Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: OvXxvNXrzrzmoerMWt1LQUHO7+UVV4fN8dhVgMbjusU=
Subject key identifier: D5:E6:D4:FD:6A:03:17:F8:31:A7:21:AF:B6:26:BF:F3:A4:9D:25:CD
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019F190D10356BAED76AEFB8CA883C198456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0F09
Signing time: Tue 30 Jun 2026 15:01:54 +0000
Manifest this update: Tue 30 Jun 2026 15:01:54 +0000
Manifest next update: Wed 01 Jul 2026 15:01:54 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: QLtqKlYVcdouTt7Vcn3/qCUw6lEQWpJi9P0yedQkD8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:10:35:6b:ae:d7:6a:ef:b8:ca:88:3c:19:84:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Jun 30 15:01:54 2026 GMT
Not After : Jul 1 15:01:54 2026 GMT
Subject: CN=d5e6d4fd6a0317f831a721afb626bff3a49d25cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:d8:bb:61:f4:03:3f:32:8f:7e:fb:5e:08:
62:b4:c8:41:3e:61:d5:5e:e6:a5:ee:bc:74:cb:f2:
55:84:d7:5c:36:0c:d1:aa:52:90:ec:d9:38:68:ae:
86:a3:ef:52:9c:2b:66:ab:0c:b5:2a:6a:0a:50:4f:
d3:f3:35:72:ae:f6:06:cf:3c:d3:6c:c9:1d:f3:52:
dd:62:00:f3:07:c4:60:2f:73:92:05:29:db:f1:35:
5b:6e:c1:09:1e:68:01:53:94:1b:42:cd:35:4b:12:
55:f7:36:00:e0:6b:02:d4:62:c2:01:91:ec:03:a4:
fc:85:8c:72:51:51:b9:68:4f:99:79:50:7d:61:a9:
9a:e5:93:04:15:de:62:e5:9b:7d:df:cf:9b:2d:78:
76:de:9b:1b:31:7f:32:34:e9:9d:c9:e9:79:6b:42:
33:12:64:eb:f4:02:61:25:09:99:1b:99:e7:24:b3:
b1:4c:29:cd:ce:80:8f:47:4a:af:f6:b1:23:71:d3:
54:4b:2c:94:24:76:c6:9e:a1:12:de:b6:dc:1e:77:
ad:d9:5e:03:cf:bd:c7:b9:19:5e:ae:80:74:37:ba:
84:ed:94:90:be:f0:38:d1:0d:08:78:b9:47:9c:bb:
2e:11:f7:dc:1f:c5:39:cf:0d:8a:53:cd:35:b4:d0:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:D4:FD:6A:03:17:F8:31:A7:21:AF:B6:26:BF:F3:A4:9D:25:CD
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:7c:03:78:9c:5c:af:bc:71:4e:a5:df:06:da:68:ff:87:
26:69:e4:47:d6:9b:b2:0d:90:89:3b:c3:77:dc:23:ab:bd:a1:
77:08:1c:37:c2:db:18:8b:04:2c:32:43:e8:8d:74:21:1b:16:
f3:42:52:d7:6b:2c:2a:09:d1:a5:59:54:cb:ae:92:e9:74:68:
98:f0:9d:b7:37:4c:3d:0c:da:de:19:74:d0:24:fc:fe:13:e0:
af:a3:9f:49:8f:eb:e2:db:c8:18:88:12:e7:c0:d0:fe:b4:fb:
0f:f7:40:b7:6e:8c:33:1d:f4:75:d5:dd:8e:41:46:21:84:80:
68:78:f1:ba:73:88:ea:c4:dd:38:29:33:b7:d2:31:d4:46:d7:
bd:73:2f:d8:06:87:26:0a:62:41:00:48:0d:46:f7:a9:87:01:
9b:92:b4:f7:86:b9:67:e2:d6:f9:7d:6f:e1:e9:e9:64:82:d1:
c9:04:f6:5a:dd:cc:16:1e:52:98:4b:87:eb:94:bc:9c:b9:47:
6f:5b:b1:40:30:04:62:ed:70:01:3f:19:65:44:8d:07:3d:ef:
92:db:b1:2d:cd:1a:99:07:4e:07:62:47:a6:c9:6e:a6:05:2e:
fa:66:61:de:ba:e6:7c:4f:8b:96:b7:ef:d3:a1:c0:9d:6c:f0:
e1:e7:91:f1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8ZDRA1a67Xau+4yog8GYRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk
YTM5MmUwHhcNMjYwNjMwMTUwMTU0WhcNMjYwNzAxMTUwMTU0WjAzMTEwLwYDVQQD
EyhkNWU2ZDRmZDZhMDMxN2Y4MzFhNzIxYWZiNjI2YmZmM2E0OWQyNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IvYu2H0Az8yj377XghitMhBPmHV
Xual7rx0y/JVhNdcNgzRqlKQ7Nk4aK6Go+9SnCtmqwy1KmoKUE/T8zVyrvYGzzzT
bMkd81LdYgDzB8RgL3OSBSnb8TVbbsEJHmgBU5QbQs01SxJV9zYA4GsC1GLCAZHs
A6T8hYxyUVG5aE+ZeVB9Yama5ZMEFd5i5Zt938+bLXh23psbMX8yNOmdyel5a0Iz
EmTr9AJhJQmZG5nnJLOxTCnNzoCPR0qv9rEjcdNUSyyUJHbGnqES3rbcHnet2V4D
z73HuRleroB0N7qE7ZSQvvA40Q0IeLlHnLsuEffcH8U5zw2KU801tND4fQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNXm1P1qAxf4Machr7Ymv/OknSXNMB8GA1UdIwQY
MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh
LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx
ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkt8
A3icXK+8cU6l3wbaaP+HJmnkR9absg2QiTvDd9wjq72hdwgcN8LbGIsELDJD6I10
IRsW80JS12ssKgnRpVlUy66S6XRomPCdtzdMPQza3hl00CT8/hPgr6OfSY/r4tvI
GIgS58DQ/rT7D/dAt26MMx30ddXdjkFGIYSAaHjxunOI6sTdOCkzt9Ix1EbXvXMv
2AaHJgpiQQBIDUb3qYcBm5K094a5Z+LW+X1v4enpZILRyQT2Wt3MFh5SmEuH65S8
nLlHb1uxQDAEYu1wAT8ZZUSNBz3vktuxLc0amQdOB2JHpslupgUu+mZh3rrmfE+L
lrfv06HAnWzw4eeR8Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:15 2026 by rpki-client