Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: 0P1ayRECJkAveVMFG+K92ClHf4ErLCPxFnRIRQXZlF4=
Subject key identifier: 44:FA:D4:E4:86:94:DD:C1:DC:0A:1E:61:DC:FD:E4:18:9C:1C:E5:C9
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019EE82072BCA969E0B6F2708D83A624797B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 09FA
Signing time: Sun 21 Jun 2026 03:01:40 +0000
Manifest this update: Sun 21 Jun 2026 03:01:40 +0000
Manifest next update: Mon 22 Jun 2026 03:01:40 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: McuIPhQIBaZTvSWGqztit2xleRtMGWlAqOylfO+GAsI=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:72:bc:a9:69:e0:b6:f2:70:8d:83:a6:24:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jun 21 03:01:40 2026 GMT
Not After : Jun 22 03:01:40 2026 GMT
Subject: CN=44fad4e48694ddc1dc0a1e61dcfde4189c1ce5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:cb:f2:99:05:86:38:c3:54:79:de:04:cb:
bf:5d:06:8f:f1:bd:7a:68:41:28:22:6f:e2:b4:80:
b3:de:43:f2:fa:07:f5:e3:38:21:70:30:07:d2:80:
ba:50:71:24:17:7d:c9:a3:43:2c:92:03:82:12:9e:
bd:c1:89:4c:fe:1c:c4:82:18:8f:67:5b:4a:99:60:
52:17:c3:f2:d4:d9:c6:3a:d9:11:d5:b3:56:74:e9:
0d:1d:2f:1f:ad:c4:fc:cd:a5:a0:69:55:64:03:83:
14:5f:b3:0c:93:c5:93:38:44:b4:82:2d:a4:2b:d4:
94:c4:6f:fe:f4:6e:ce:0c:bb:d1:a4:95:0d:31:58:
f5:b8:b6:98:6c:4b:19:2f:9c:60:80:2f:19:c5:08:
11:8d:3f:a2:84:d9:07:92:03:87:35:a4:c4:29:4f:
0b:50:20:de:6b:77:73:e1:24:ae:df:09:8e:d4:61:
6b:92:49:98:3a:56:05:0b:bd:1a:61:50:d2:d3:d6:
62:e0:2f:38:99:1a:fd:65:19:87:dc:5a:9c:b8:65:
02:10:07:de:23:fe:d4:f6:a1:10:4f:f4:92:86:40:
11:44:d3:72:21:ad:0a:15:56:39:6b:f6:3a:8c:ba:
9a:76:d2:94:46:55:b5:3f:51:76:8f:9a:8c:6d:ba:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:D4:E4:86:94:DD:C1:DC:0A:1E:61:DC:FD:E4:18:9C:1C:E5:C9
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:1a:3f:2b:b3:7f:dc:69:c9:9e:27:76:03:54:79:fb:7b:
d2:fe:06:f2:5f:cb:e8:ea:7a:ed:c1:e2:a8:fe:76:d8:20:b9:
d1:c1:43:20:37:d3:6a:ee:1e:3a:05:81:53:99:72:e2:13:ec:
37:37:ab:36:01:25:19:ea:44:ab:40:83:f5:95:5f:cf:17:1d:
0a:d5:01:47:4f:21:d7:cd:b3:63:55:a0:05:84:02:f2:a3:74:
7e:0c:83:b1:44:b2:03:b4:b8:8a:ff:c3:49:a8:9c:b4:90:c2:
eb:06:6d:d1:a8:b8:de:2e:59:bd:00:a7:b8:ac:9b:d3:74:01:
73:c3:df:56:3d:63:a1:fa:bc:1c:a1:b4:89:64:d0:82:b6:e8:
4a:c3:7a:40:6e:71:87:31:aa:b6:b8:2c:35:16:a9:6a:c2:8f:
e6:5d:34:47:da:82:1a:a2:e4:33:c3:de:99:f2:76:ce:53:67:
b2:96:84:99:89:a8:54:4c:9c:6f:bc:69:29:be:34:f5:85:57:
f9:2f:08:bd:4d:d3:35:ee:72:44:e5:23:24:a3:66:b4:26:eb:
04:db:1e:7a:6e:16:a2:ef:be:c1:07:6b:87:79:05:40:06:4b:
60:a8:5d:1e:c2:48:69:bf:ea:1b:a3:13:6f:8c:f5:38:59:b3:
17:8b:64:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7oIHK8qWngtvJwjYOmJHl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx
NTAyZTIwHhcNMjYwNjIxMDMwMTQwWhcNMjYwNjIyMDMwMTQwWjAzMTEwLwYDVQQD
Eyg0NGZhZDRlNDg2OTRkZGMxZGMwYTFlNjFkY2ZkZTQxODljMWNlNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dDL8pkFhjjDVHneBMu/XQaP8b16
aEEoIm/itICz3kPy+gf14zghcDAH0oC6UHEkF33Jo0MskgOCEp69wYlM/hzEghiP
Z1tKmWBSF8Py1NnGOtkR1bNWdOkNHS8frcT8zaWgaVVkA4MUX7MMk8WTOES0gi2k
K9SUxG/+9G7ODLvRpJUNMVj1uLaYbEsZL5xggC8ZxQgRjT+ihNkHkgOHNaTEKU8L
UCDea3dz4SSu3wmO1GFrkkmYOlYFC70aYVDS09Zi4C84mRr9ZRmH3FqcuGUCEAfe
I/7U9qEQT/SShkARRNNyIa0KFVY5a/Y6jLqadtKURlW1P1F2j5qMbboEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET61OSGlN3B3AoeYdz95BicHOXJMB8GA1UdIwQY
MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt
YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1
LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/8aPyuz
f9xpyZ4ndgNUeft70v4G8l/L6Op67cHiqP522CC50cFDIDfTau4eOgWBU5ly4hPs
NzerNgElGepEq0CD9ZVfzxcdCtUBR08h182zY1WgBYQC8qN0fgyDsUSyA7S4iv/D
SaictJDC6wZt0ai43i5ZvQCnuKyb03QBc8PfVj1jofq8HKG0iWTQgrboSsN6QG5x
hzGqtrgsNRapasKP5l00R9qCGqLkM8PemfJ2zlNnspaEmYmoVEycb7xpKb409YVX
+S8IvU3TNe5yROUjJKNmtCbrBNseem4Wou++wQdrh3kFQAZLYKhdHsJIab/qG6MT
b4z1OFmzF4tksw==
-----END CERTIFICATE-----
Generated at Sun Jun 21 08:14:32 2026 by rpki-client