Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: CPtzXDEbY2V5+cP7IqMzv5qTLq8DRvNcjpzgY0klos4=
Subject key identifier: AF:F0:55:C5:53:A8:94:D8:47:8E:3C:71:24:7A:55:7E:CB:DE:77:97
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 019EB7A08E07F704F04408E0485ECFC3E845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 05F4
Signing time: Thu 11 Jun 2026 17:00:13 +0000
Manifest this update: Thu 11 Jun 2026 17:00:13 +0000
Manifest next update: Fri 12 Jun 2026 17:00:13 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: mNzDYWNmnv5/l/w5D/BZgoptRhFGju0x5CWTuVXsPKs=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:8e:07:f7:04:f0:44:08:e0:48:5e:cf:c3:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Jun 11 17:00:13 2026 GMT
Not After : Jun 12 17:00:13 2026 GMT
Subject: CN=aff055c553a894d8478e3c71247a557ecbde7797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:fe:0f:59:4c:5a:32:00:57:5c:8c:5f:41:
6d:8a:0a:34:5a:aa:f3:2f:0e:68:97:c5:7b:26:95:
ba:75:b7:51:77:67:09:51:9f:84:1b:e8:99:d7:82:
55:37:e5:23:ca:42:db:56:28:7f:3b:d7:7b:79:04:
53:2c:8a:ba:1c:e6:ec:04:a7:46:b0:b5:61:7c:16:
14:a2:d6:47:77:8e:d0:42:44:62:27:7a:39:b4:bb:
f3:20:62:9f:4b:0d:8b:0e:19:53:12:96:c8:36:80:
15:bc:85:6c:29:0c:5b:35:d5:36:f0:ac:28:79:6f:
87:47:37:21:15:a4:cf:7c:7a:ea:37:db:54:00:da:
ae:a9:b1:e9:89:16:a0:22:e4:b5:3c:5f:67:4b:e0:
83:57:23:12:cd:8b:6a:39:05:4d:4f:7f:7d:05:88:
11:f2:ef:31:b7:d1:8c:34:31:93:ad:94:d0:c0:84:
d8:c5:c2:87:c9:74:ca:29:87:cf:6a:41:17:1b:ca:
af:19:ad:4b:75:56:1f:1f:7c:72:d5:7f:c7:ff:99:
b9:ad:f3:1a:6f:da:09:ff:7a:e9:96:76:a7:2e:84:
2f:14:63:f5:f9:8c:ed:bf:84:da:ec:a2:1b:13:77:
ec:17:9a:a2:64:f1:39:ac:b9:c2:f5:a0:a3:59:7b:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:55:C5:53:A8:94:D8:47:8E:3C:71:24:7A:55:7E:CB:DE:77:97
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:05:93:d6:eb:a7:a3:2e:02:4a:12:f3:42:79:ed:87:ed:
d1:af:5b:8b:3a:6e:c1:d2:13:a8:7a:4f:73:aa:5c:7e:8f:50:
ff:cb:62:54:c3:03:09:34:ce:ef:dd:51:36:1e:6d:2b:2b:40:
fc:03:7d:36:c6:02:ce:29:bd:62:cf:26:f1:b7:04:30:00:62:
54:d1:d1:b4:27:fb:73:c6:9a:50:ae:cd:6f:ff:49:08:6f:ab:
25:a9:11:48:9d:05:2b:fa:44:b1:f1:6f:a7:da:d1:e5:87:4d:
5c:9f:af:00:6e:48:39:f5:ac:ce:c9:ad:2c:e5:f6:d9:ca:17:
ca:be:22:d4:84:a4:2a:d0:b9:aa:c1:f0:b0:19:cb:4e:ec:d3:
3d:bb:35:0d:d1:c0:44:d5:72:f0:18:3e:38:e8:d5:76:9d:4d:
c0:ab:5e:0c:5d:31:fa:18:1f:cb:9c:8d:6a:dc:71:da:c6:fa:
13:95:0f:7d:d6:9b:51:d8:23:a2:db:6a:89:9a:9e:99:0b:37:
31:dd:3e:23:5f:aa:66:d9:d9:45:2b:da:f1:69:03:67:de:e7:
01:ee:89:4f:cf:65:9e:04:6c:52:c3:33:b0:84:ce:ff:66:81:
15:24:ac:aa:01:46:06:ec:95:f1:a7:87:23:74:58:2e:64:2e:
d0:f3:53:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oI4H9wTwRAjgSF7Pw+hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz
MzFiN2YwHhcNMjYwNjExMTcwMDEzWhcNMjYwNjEyMTcwMDEzWjAzMTEwLwYDVQQD
EyhhZmYwNTVjNTUzYTg5NGQ4NDc4ZTNjNzEyNDdhNTU3ZWNiZGU3Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE7+D1lMWjIAV1yMX0Ftigo0Wqrz
Lw5ol8V7JpW6dbdRd2cJUZ+EG+iZ14JVN+UjykLbVih/O9d7eQRTLIq6HObsBKdG
sLVhfBYUotZHd47QQkRiJ3o5tLvzIGKfSw2LDhlTEpbINoAVvIVsKQxbNdU28Kwo
eW+HRzchFaTPfHrqN9tUANquqbHpiRagIuS1PF9nS+CDVyMSzYtqOQVNT399BYgR
8u8xt9GMNDGTrZTQwITYxcKHyXTKKYfPakEXG8qvGa1LdVYfH3xy1X/H/5m5rfMa
b9oJ/3rplnanLoQvFGP1+Yztv4Ta7KIbE3fsF5qiZPE5rLnC9aCjWXvB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/wVcVTqJTYR448cSR6VX7L3neXMB8GA1UdIwQY
MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt
ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2
LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7cFk9br
p6MuAkoS80J57Yft0a9bizpuwdITqHpPc6pcfo9Q/8tiVMMDCTTO791RNh5tKytA
/AN9NsYCzim9Ys8m8bcEMABiVNHRtCf7c8aaUK7Nb/9JCG+rJakRSJ0FK/pEsfFv
p9rR5YdNXJ+vAG5IOfWszsmtLOX22coXyr4i1ISkKtC5qsHwsBnLTuzTPbs1DdHA
RNVy8Bg+OOjVdp1NwKteDF0x+hgfy5yNatxx2sb6E5UPfdabUdgjottqiZqemQs3
Md0+I1+qZtnZRSva8WkDZ97nAe6JT89lngRsUsMzsITO/2aBFSSsqgFGBuyV8aeH
I3RYLmQu0PNTYQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:25 2026 by rpki-client