Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: WfTGn6Zs+sQckYSD7q7C3fX1H196PzK2Hgt8JCIDD3U=
Subject key identifier: D9:75:71:AE:30:1C:85:D9:5B:81:42:B7:09:A8:F0:23:50:63:0C:AC
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019EE40D188626046C18D8C8A228FA8E4A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1436
Signing time: Sat 20 Jun 2026 08:02:03 +0000
Manifest this update: Sat 20 Jun 2026 08:02:03 +0000
Manifest next update: Sun 21 Jun 2026 08:02:03 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: FYSSY8bXVhepaZjYBCRns1NgPcHRSx6et44M55RsFGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:0d:18:86:26:04:6c:18:d8:c8:a2:28:fa:8e:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jun 20 08:02:03 2026 GMT
Not After : Jun 21 08:02:03 2026 GMT
Subject: CN=d97571ae301c85d95b8142b709a8f02350630cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:31:b3:64:55:59:a8:18:a9:a6:cf:b3:ff:
e0:cf:3e:43:bd:d6:44:68:0e:ff:cb:af:c0:df:e4:
ce:bb:0d:9a:7b:b4:03:68:e5:44:a6:6a:df:ea:9d:
3a:d6:4b:c4:a8:0f:cd:1b:64:2f:81:ea:d4:f1:10:
9f:82:d6:d3:76:8b:de:e7:50:9c:b6:a8:37:e0:b2:
8c:7f:2e:dd:bd:74:51:f6:1a:3a:83:e7:c6:0a:30:
36:ff:9e:95:80:0b:a0:a1:c5:da:6d:68:85:92:63:
cf:26:f2:1c:26:5b:76:b5:41:54:b1:28:ea:cd:5d:
62:e6:ce:7d:89:9e:cc:de:8b:60:67:a8:ea:55:30:
59:01:f5:3e:05:fb:ee:b8:7f:7a:b1:a0:cb:e0:45:
75:e1:2b:0f:8f:1f:d9:b9:07:98:48:85:b4:b7:52:
dd:9e:9b:29:81:ff:d8:22:30:9d:ab:37:82:5c:33:
85:75:69:32:42:2f:33:06:77:25:00:3a:8b:a6:8d:
f0:15:7e:ff:1b:a0:9e:5e:f8:2d:c9:dd:89:03:97:
03:c1:d5:3b:f2:62:b8:d9:e4:ac:0e:36:40:f0:9a:
45:43:53:06:8f:b8:4b:d0:b5:70:0c:01:bc:b9:bc:
72:ac:f6:f8:8f:95:34:61:93:d1:1c:86:83:05:28:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:71:AE:30:1C:85:D9:5B:81:42:B7:09:A8:F0:23:50:63:0C:AC
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:55:d7:d9:26:c5:a6:2d:2c:66:56:6f:47:b6:18:4d:46:
51:be:01:32:9a:e3:7d:ce:fe:eb:a2:f2:a5:31:8e:d6:6b:b9:
3f:d4:0b:cb:7d:c4:a6:f6:79:39:b2:7e:11:ff:e7:dd:ed:d1:
a4:7e:f8:6f:02:d7:a7:8e:6d:ff:a7:5b:ec:ee:48:dc:51:65:
91:17:6c:b6:d2:c2:a1:d3:a9:83:b7:13:d5:55:2a:f6:58:e8:
9a:9d:7e:94:b4:88:26:56:5a:4a:b9:ac:de:55:f2:86:4b:2a:
1e:aa:0f:be:c2:e1:82:9c:09:6d:52:0d:61:97:d0:b2:d5:81:
5e:87:db:92:d4:b9:ec:30:b7:be:46:d1:e8:61:0c:1d:3c:1f:
21:b3:a5:0a:56:4c:15:d9:45:81:c4:21:e1:63:1a:41:6d:cd:
96:39:97:f2:f3:4b:79:1f:f9:6d:2c:7b:91:01:34:30:e4:d7:
fe:0d:fc:91:0c:24:74:27:28:61:16:00:d1:0b:fd:45:c1:2e:
92:0d:bd:9b:3d:7a:76:d3:90:db:1a:54:6f:5e:3e:86:1a:87:
57:96:4d:b4:39:4e:ad:2b:12:6e:60:24:0b:cf:cf:ba:2d:68:
a1:af:0c:0e:76:d9:05:10:ce:0a:72:45:17:c3:b5:e0:0a:40:
e6:26:74:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7kDRiGJgRsGNjIoij6jkowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwNjIwMDgwMjAzWhcNMjYwNjIxMDgwMjAzWjAzMTEwLwYDVQQD
EyhkOTc1NzFhZTMwMWM4NWQ5NWI4MTQyYjcwOWE4ZjAyMzUwNjMwY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ysxs2RVWagYqabPs//gzz5DvdZE
aA7/y6/A3+TOuw2ae7QDaOVEpmrf6p061kvEqA/NG2QvgerU8RCfgtbTdove51Cc
tqg34LKMfy7dvXRR9ho6g+fGCjA2/56VgAugocXabWiFkmPPJvIcJlt2tUFUsSjq
zV1i5s59iZ7M3otgZ6jqVTBZAfU+BfvuuH96saDL4EV14SsPjx/ZuQeYSIW0t1Ld
npspgf/YIjCdqzeCXDOFdWkyQi8zBnclADqLpo3wFX7/G6CeXvgtyd2JA5cDwdU7
8mK42eSsDjZA8JpFQ1MGj7hL0LVwDAG8ubxyrPb4j5U0YZPRHIaDBSimYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl1ca4wHIXZW4FCtwmo8CNQYwysMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJORV19km
xaYtLGZWb0e2GE1GUb4BMprjfc7+66LypTGO1mu5P9QLy33EpvZ5ObJ+Ef/n3e3R
pH74bwLXp45t/6db7O5I3FFlkRdsttLCodOpg7cT1VUq9ljomp1+lLSIJlZaSrms
3lXyhksqHqoPvsLhgpwJbVINYZfQstWBXofbktS57DC3vkbR6GEMHTwfIbOlClZM
FdlFgcQh4WMaQW3NljmX8vNLeR/5bSx7kQE0MOTX/g38kQwkdCcoYRYA0Qv9RcEu
kg29mz16dtOQ2xpUb14+hhqHV5ZNtDlOrSsSbmAkC8/Pui1ooa8MDnbZBRDOCnJF
F8O14ApA5iZ0PQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 12:46:24 2026 by rpki-client