Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: rnH6GDl0yOdJhLPERaVhRTLqvqGUoaOw58b4j5yfjLo=
Subject key identifier: EC:9E:C8:33:D9:9F:81:A6:9F:CF:53:E1:42:C1:92:51:63:0E:92:DF
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019EE40C879A2C765079DCC3BA6714F8B792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 10E8
Signing time: Sat 20 Jun 2026 08:01:26 +0000
Manifest this update: Sat 20 Jun 2026 08:01:26 +0000
Manifest next update: Sun 21 Jun 2026 08:01:26 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: N4azDfJlgMo7bC9Wp74yIPnrJ4goIsmSAOwUCJvOij8=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:0c:87:9a:2c:76:50:79:dc:c3:ba:67:14:f8:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jun 20 08:01:26 2026 GMT
Not After : Jun 21 08:01:26 2026 GMT
Subject: CN=ec9ec833d99f81a69fcf53e142c19251630e92df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:2b:35:f5:8d:b6:aa:92:d0:0b:94:e7:34:
39:63:62:f8:6c:32:81:11:1b:a3:d7:10:8c:26:ee:
b9:d3:cd:50:4b:b9:95:69:cc:5c:7d:4b:b4:ab:57:
94:31:14:a1:d7:2f:40:80:96:da:e7:9a:d9:43:ca:
92:60:b6:3a:be:82:25:94:d7:a1:8c:57:60:ac:6c:
5b:9a:67:ed:8c:96:db:7e:7b:4f:e4:a7:a1:97:46:
36:fd:19:5f:56:cd:d7:84:4f:81:a4:56:83:c1:6e:
26:50:cb:79:d8:a0:f4:12:8b:17:6e:b0:bf:93:76:
ba:63:fb:dc:85:52:d3:10:f6:ea:3b:34:d8:79:05:
ff:b5:62:66:92:b2:1c:44:b7:c3:d3:63:a0:19:68:
a9:a3:ce:be:8b:f5:6f:9c:a8:11:12:07:c6:ef:f2:
33:8e:33:fe:e2:ee:0c:6a:c9:c8:3a:30:10:52:10:
14:9d:0c:ff:7e:21:91:e0:1b:85:12:a0:80:e3:59:
73:47:b2:02:4c:1f:af:b0:69:b9:f2:03:bc:ee:87:
b0:75:f0:56:2a:5a:e5:7f:99:ae:8e:f5:b9:85:7e:
ef:13:f2:72:2b:1b:60:6c:04:f9:8b:aa:61:d2:b8:
7f:c0:a7:49:8b:82:74:bc:7b:97:1c:19:ff:33:cb:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:C8:33:D9:9F:81:A6:9F:CF:53:E1:42:C1:92:51:63:0E:92:DF
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:97:61:3b:be:99:f1:8d:77:ce:e1:7f:04:47:0a:32:ef:bf:
5c:dd:19:ce:87:ee:8c:ba:c6:36:de:3e:7e:0f:80:f7:bf:ee:
17:49:d3:a5:d9:a1:94:b7:6a:90:b9:3f:9b:40:ba:58:7d:c5:
c0:69:31:d9:ce:f7:df:f4:dc:4f:4d:c0:f8:35:5d:e2:77:0f:
36:93:a3:02:52:3d:62:fb:0e:c8:40:9c:57:8a:36:54:eb:11:
67:13:19:41:aa:bf:ae:55:72:36:ad:80:3e:de:47:11:19:b0:
99:0f:3d:7b:a1:b7:0d:6f:b3:8c:04:c4:05:da:68:75:3f:68:
81:3e:da:69:bc:28:64:fe:3f:3a:79:e9:12:33:8e:ff:b7:f8:
50:56:78:d8:75:91:c9:08:be:b6:7a:ac:73:21:d3:4a:4e:98:
15:a2:a7:9c:f8:54:0b:66:e5:84:a3:02:f2:b3:46:ff:65:4e:
17:24:f4:2c:45:07:76:45:1e:a5:19:db:fa:f3:e8:f9:23:90:
da:b1:70:af:5e:7d:f4:54:8c:48:91:4e:4f:ff:17:1f:d7:cf:
e5:73:13:62:d5:d9:08:ca:1f:22:fe:c7:6d:15:b1:21:4f:fe:
fe:a2:7e:ba:84:72:6f:4b:2f:f0:df:ac:25:58:89:6c:6c:dc:
38:19:05:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7kDIeaLHZQedzDumcU+LeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx
ZGVlM2MwHhcNMjYwNjIwMDgwMTI2WhcNMjYwNjIxMDgwMTI2WjAzMTEwLwYDVQQD
EyhlYzllYzgzM2Q5OWY4MWE2OWZjZjUzZTE0MmMxOTI1MTYzMGU5MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UkrNfWNtqqS0AuU5zQ5Y2L4bDKB
ERuj1xCMJu65081QS7mVacxcfUu0q1eUMRSh1y9AgJba55rZQ8qSYLY6voIllNeh
jFdgrGxbmmftjJbbfntP5Kehl0Y2/RlfVs3XhE+BpFaDwW4mUMt52KD0EosXbrC/
k3a6Y/vchVLTEPbqOzTYeQX/tWJmkrIcRLfD02OgGWipo86+i/VvnKgREgfG7/Iz
jjP+4u4MasnIOjAQUhAUnQz/fiGR4BuFEqCA41lzR7ICTB+vsGm58gO87oewdfBW
Klrlf5mujvW5hX7vE/JyKxtgbAT5i6ph0rh/wKdJi4J0vHuXHBn/M8trKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyeyDPZn4Gmn89T4ULBklFjDpLfMB8GA1UdIwQY
MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt
MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy
LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZdhO76Z
8Y13zuF/BEcKMu+/XN0ZzofujLrGNt4+fg+A97/uF0nTpdmhlLdqkLk/m0C6WH3F
wGkx2c733/TcT03A+DVd4ncPNpOjAlI9YvsOyECcV4o2VOsRZxMZQaq/rlVyNq2A
Pt5HERmwmQ89e6G3DW+zjATEBdpodT9ogT7aabwoZP4/OnnpEjOO/7f4UFZ42HWR
yQi+tnqscyHTSk6YFaKnnPhUC2blhKMC8rNG/2VOFyT0LEUHdkUepRnb+vPo+SOQ
2rFwr1599FSMSJFOT/8XH9fP5XMTYtXZCMofIv7HbRWxIU/+/qJ+uoRyb0sv8N+s
JViJbGzcOBkFyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 16:53:59 2026 by rpki-client