Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: +FYtJHID/Utux71F1sFFGoeYOLNo9EunDgPg+1az4zc=
Subject key identifier: 36:B2:CC:10:17:EB:0A:4A:5F:72:A2:AA:E1:2E:E2:D1:EC:25:75:60
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019F0F64B7BC69C01C68E5857B8402184369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 06F9
Signing time: Sun 28 Jun 2026 18:01:26 +0000
Manifest this update: Sun 28 Jun 2026 18:01:26 +0000
Manifest next update: Mon 29 Jun 2026 18:01:26 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: y2/Uq8pFsuSEonTURjzwtYNYtXevhwBK4gCtBG/X/Nk=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:64:b7:bc:69:c0:1c:68:e5:85:7b:84:02:18:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Jun 28 18:01:26 2026 GMT
Not After : Jun 29 18:01:26 2026 GMT
Subject: CN=36b2cc1017eb0a4a5f72a2aae12ee2d1ec257560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:80:69:d3:43:a3:9f:7b:47:51:21:d0:47:
dd:22:ed:c5:29:95:77:90:e4:0f:cb:c8:14:7d:ed:
06:8b:2e:d9:15:38:0d:b2:18:08:c2:36:20:92:be:
09:a6:42:0b:aa:ce:4f:58:f7:e4:66:0a:02:72:5d:
6a:d8:90:ff:a2:20:01:39:81:6d:ff:b1:07:68:f0:
fc:44:b6:9e:97:8c:ee:ed:da:5e:36:e0:8b:73:f3:
e4:71:a5:66:44:ba:ed:20:15:96:75:b0:b8:96:1b:
c9:bb:6f:87:6b:56:59:d8:e5:50:20:7e:25:93:47:
f3:f5:3d:20:c0:28:02:92:de:b5:57:da:65:8f:30:
db:da:58:9c:c9:f4:ac:c8:a1:7c:eb:76:52:a4:44:
f8:22:03:e3:6d:1f:a4:3e:46:c1:ce:f6:a5:ef:a6:
6c:72:32:c8:bf:0c:29:36:de:17:a1:b9:a9:e4:68:
b3:f0:6b:d5:30:78:3e:de:78:d1:e5:83:1e:e9:14:
28:3d:21:fd:b0:5d:26:c6:8c:f5:97:4c:74:b8:31:
be:4e:ca:6b:e6:2c:44:5a:a1:6b:e6:d9:37:d8:4f:
81:aa:5c:df:48:3a:23:ff:4c:4b:4e:69:aa:30:d8:
4b:2b:3a:c2:1d:9b:f2:f0:12:85:f9:90:f7:a0:60:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:CC:10:17:EB:0A:4A:5F:72:A2:AA:E1:2E:E2:D1:EC:25:75:60
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:0d:14:75:18:7f:e6:a5:2c:c8:80:b4:93:9f:ff:0d:31:
7b:40:3d:f7:ae:d2:68:40:a8:30:73:98:00:5c:02:a2:72:df:
42:c5:4e:9f:9c:bf:a0:0f:9d:c5:e0:b3:17:12:b4:f3:50:99:
16:c7:b0:60:2f:98:d6:7b:b1:c6:40:a0:95:90:68:a9:5e:21:
a3:da:29:46:94:17:05:96:fd:78:e7:08:98:55:56:cc:9d:cb:
f2:b9:30:6b:ba:d9:cc:58:d6:6d:d4:11:46:21:4a:6f:f6:6f:
df:06:73:f3:e5:aa:41:a8:01:6e:2f:f5:48:ad:e7:ce:a7:e3:
1b:3d:6f:77:c8:e3:a2:72:77:cc:a7:b9:68:b9:83:e1:27:56:
16:5d:93:eb:1a:62:14:aa:c0:e7:a5:1c:57:f4:f2:2b:a1:43:
20:b0:c0:ea:54:17:6a:56:3b:23:a8:1e:e8:72:b0:48:83:e0:
ab:2f:27:4d:00:de:af:b0:07:26:0f:e1:00:f7:ea:6b:63:7c:
51:07:97:0a:c4:8e:a4:ba:ce:b7:cb:e4:82:e1:d2:72:c4:5d:
06:6c:79:68:6e:a9:99:12:34:24:d0:42:b0:93:6e:44:e8:45:
2d:29:7f:6b:40:4d:d9:fd:ac:1b:66:62:08:98:17:e2:54:8a:
ba:76:97:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8PZLe8acAcaOWFe4QCGENpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjYwNjI4MTgwMTI2WhcNMjYwNjI5MTgwMTI2WjAzMTEwLwYDVQQD
EygzNmIyY2MxMDE3ZWIwYTRhNWY3MmEyYWFlMTJlZTJkMWVjMjU3NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21GAadNDo597R1Eh0EfdIu3FKZV3
kOQPy8gUfe0Giy7ZFTgNshgIwjYgkr4JpkILqs5PWPfkZgoCcl1q2JD/oiABOYFt
/7EHaPD8RLael4zu7dpeNuCLc/PkcaVmRLrtIBWWdbC4lhvJu2+Ha1ZZ2OVQIH4l
k0fz9T0gwCgCkt61V9pljzDb2licyfSsyKF863ZSpET4IgPjbR+kPkbBzval76Zs
cjLIvwwpNt4Xobmp5Giz8GvVMHg+3njR5YMe6RQoPSH9sF0mxoz1l0x0uDG+Tspr
5ixEWqFr5tk32E+BqlzfSDoj/0xLTmmqMNhLKzrCHZvy8BKF+ZD3oGAS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDayzBAX6wpKX3KiquEu4tHsJXVgMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzINFHUY
f+alLMiAtJOf/w0xe0A9967SaECoMHOYAFwConLfQsVOn5y/oA+dxeCzFxK081CZ
FsewYC+Y1nuxxkCglZBoqV4ho9opRpQXBZb9eOcImFVWzJ3L8rkwa7rZzFjWbdQR
RiFKb/Zv3wZz8+WqQagBbi/1SK3nzqfjGz1vd8jjonJ3zKe5aLmD4SdWFl2T6xpi
FKrA56UcV/TyK6FDILDA6lQXalY7I6ge6HKwSIPgqy8nTQDer7AHJg/hAPfqa2N8
UQeXCsSOpLrOt8vkguHScsRdBmx5aG6pmRI0JNBCsJNuROhFLSl/a0BN2f2sG2Zi
CJgX4lSKunaX1Q==
-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:24 2026 by rpki-client