Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: PfDNS15zQMQiTtihfqg1yNr5LEE/pCXPFgk7vYh1v3s=
Subject key identifier: CA:6E:3C:2C:12:61:01:3A:BB:5F:8E:AF:08:FC:45:21:31:BA:0C:8D
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019EB733750AF90E75CEC016E93A0CFB55ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0DFB
Signing time: Thu 11 Jun 2026 15:01:03 +0000
Manifest this update: Thu 11 Jun 2026 15:01:03 +0000
Manifest next update: Fri 12 Jun 2026 15:01:03 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: Lyf9r6jOueqEip8hvlvnaU4iFP7Kgi0J34bnwtTrwMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:75:0a:f9:0e:75:ce:c0:16:e9:3a:0c:fb:55:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jun 11 15:01:03 2026 GMT
Not After : Jun 12 15:01:03 2026 GMT
Subject: CN=ca6e3c2c1261013abb5f8eaf08fc452131ba0c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:a0:40:12:0e:6c:20:8b:e3:66:15:bb:58:
dd:13:bc:04:bc:10:c4:76:d9:28:9d:0d:d8:85:18:
44:6a:ba:62:25:6f:be:e8:5b:79:aa:ab:7a:fb:2b:
ef:f1:6a:66:2f:68:d5:51:93:2e:19:a7:51:0d:cc:
c4:5f:22:ba:93:c7:a1:81:89:e9:49:bc:c6:2e:68:
9e:7a:d0:c7:af:a8:3c:d4:17:e4:31:8f:25:44:98:
71:96:6c:52:f8:76:b2:3a:7a:26:c8:58:79:67:67:
e2:59:10:26:dc:14:d4:fc:1f:e4:14:12:b2:38:89:
95:b7:41:8c:ea:62:ed:4a:54:8e:6b:ac:d8:af:76:
26:a1:46:44:fd:09:28:cf:ee:b0:ff:c7:c7:45:31:
59:15:d4:13:b9:52:ac:46:53:4d:4a:a9:0f:46:bd:
26:69:71:1f:e8:f4:05:84:1a:e2:b4:23:e8:fb:ba:
b1:89:98:7b:0b:6e:0e:f5:fc:9d:02:70:ef:2d:16:
88:9e:1d:40:55:e9:d0:43:e0:8e:69:91:76:98:a7:
17:c9:b7:e7:11:ff:cc:0c:85:42:ae:21:3a:f9:b3:
8e:fc:16:23:e1:ce:2c:32:24:c4:31:cc:08:34:61:
87:be:fa:8b:ce:da:06:bb:59:a2:7a:be:19:59:02:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:3C:2C:12:61:01:3A:BB:5F:8E:AF:08:FC:45:21:31:BA:0C:8D
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:49:78:f8:8c:c6:d5:4a:41:3f:09:2b:8e:e9:23:31:e4:
29:90:34:f9:2c:af:f6:3d:f3:0b:1a:55:51:7d:63:54:7a:5e:
bd:7c:fc:83:9d:ba:b9:3b:cd:33:2c:e4:b0:c7:ee:b5:1c:03:
17:57:72:76:fd:c4:46:f6:37:2e:0d:a2:02:9a:a6:b7:35:d5:
18:46:50:86:10:24:b0:01:e1:f7:60:f5:bd:f3:29:1e:56:34:
3e:65:2e:1b:1b:f6:80:67:f9:82:5f:ef:b2:a2:6a:67:94:34:
d5:ab:3f:6f:07:09:97:b9:fb:93:6c:f7:08:12:43:38:80:cd:
43:79:a5:d6:ef:53:3c:f6:54:c5:f3:0f:b2:75:34:aa:ff:a6:
77:c7:18:3d:bb:0a:33:98:a5:45:d6:ec:29:26:1d:a3:80:df:
5a:eb:b7:9d:66:61:71:11:60:1c:e2:97:98:c8:db:8f:32:5f:
b8:e9:07:87:53:e7:73:ec:36:74:ab:67:86:e3:f3:52:bf:85:
ad:85:03:5b:77:ab:fa:3d:ba:7b:d4:8e:c5:b2:7f:b9:d8:46:
e6:34:b6:9d:90:f5:7d:a4:33:bc:54:46:70:6c:8f:a6:08:5c:
6a:1b:fa:af:24:45:ab:cf:68:1e:2c:85:af:91:7e:dc:31:c5:
2f:d0:68:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M3UK+Q51zsAW6ToM+1XtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNjExMTUwMTAzWhcNMjYwNjEyMTUwMTAzWjAzMTEwLwYDVQQD
EyhjYTZlM2MyYzEyNjEwMTNhYmI1ZjhlYWYwOGZjNDUyMTMxYmEwYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSgQBIObCCL42YVu1jdE7wEvBDE
dtkonQ3YhRhEarpiJW++6Ft5qqt6+yvv8WpmL2jVUZMuGadRDczEXyK6k8ehgYnp
SbzGLmieetDHr6g81BfkMY8lRJhxlmxS+HayOnomyFh5Z2fiWRAm3BTU/B/kFBKy
OImVt0GM6mLtSlSOa6zYr3YmoUZE/Qkoz+6w/8fHRTFZFdQTuVKsRlNNSqkPRr0m
aXEf6PQFhBritCPo+7qxiZh7C24O9fydAnDvLRaInh1AVenQQ+COaZF2mKcXybfn
Ef/MDIVCriE6+bOO/BYj4c4sMiTEMcwINGGHvvqLztoGu1mier4ZWQKy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpuPCwSYQE6u1+Orwj8RSExugyNMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwpJePiM
xtVKQT8JK47pIzHkKZA0+Syv9j3zCxpVUX1jVHpevXz8g526uTvNMyzksMfutRwD
F1dydv3ERvY3Lg2iApqmtzXVGEZQhhAksAHh92D1vfMpHlY0PmUuGxv2gGf5gl/v
sqJqZ5Q01as/bwcJl7n7k2z3CBJDOIDNQ3ml1u9TPPZUxfMPsnU0qv+md8cYPbsK
M5ilRdbsKSYdo4DfWuu3nWZhcRFgHOKXmMjbjzJfuOkHh1Pnc+w2dKtnhuPzUr+F
rYUDW3er+j26e9SOxbJ/udhG5jS2nZD1faQzvFRGcGyPpghcahv6ryRFq89oHiyF
r5F+3DHFL9BoCA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:04 2026 by rpki-client