Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: fn/yZkbw+s2xd+IavoCq7GZ9yEdoIZ7Uh1MraRNJWeA=
Subject key identifier: A0:94:62:B3:51:8A:0D:92:26:B0:EB:46:AB:F9:15:AD:6A:5E:F2:38
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019F129C49703FC9DF97945FE9E0A5FCA361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 036C
Signing time: Mon 29 Jun 2026 09:01:00 +0000
Manifest this update: Mon 29 Jun 2026 09:01:00 +0000
Manifest next update: Tue 30 Jun 2026 09:01:00 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: O8vUwNoHYOBH6LTR7ODI6uKs+HSF4ykiS7WUpdt07d0=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:49:70:3f:c9:df:97:94:5f:e9:e0:a5:fc:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Jun 29 09:01:00 2026 GMT
Not After : Jun 30 09:01:00 2026 GMT
Subject: CN=a09462b3518a0d9226b0eb46abf915ad6a5ef238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:d5:6e:91:7f:b1:0d:b5:ac:e7:a2:85:e1:
4e:ea:cc:31:de:82:d3:6d:67:1a:97:7b:17:13:1e:
42:28:79:eb:5f:fd:9f:58:0e:2d:aa:a1:eb:cf:3b:
13:51:9c:da:2e:44:14:ac:95:ab:57:18:e9:3c:1b:
0b:0e:1e:71:62:80:b9:44:37:5d:b2:f2:bb:fd:7d:
65:d5:16:d6:02:f4:0a:2f:d0:90:d9:18:ff:52:f6:
b7:22:27:3d:d5:5b:6e:ee:b4:50:a9:8e:f3:fe:5e:
c1:8b:53:e6:a7:3b:8d:d0:3d:a2:63:5a:4a:34:18:
4f:db:af:55:00:ae:0b:fb:e2:5e:7f:8c:3a:7d:85:
7a:04:80:7f:91:41:bd:d7:92:1f:29:58:0f:a7:96:
7d:72:78:8d:c4:40:ce:c0:73:f6:8d:1a:9a:1f:cb:
5a:3b:b5:15:0b:c0:ed:da:c1:24:c1:27:ca:11:cb:
ff:40:fc:26:2d:db:b5:0e:90:73:9a:b6:24:a7:5a:
39:1f:e6:7c:58:71:6a:a7:84:fa:8f:cb:f4:a8:31:
d1:55:db:7d:b3:83:24:ff:05:6a:74:03:17:7b:04:
22:a5:15:ca:4f:74:d6:17:15:35:48:37:ef:97:67:
b6:f0:5e:fa:f1:c9:48:6a:8b:fc:24:8a:26:03:02:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:62:B3:51:8A:0D:92:26:B0:EB:46:AB:F9:15:AD:6A:5E:F2:38
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f0:ae:81:f8:ef:3c:f3:32:b8:38:fa:2a:3e:b9:6a:09:bd:
3f:49:89:6f:bd:f7:2f:32:6b:25:af:17:4c:93:5b:d7:18:18:
f7:64:2c:8d:1f:f3:10:e6:cd:da:83:ad:61:54:5f:e5:9d:38:
5d:de:20:22:d2:fa:51:6c:9b:7d:b7:91:89:ed:eb:dc:96:b8:
33:5c:1a:5c:4b:85:4a:2d:8a:bc:7b:92:b8:48:fd:4b:d6:a9:
e7:25:b4:85:e8:14:51:37:96:c3:c6:ec:e7:b1:70:b1:29:9f:
1e:c9:24:ed:44:b3:1f:d2:97:f3:86:50:0e:35:7d:2c:e6:5a:
e6:92:55:f0:9f:05:d8:4c:08:6f:fd:8b:4d:eb:48:0e:45:1a:
60:f4:c3:5e:e9:a0:08:ef:bb:4f:05:0c:b8:ac:2b:73:c5:a4:
12:6b:60:39:3b:0a:85:5d:11:3e:de:1c:72:b2:b8:a2:9d:28:
6e:87:dd:d0:c6:ff:eb:6d:38:48:9f:c3:99:82:01:e9:30:c4:
d0:3f:3e:29:4a:3a:16:0d:e4:c5:3e:27:3b:44:b6:8e:0d:e1:
17:bf:93:49:cd:20:16:19:66:d4:a0:6e:ef:2d:c8:c1:87:53:
bb:1d:47:b2:f6:b9:4d:29:b5:a9:57:a3:45:3d:40:42:73:aa:
76:34:9f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnElwP8nfl5Rf6eCl/KNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmVmYjRkOTQwNDM2ODcxYTI0YTg3MjJmM2M5ZDY0ZDZj
ODQwMTAwHhcNMjYwNjI5MDkwMTAwWhcNMjYwNjMwMDkwMTAwWjAzMTEwLwYDVQQD
EyhhMDk0NjJiMzUxOGEwZDkyMjZiMGViNDZhYmY5MTVhZDZhNWVmMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkPVbpF/sQ21rOeiheFO6swx3oLT
bWcal3sXEx5CKHnrX/2fWA4tqqHrzzsTUZzaLkQUrJWrVxjpPBsLDh5xYoC5RDdd
svK7/X1l1RbWAvQKL9CQ2Rj/Uva3Iic91Vtu7rRQqY7z/l7Bi1PmpzuN0D2iY1pK
NBhP269VAK4L++Jef4w6fYV6BIB/kUG915IfKVgPp5Z9cniNxEDOwHP2jRqaH8ta
O7UVC8Dt2sEkwSfKEcv/QPwmLdu1DpBzmrYkp1o5H+Z8WHFqp4T6j8v0qDHRVdt9
s4Mk/wVqdAMXewQipRXKT3TWFxU1SDfvl2e28F768clIaov8JIomAwI7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCUYrNRig2SJrDrRqv5Fa1qXvI4MB8GA1UdIwQY
MBaAFNG++02UBDaHGiSoci88nWTWyEAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEt
MGQ1ZDk1MTAxMmU3LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEtMGQ1ZDk1MTAxMmU3
LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPCugfjv
PPMyuDj6Kj65agm9P0mJb733LzJrJa8XTJNb1xgY92QsjR/zEObN2oOtYVRf5Z04
Xd4gItL6UWybfbeRie3r3Ja4M1waXEuFSi2KvHuSuEj9S9ap5yW0hegUUTeWw8bs
57FwsSmfHskk7USzH9KX84ZQDjV9LOZa5pJV8J8F2EwIb/2LTetIDkUaYPTDXumg
CO+7TwUMuKwrc8WkEmtgOTsKhV0RPt4ccrK4op0obofd0Mb/6204SJ/DmYIB6TDE
0D8+KUo6Fg3kxT4nO0S2jg3hF7+TSc0gFhlm1KBu7y3IwYdTux1Hsva5TSm1qVej
RT1AQnOqdjSf+A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:21 2026 by rpki-client