Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: bYvmhbVGkJ2T1q9uYwHclCGUuBv3kg759ugA+HJecnI=
Subject key identifier: 89:9A:9A:34:A3:F6:8C:95:97:EA:31:8B:2C:56:2A:48:E2:20:32:83
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019FA0DFA8915A2AD534EA0E5F338190211D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0E74
Signing time: Mon 27 Jul 2026 00:00:39 +0000
Manifest this update: Mon 27 Jul 2026 00:00:39 +0000
Manifest next update: Tue 28 Jul 2026 00:00:39 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: Y5b+pYx/TOpgTRz0O2ZSRoPR+CcxctbPrbHvAu3AtMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:a8:91:5a:2a:d5:34:ea:0e:5f:33:81:90:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jul 27 00:00:39 2026 GMT
Not After : Jul 28 00:00:39 2026 GMT
Subject: CN=899a9a34a3f68c9597ea318b2c562a48e2203283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:6f:61:95:7f:43:ca:e3:09:0c:4a:45:ee:
3f:0a:1c:ff:90:a0:72:ce:30:d9:d0:47:e1:32:0e:
84:15:74:87:71:34:16:bd:d3:0d:df:26:af:0f:89:
c8:cb:40:da:94:51:22:f7:0d:c1:1a:47:8f:89:7d:
32:1f:b6:9e:0a:31:9a:27:9f:f5:32:24:f0:6a:70:
ba:00:5a:1f:20:41:43:5f:b6:dd:18:54:92:2c:17:
fd:26:7d:03:47:77:09:90:18:a7:05:75:9b:db:72:
b7:e1:c0:75:67:09:85:4c:b0:9b:62:d5:13:ae:1b:
2c:e4:d9:da:a5:79:37:7f:f2:64:5e:b6:b3:80:48:
73:d2:8b:d2:42:88:05:e0:4a:19:91:f9:f7:5e:ed:
c4:06:d2:4d:07:06:bf:f9:51:ad:73:16:f1:2f:64:
a9:54:d0:52:a6:a3:66:ac:79:a3:17:bd:e8:ac:80:
0e:7b:90:61:6e:4b:fc:4d:df:9d:a1:85:c3:d4:c7:
5a:a2:c5:9c:07:b0:d0:63:2f:33:d4:64:95:23:f7:
e5:4e:b9:44:b1:83:95:1b:63:9c:5b:f4:51:f3:d1:
63:73:ca:d9:46:16:a6:db:4b:6a:96:07:2f:12:37:
94:3c:29:27:b2:88:98:fd:8d:df:3c:af:68:a0:b3:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:9A:34:A3:F6:8C:95:97:EA:31:8B:2C:56:2A:48:E2:20:32:83
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:10:9f:3b:d8:f1:fc:c8:21:90:d8:32:07:25:72:50:63:
c5:2d:56:4c:26:e6:96:5c:02:7b:9f:5d:79:24:b9:64:d3:a0:
73:45:7d:ba:d7:f7:60:b2:2b:9b:54:47:d9:e3:35:95:ba:2c:
2d:96:ec:39:ff:e2:11:3d:3a:2b:a7:24:a4:1e:83:2a:f9:34:
f0:e0:1b:38:c9:33:42:92:ab:a4:21:23:bb:90:2f:cc:fb:93:
0a:aa:f6:b6:42:75:2d:a7:85:62:b9:a8:99:d0:7d:47:c8:28:
22:e5:1d:4b:0a:cb:68:69:b4:a5:ef:1c:b9:f1:b4:d5:6b:f0:
73:35:ac:e1:2e:f2:48:73:b5:d8:5b:df:2f:ca:e1:a7:96:8f:
3b:2d:bb:f3:e4:11:88:ef:9f:71:d9:5f:c6:4a:9d:aa:7b:d1:
b7:71:f4:fd:8f:6a:34:78:50:19:3d:9d:17:8f:7b:83:34:6c:
63:40:65:6a:af:d1:4d:52:aa:c6:5a:aa:54:1f:af:43:65:6d:
e3:76:d3:ab:44:bf:4a:1c:83:b3:62:db:89:e8:c4:b6:50:6b:
7b:e5:11:df:68:f6:91:2c:28:aa:e4:9d:56:b2:3b:dd:b9:dd:
7d:9f:48:7c:a7:f4:05:0f:63:a1:6e:7d:41:40:8d:fd:c4:ba:
e7:9c:b7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g36iRWirVNOoOXzOBkCEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNzI3MDAwMDM5WhcNMjYwNzI4MDAwMDM5WjAzMTEwLwYDVQQD
Eyg4OTlhOWEzNGEzZjY4Yzk1OTdlYTMxOGIyYzU2MmE0OGUyMjAzMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLxvYZV/Q8rjCQxKRe4/Chz/kKBy
zjDZ0EfhMg6EFXSHcTQWvdMN3yavD4nIy0DalFEi9w3BGkePiX0yH7aeCjGaJ5/1
MiTwanC6AFofIEFDX7bdGFSSLBf9Jn0DR3cJkBinBXWb23K34cB1ZwmFTLCbYtUT
rhss5NnapXk3f/JkXrazgEhz0ovSQogF4EoZkfn3Xu3EBtJNBwa/+VGtcxbxL2Sp
VNBSpqNmrHmjF73orIAOe5Bhbkv8Td+doYXD1MdaosWcB7DQYy8z1GSVI/flTrlE
sYOVG2OcW/RR89Fjc8rZRham20tqlgcvEjeUPCknsoiY/Y3fPK9ooLPwAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImamjSj9oyVl+oxiyxWKkjiIDKDMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0UQnzvY
8fzIIZDYMgclclBjxS1WTCbmllwCe59deSS5ZNOgc0V9utf3YLIrm1RH2eM1lbos
LZbsOf/iET06K6ckpB6DKvk08OAbOMkzQpKrpCEju5AvzPuTCqr2tkJ1LaeFYrmo
mdB9R8goIuUdSwrLaGm0pe8cufG01WvwczWs4S7ySHO12FvfL8rhp5aPOy278+QR
iO+fcdlfxkqdqnvRt3H0/Y9qNHhQGT2dF497gzRsY0Blaq/RTVKqxlqqVB+vQ2Vt
43bTq0S/ShyDs2LbiejEtlBre+UR32j2kSwoquSdVrI73bndfZ9IfKf0BQ9joW59
QUCN/cS655y3vg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:23 2026 by rpki-client