Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: rAJLOO7+p94VY8sMdZoIcHhrGvVUk67daDvdn5o/Mj4=
Subject key identifier: 63:98:AF:35:15:F5:69:AA:4B:B7:79:8E:D7:C7:6D:1A:51:78:17:FD
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019F189E2FF817A385D1A3A553C78FCCBB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 17AB
Signing time: Tue 30 Jun 2026 13:00:47 +0000
Manifest this update: Tue 30 Jun 2026 13:00:47 +0000
Manifest next update: Wed 01 Jul 2026 13:00:47 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: s+CAsX/t9QwglFaRq3pcV/TAuINPTcQz6xmLJfhlLwk=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:2f:f8:17:a3:85:d1:a3:a5:53:c7:8f:cc:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 30 13:00:47 2026 GMT
Not After : Jul 1 13:00:47 2026 GMT
Subject: CN=6398af3515f569aa4bb7798ed7c76d1a517817fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:9b:30:60:ac:75:39:17:2f:3a:45:ea:bc:
b5:9e:6b:9d:f3:fb:3a:87:29:04:fe:f9:27:4c:28:
b5:6f:1a:7d:da:0a:5d:be:d9:f8:0b:39:11:69:11:
a6:02:a8:23:a6:70:4b:ec:40:63:de:3c:0d:89:fd:
74:4d:0a:14:1a:86:45:61:8e:4e:cf:7e:0a:c6:20:
4b:76:ad:e4:64:27:f0:35:3e:34:86:83:81:46:89:
be:1c:4a:c7:58:c0:aa:1b:d4:a9:09:d3:3d:bf:f6:
9e:b1:36:cb:0c:73:b4:71:18:c3:b8:9c:58:4e:28:
e9:2c:92:30:31:02:4f:75:da:c8:5a:c5:c4:44:c5:
39:97:01:fa:d8:8f:70:2b:85:9c:f3:df:79:74:f8:
8a:fa:c4:71:cc:d0:b6:25:63:1e:30:4a:b4:f7:57:
76:92:fb:4e:0e:db:ea:08:67:f3:2b:be:28:92:74:
c0:25:b9:79:f9:b7:d2:c6:97:0c:4c:8c:cf:60:87:
a7:f4:d0:a0:c2:50:33:26:48:cc:12:10:e2:ff:a8:
7b:ea:81:e1:3d:d8:7e:e3:22:ac:cd:de:05:85:6b:
9e:4a:6d:e4:40:89:d4:ff:48:c4:38:65:9e:5a:b7:
c0:d0:e1:f2:26:36:2b:f7:73:75:62:8d:cd:11:2a:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:98:AF:35:15:F5:69:AA:4B:B7:79:8E:D7:C7:6D:1A:51:78:17:FD
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d5:bf:6a:da:b7:8d:51:77:d8:cb:89:ea:2e:76:c3:1b:41:
29:fb:f4:cd:e6:df:2e:a5:13:ab:b6:ef:5b:af:a5:42:61:e4:
32:9a:95:15:c0:8e:38:7c:59:a8:1b:2a:fd:54:f9:1f:c8:24:
46:ad:34:25:6c:7e:37:da:4f:11:a1:38:ae:eb:53:c3:68:e8:
1d:5c:e0:cd:9c:ad:a8:60:7c:39:3e:c6:90:50:fc:a5:6e:66:
ed:75:6b:86:cc:11:4f:19:d4:4f:22:76:65:bb:5c:a3:63:66:
cc:c5:0c:94:31:cc:b4:f2:11:48:be:6f:23:af:d0:e7:99:dc:
86:6f:04:22:1f:66:d3:1f:29:8a:c0:03:bb:9b:2c:78:3c:6f:
90:59:3b:24:fe:71:87:de:c0:dd:f6:9c:8f:de:80:92:5a:97:
1d:49:ad:ca:1d:a7:b5:01:ef:43:3e:80:fa:70:07:c0:9d:b8:
e8:e6:66:80:83:bc:0d:aa:27:92:cd:da:d1:4a:1c:99:4e:4c:
be:5a:93:cb:fe:58:41:68:96:33:59:d1:55:16:c9:e1:9d:70:
8b:02:52:c9:bb:18:9a:2b:de:1c:dc:23:5e:df:c5:bf:a6:ec:
dc:2c:e3:7a:08:ea:28:be:2f:15:b7:cd:5f:62:e2:60:3e:06:
df:a3:8a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Yni/4F6OF0aOlU8ePzLsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjYwNjMwMTMwMDQ3WhcNMjYwNzAxMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg2Mzk4YWYzNTE1ZjU2OWFhNGJiNzc5OGVkN2M3NmQxYTUxNzgxN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ibMGCsdTkXLzpF6ry1nmud8/s6
hykE/vknTCi1bxp92gpdvtn4CzkRaRGmAqgjpnBL7EBj3jwNif10TQoUGoZFYY5O
z34KxiBLdq3kZCfwNT40hoOBRom+HErHWMCqG9SpCdM9v/aesTbLDHO0cRjDuJxY
TijpLJIwMQJPddrIWsXERMU5lwH62I9wK4Wc8995dPiK+sRxzNC2JWMeMEq091d2
kvtODtvqCGfzK74oknTAJbl5+bfSxpcMTIzPYIen9NCgwlAzJkjMEhDi/6h76oHh
Pdh+4yKszd4FhWueSm3kQInU/0jEOGWeWrfA0OHyJjYr93N1Yo3NESprwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOYrzUV9WmqS7d5jtfHbRpReBf9MB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdW/atq3
jVF32MuJ6i52wxtBKfv0zebfLqUTq7bvW6+lQmHkMpqVFcCOOHxZqBsq/VT5H8gk
Rq00JWx+N9pPEaE4rutTw2joHVzgzZytqGB8OT7GkFD8pW5m7XVrhswRTxnUTyJ2
Zbtco2NmzMUMlDHMtPIRSL5vI6/Q55nchm8EIh9m0x8pisADu5sseDxvkFk7JP5x
h97A3facj96AklqXHUmtyh2ntQHvQz6A+nAHwJ246OZmgIO8Daonks3a0UocmU5M
vlqTy/5YQWiWM1nRVRbJ4Z1wiwJSybsYmiveHNwjXt/Fv6bs3CzjegjqKL4vFbfN
X2LiYD4G36OKMA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client