Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: G95ZaXvI8RTYKLzdKKg0NaQ8V+pR0gmG+vNshAYj3SI=
Subject key identifier: 3E:FD:9D:B1:CC:01:BE:87:9B:57:4C:71:27:2C:7F:12:F6:DD:49:D6
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019F1943D07C855A30BBFA7E19B46587D798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0591
Signing time: Tue 30 Jun 2026 16:01:42 +0000
Manifest this update: Tue 30 Jun 2026 16:01:42 +0000
Manifest next update: Wed 01 Jul 2026 16:01:42 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: kxZqMliOFA7JUkDhvn2YZoF4L5soOE8G47YxD+6F9U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:d0:7c:85:5a:30:bb:fa:7e:19:b4:65:87:d7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jun 30 16:01:42 2026 GMT
Not After : Jul 1 16:01:42 2026 GMT
Subject: CN=3efd9db1cc01be879b574c71272c7f12f6dd49d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:7c:62:d2:b4:e1:23:58:df:9d:20:8e:df:
41:5b:fd:96:cc:d5:c9:aa:56:26:92:98:a2:12:61:
9c:4b:b4:dc:ed:53:70:fc:56:d2:5e:0c:ba:a1:c9:
14:aa:0d:52:7d:9f:cb:07:2f:7d:1d:e1:5c:6d:23:
d0:fc:e8:ee:f3:74:7c:d4:8c:5d:7f:89:75:d3:35:
80:5e:5a:40:71:38:93:9e:49:4d:f7:5c:b4:f8:d7:
73:ea:94:f8:8b:32:11:02:7e:26:56:40:00:63:78:
5d:f4:97:73:c0:65:04:1a:61:d0:78:7d:27:8b:fa:
cb:8d:5d:c8:c0:dd:57:7b:4d:7c:14:64:99:6c:df:
34:a0:0d:17:99:36:27:b2:50:3c:19:8e:d7:1c:93:
22:0a:0f:93:3e:ba:4b:2b:9c:bb:f6:4b:28:4f:f3:
c3:a6:14:0c:8a:91:d2:98:83:f0:29:e8:c0:fa:6a:
89:61:49:c1:e0:f1:a1:04:bd:8c:a4:dd:fa:f8:76:
5b:ad:6c:38:a2:f7:68:64:65:73:05:dd:3a:7e:4e:
b6:92:a7:39:91:f7:f2:7d:69:98:8b:46:42:78:a2:
f4:6a:4c:25:be:60:d2:59:1f:bf:17:28:1e:67:0c:
41:05:fd:23:55:fc:1f:8e:44:4f:72:94:27:e4:b1:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:9D:B1:CC:01:BE:87:9B:57:4C:71:27:2C:7F:12:F6:DD:49:D6
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9b:ee:63:58:90:b0:e0:bd:a0:0f:dc:b8:f0:ab:72:d6:52:
2c:e7:97:3a:08:d0:91:7b:8c:5d:46:95:b9:8e:fc:e7:c8:63:
bd:6a:98:77:5f:82:3c:d9:40:df:88:57:31:4c:67:5e:3e:55:
fd:6d:9b:21:f9:f1:eb:01:94:86:cf:3f:37:f2:a9:e9:85:2d:
13:62:9f:0f:24:87:41:1a:30:3b:91:4b:1f:4e:ba:d1:b1:b0:
56:cd:60:56:16:48:04:4c:40:3a:81:d2:0b:a3:24:12:17:10:
d7:91:ca:6b:ec:76:9f:a5:e5:88:14:d3:7e:9b:a7:a4:8b:83:
bf:bc:ee:0c:49:d7:98:4d:14:02:1f:2c:c0:dc:d7:2c:a9:9e:
2e:47:67:08:45:7c:9f:e9:56:3e:6b:64:48:72:23:99:fb:90:
12:45:d9:91:eb:2b:d9:d6:5e:d5:0b:3b:95:fe:af:f3:e4:14:
02:8b:f9:26:05:ee:ba:c6:c0:45:cd:30:1f:2d:b1:fb:c2:3c:
bc:f1:ff:f3:fe:13:78:6a:ce:52:1f:f6:07:b0:05:ae:54:11:
5d:cb:ed:2b:93:4a:e7:23:dc:ea:65:e5:c5:a6:6b:36:27:53:
4e:d2:8e:76:13:05:bf:84:de:75:65:55:31:9c:12:29:56:c5:
16:c9:f3:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ9B8hVowu/p+GbRlh9eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh
NzBkOWEwHhcNMjYwNjMwMTYwMTQyWhcNMjYwNzAxMTYwMTQyWjAzMTEwLwYDVQQD
EygzZWZkOWRiMWNjMDFiZTg3OWI1NzRjNzEyNzJjN2YxMmY2ZGQ0OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNt8YtK04SNY350gjt9BW/2WzNXJ
qlYmkpiiEmGcS7Tc7VNw/FbSXgy6ockUqg1SfZ/LBy99HeFcbSPQ/Oju83R81Ixd
f4l10zWAXlpAcTiTnklN91y0+Ndz6pT4izIRAn4mVkAAY3hd9JdzwGUEGmHQeH0n
i/rLjV3IwN1Xe018FGSZbN80oA0XmTYnslA8GY7XHJMiCg+TPrpLK5y79ksoT/PD
phQMipHSmIPwKejA+mqJYUnB4PGhBL2MpN36+HZbrWw4ovdoZGVzBd06fk62kqc5
kffyfWmYi0ZCeKL0akwlvmDSWR+/FygeZwxBBf0jVfwfjkRPcpQn5LH0nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD79nbHMAb6Hm1dMcScsfxL23UnWMB8GA1UdIwQY
MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt
MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3
LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppvuY1iQ
sOC9oA/cuPCrctZSLOeXOgjQkXuMXUaVuY7858hjvWqYd1+CPNlA34hXMUxnXj5V
/W2bIfnx6wGUhs8/N/Kp6YUtE2KfDySHQRowO5FLH0660bGwVs1gVhZIBExAOoHS
C6MkEhcQ15HKa+x2n6XliBTTfpunpIuDv7zuDEnXmE0UAh8swNzXLKmeLkdnCEV8
n+lWPmtkSHIjmfuQEkXZkesr2dZe1Qs7lf6v8+QUAov5JgXuusbARc0wHy2x+8I8
vPH/8/4TeGrOUh/2B7AFrlQRXcvtK5NK5yPc6mXlxaZrNidTTtKOdhMFv4TedWVV
MZwSKVbFFsnz5A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:19 2026 by rpki-client