Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: 4Z/VvKz7/YASQw50cYQOcZYfgsSV/Ei+arCxDoLWP6A=
Subject key identifier: 0B:ED:8E:02:A1:84:40:C0:9C:99:CA:5F:0E:7D:1A:E3:6F:85:F3:48
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019F18681F060B6F365E9FD94333F6E962BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:44 +0000
Manifest this update: Tue 30 Jun 2026 12:01:44 +0000
Manifest next update: Wed 01 Jul 2026 12:01:44 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: UHNqVO+bBoQJwm1UW5o31DVO5VjvWJJXz7rsD99Cy8I=)
2: sJbabSr0DQsUKcF8whYiP0keQLk.roa (hash: VLMKLJgJtAQMDHLOL+HZaV58yPgmwNt2u2OyVf266h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:1f:06:0b:6f:36:5e:9f:d9:43:33:f6:e9:62:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jun 30 12:01:44 2026 GMT
Not After : Jul 1 12:01:44 2026 GMT
Subject: CN=0bed8e02a18440c09c99ca5f0e7d1ae36f85f348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:66:9d:0e:8b:31:3e:8e:76:2d:e3:39:1f:
da:77:8b:56:26:4d:57:73:25:d5:b5:52:d4:71:5d:
c2:1c:42:9e:45:66:c4:56:64:60:2d:9d:ef:a0:1b:
bb:64:ff:93:90:a9:56:0f:e4:d4:dd:e6:95:9f:1b:
32:f4:ac:0c:42:97:ea:b7:56:c4:43:08:c5:92:f3:
ba:12:34:0a:cd:39:57:d0:39:d0:fe:77:5e:6f:48:
6f:91:2a:3a:10:b4:03:e5:10:f2:95:93:ea:27:5d:
fe:1e:75:e0:00:d8:a6:e6:5b:74:5b:d4:ab:c4:6f:
86:94:97:e5:c3:e3:db:fd:fb:8b:71:e0:dc:23:e4:
bb:71:d3:35:76:d7:9b:f9:46:5e:50:b0:aa:eb:a7:
1d:f9:bd:c3:c6:c9:13:5f:30:05:0a:0d:41:f9:b7:
ee:04:1e:fc:13:53:24:da:4f:5b:e6:5b:05:78:b4:
6d:61:d4:61:6c:e2:c7:bc:15:21:dd:bb:f9:24:10:
8c:e3:6a:cd:f5:d8:a9:68:04:e9:35:f4:5d:62:28:
66:94:4e:ce:0f:6e:6b:4b:82:b7:a6:d1:8f:d7:d5:
43:71:2c:28:0a:f1:4d:f5:ed:2f:46:c5:c7:12:23:
1e:17:03:9e:dc:92:24:3a:e6:8e:87:d6:c1:8f:a0:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:8E:02:A1:84:40:C0:9C:99:CA:5F:0E:7D:1A:E3:6F:85:F3:48
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:d4:90:6c:1e:42:b2:8b:61:2b:48:52:66:00:01:3a:ca:
ab:4a:45:37:d9:98:e4:70:e7:a3:f9:61:f4:16:87:6c:d6:6e:
04:fa:e4:0c:7a:c1:f8:58:ad:da:a2:1e:29:db:66:48:97:28:
e5:d3:9c:be:a1:c8:79:3d:8e:a1:50:cd:ce:4a:2b:61:3d:0b:
09:c6:53:79:b1:52:08:35:fa:5c:2d:bc:01:fc:3d:ad:1e:7f:
a0:19:8b:a3:de:16:fd:08:a7:5d:b3:eb:7f:f8:47:4b:df:aa:
3d:ae:5f:97:8a:05:aa:d5:0b:10:e1:e3:54:c8:7c:7c:6d:d4:
8f:13:24:c3:e1:cb:45:0a:8e:05:79:10:26:f6:84:2c:d4:b8:
94:d3:b7:d8:2a:f2:06:88:96:5a:e9:28:3c:c3:10:a3:30:81:
b2:80:07:92:76:c1:40:82:79:13:76:ea:4f:c3:00:21:fe:f4:
ef:26:d9:c3:2d:ee:1d:c6:76:d2:a6:c4:d2:d4:55:3c:9d:bd:
49:b2:81:d9:d6:fc:c9:ff:f0:35:a8:bf:b1:e2:08:9f:50:20:
ed:b9:62:53:1d:73:d7:b1:bd:d7:dd:ad:97:80:72:15:35:36:
11:61:53:53:f0:09:cf:68:ac:94:10:ad:e2:99:58:ec:5d:c1:
87:d3:77:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YaB8GC282Xp/ZQzP26WK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx
OTNlNjgwHhcNMjYwNjMwMTIwMTQ0WhcNMjYwNzAxMTIwMTQ0WjAzMTEwLwYDVQQD
EygwYmVkOGUwMmExODQ0MGMwOWM5OWNhNWYwZTdkMWFlMzZmODVmMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3ZmnQ6LMT6Odi3jOR/ad4tWJk1X
cyXVtVLUcV3CHEKeRWbEVmRgLZ3voBu7ZP+TkKlWD+TU3eaVnxsy9KwMQpfqt1bE
QwjFkvO6EjQKzTlX0DnQ/ndeb0hvkSo6ELQD5RDylZPqJ13+HnXgANim5lt0W9Sr
xG+GlJflw+Pb/fuLceDcI+S7cdM1dteb+UZeULCq66cd+b3DxskTXzAFCg1B+bfu
BB78E1Mk2k9b5lsFeLRtYdRhbOLHvBUh3bv5JBCM42rN9dipaATpNfRdYihmlE7O
D25rS4K3ptGP19VDcSwoCvFN9e0vRsXHEiMeFwOe3JIkOuaOh9bBj6BvhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvtjgKhhEDAnJnKXw59GuNvhfNIMB8GA1UdIwQY
MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt
ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5
LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtnUkGwe
QrKLYStIUmYAATrKq0pFN9mY5HDno/lh9BaHbNZuBPrkDHrB+Fit2qIeKdtmSJco
5dOcvqHIeT2OoVDNzkorYT0LCcZTebFSCDX6XC28Afw9rR5/oBmLo94W/QinXbPr
f/hHS9+qPa5fl4oFqtULEOHjVMh8fG3UjxMkw+HLRQqOBXkQJvaELNS4lNO32Cry
BoiWWukoPMMQozCBsoAHknbBQIJ5E3bqT8MAIf707ybZwy3uHcZ20qbE0tRVPJ29
SbKB2db8yf/wNai/seIIn1Ag7bliUx1z17G9192tl4ByFTU2EWFTU/AJz2islBCt
4plY7F3Bh9N3eQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:22:26 2026 by rpki-client