktk/hk1ZAMTV6WQ1BzWZxSpJZxMU
Jl5l2x5ZYpu2fhcuhr6oJnkI5zBOy1O+f88Z4aKXG8IJjHF5O+Gi7bWlhq5gHvzt
niHRINfxl6LGV3EV5JApUlbrSmjvBUDS7Y2N1OvYe5y3sP9slERipbwp4GswCfhI
ZPT1KGDFnh+HWgReS0bWBWSWbvr2F21WGaH36ym0G5Pq9dRbnspxPIk+kVzCJz3v
DGvmzsANey7LG0EqmdSulSoltk+rNR60R48BA+Zo6JRHV5xRpaVBZRpLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyE8NvczFl5sM6a6cOPvRuZs+XyMB8GA1UdIwQY
MBaAFA946kbMIdRe1hJo1Kn1ZzLIXiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMt
MDMyYjNiNjE0ZGQ4LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMtMDMyYjNiNjE0ZGQ4
LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAok2c+N4z
QtUt/JwMSocPxh6KU2SPGA3CioRzxjbxnvSdvWqONpjsiRqS3ANQnvjKNbRVYkKo
Zcz87CfZq4IntY5Z+mt4S3S09Ylzm1jdNVBxxPqhXGJPBVdP60p8NzCf4gsVfdHz
pqdipBa1vaa+GpA4M/mjPzcISyN9jFGQvim1Z/KkIFfTam/8Yf2lD4FBVSrrTht2
k26PzLoyDshrpf0DUNXdP8IpoAzR7PR8goLn4LAAE968+jRjIWZbn4beebRmWLmF
2P/vANGD9w/3lpIU+mbPg7EwhLQlTvz4Pplz4pBfDcwMFJP5AEsprWg9UkI4Yk8V
SyBnf83tOJIznQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:44 2026 by rpki-client