
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: mX9hbmvHMlg+h/slV+aOz9IvaQ3FZ5eV+ra65Z5rGJ0=
Subject key identifier: 47:40:3A:4E:FE:57:2B:B7:DE:C2:AF:4A:02:75:72:3C:22:CF:B5:CC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019E8F80AC72E06348C913C23D0B133676EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 19C5
Signing time: Wed 03 Jun 2026 22:00:35 +0000
Manifest this update: Wed 03 Jun 2026 22:00:35 +0000
Manifest next update: Thu 04 Jun 2026 22:00:35 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: M/LaCTxHmrSDw66i6bmo3wgGznR5uono2S+pyHJzJPE=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:80:ac:72:e0:63:48:c9:13:c2:3d:0b:13:36:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 3 22:00:35 2026 GMT
Not After : Jun 4 22:00:35 2026 GMT
Subject: CN=47403a4efe572bb7dec2af4a0275723c22cfb5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:5a:01:17:c3:c6:8b:77:5b:68:4b:e3:41:
61:94:86:72:ae:36:2d:b4:4e:ea:08:0e:e2:fb:11:
db:b1:f4:d6:dc:fc:7c:25:23:b4:d9:aa:7f:9b:25:
ba:d1:40:f3:1a:6b:5e:ff:56:55:8c:10:b9:16:70:
03:ca:8c:9f:88:05:a7:be:95:f1:1d:84:e6:36:98:
63:d0:1c:be:6c:0b:80:cf:5b:04:b9:43:9b:ad:e8:
26:73:bc:f9:be:bf:94:63:ee:e2:b6:70:60:b0:9d:
4f:70:ce:b1:d8:85:98:d9:d3:09:b2:5b:61:ac:72:
32:11:77:de:99:ff:44:d5:5d:ea:cd:8a:57:a0:4c:
5d:d2:69:80:e9:be:3c:78:95:d9:df:c2:d0:12:80:
f7:ee:75:b8:eb:bc:dc:ff:f0:f1:d0:a5:b1:eb:c2:
e7:5e:a8:d4:b0:45:9e:5c:b5:01:ad:f5:2d:44:e1:
d5:2d:2b:34:f0:bc:bd:68:2e:95:ad:53:98:84:39:
75:7e:17:32:9b:83:0a:03:0e:55:af:97:16:03:d3:
4b:30:a2:2a:88:06:38:3d:57:3f:d8:7e:ff:c2:fa:
1c:86:bc:2c:73:71:d4:82:ca:57:d4:0e:48:63:80:
af:f7:2a:d1:85:24:cc:97:9f:81:04:da:7a:ab:f6:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:3A:4E:FE:57:2B:B7:DE:C2:AF:4A:02:75:72:3C:22:CF:B5:CC
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5f:d9:2f:90:52:52:31:ce:4f:12:e8:0b:38:94:25:96:f0:
fb:50:b3:3d:ad:3f:45:96:27:17:ad:5c:43:6c:10:70:fc:a0:
2d:f5:87:54:92:4d:00:53:d2:79:9b:cd:f8:ab:b7:0c:6b:32:
73:78:4f:a8:32:9c:8d:27:8d:43:3d:ab:38:be:5d:d2:d2:77:
f8:7e:cc:60:2a:8a:fe:01:d2:96:45:ea:84:3b:d7:eb:72:60:
c1:ab:78:ca:fd:71:dc:27:50:5b:51:47:4f:fa:41:aa:50:3a:
d6:65:b0:92:c9:9c:01:0d:2a:c9:7a:e7:6d:de:3e:79:80:14:
b4:2e:3a:0b:30:db:ac:f2:24:ed:99:6a:5a:85:2e:e3:8e:b1:
10:b2:43:c5:74:c0:e3:6d:1c:64:02:e8:6c:bd:2b:db:91:f7:
ee:2d:f1:a2:bc:a7:64:6e:bd:03:53:c7:fc:8a:d8:bd:9c:35:
74:fc:21:fd:41:24:dc:85:3a:e3:bf:56:75:6e:1c:69:6b:ec:
29:e4:09:bc:4f:85:05:da:f0:f1:ca:67:c6:f7:5b:d2:c7:58:
7e:5b:2f:c9:e7:f2:ce:81:6a:fd:b9:43:92:fe:41:4d:b5:b6:
45:07:d0:5f:ae:6b:10:77:5f:7b:a0:84:0f:d3:d7:b0:f6:66:
14:18:1f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6PgKxy4GNIyRPCPQsTNnbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjYwNjAzMjIwMDM1WhcNMjYwNjA0MjIwMDM1WjAzMTEwLwYDVQQD
Eyg0NzQwM2E0ZWZlNTcyYmI3ZGVjMmFmNGEwMjc1NzIzYzIyY2ZiNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RNaARfDxot3W2hL40FhlIZyrjYt
tE7qCA7i+xHbsfTW3Px8JSO02ap/myW60UDzGmte/1ZVjBC5FnADyoyfiAWnvpXx
HYTmNphj0By+bAuAz1sEuUObregmc7z5vr+UY+7itnBgsJ1PcM6x2IWY2dMJslth
rHIyEXfemf9E1V3qzYpXoExd0mmA6b48eJXZ38LQEoD37nW467zc//Dx0KWx68Ln
XqjUsEWeXLUBrfUtROHVLSs08Ly9aC6VrVOYhDl1fhcym4MKAw5Vr5cWA9NLMKIq
iAY4PVc/2H7/wvochrwsc3HUgspX1A5IY4Cv9yrRhSTMl5+BBNp6q/ZSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdAOk7+Vyu33sKvSgJ1cjwiz7XMMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl/ZL5BS
UjHOTxLoCziUJZbw+1CzPa0/RZYnF61cQ2wQcPygLfWHVJJNAFPSeZvN+Ku3DGsy
c3hPqDKcjSeNQz2rOL5d0tJ3+H7MYCqK/gHSlkXqhDvX63Jgwat4yv1x3CdQW1FH
T/pBqlA61mWwksmcAQ0qyXrnbd4+eYAUtC46CzDbrPIk7ZlqWoUu446xELJDxXTA
420cZALobL0r25H37i3xorynZG69A1PH/IrYvZw1dPwh/UEk3IU6479WdW4caWvs
KeQJvE+FBdrw8cpnxvdb0sdYflsvyefyzoFq/blDkv5BTbW2RQfQX65rEHdfe6CE
D9PXsPZmFBgfdg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:11 2026 by rpki-client