Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: TOY7ufpeLtzdLBkbmo3+Y0C0hnCn5Zd/wylK9oAWrK0=
Subject key identifier: D6:90:58:2C:DB:58:59:64:58:B4:52:62:B4:89:79:7F:5C:15:85:85
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019F183058EB97C0BBB6C6DC6CCBC8C2A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 1054
Signing time: Tue 30 Jun 2026 11:00:49 +0000
Manifest this update: Tue 30 Jun 2026 11:00:49 +0000
Manifest next update: Wed 01 Jul 2026 11:00:49 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: Ov9tfTzePDS+z6BWxd+OoxlodgiRNRJbUyDtp9egl7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:58:eb:97:c0:bb:b6:c6:dc:6c:cb:c8:c2:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jun 30 11:00:49 2026 GMT
Not After : Jul 1 11:00:49 2026 GMT
Subject: CN=d690582cdb58596458b45262b489797f5c158585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:61:cf:02:8a:80:8b:28:25:6f:29:77:c4:
dd:11:4c:ad:f8:14:c6:55:a1:4e:c1:e8:d2:8a:83:
58:76:ac:19:38:7b:bb:4c:14:5b:b4:66:f1:3f:43:
bf:72:09:42:c7:f6:5a:2a:32:9c:4b:bc:11:05:37:
e0:fe:67:7e:93:fb:d7:23:44:8b:0f:39:9a:0b:06:
2e:bf:e1:69:06:65:87:12:3a:66:21:03:ce:f5:05:
c2:81:2c:66:25:f5:07:80:2b:08:54:93:27:1d:e4:
d0:46:5e:50:31:a0:0a:14:cb:5b:e2:f8:bd:63:f2:
a8:68:ef:43:72:b6:e8:f1:22:27:8c:86:60:d8:b3:
eb:dc:35:c8:0e:4e:9c:10:7f:4e:ea:47:65:0a:5f:
eb:9e:08:d2:12:d3:b4:c0:81:cb:1a:48:c6:4f:bc:
92:17:1c:ca:36:ff:6e:6a:02:12:08:04:13:6c:fa:
1f:41:fc:0e:c2:fa:49:fc:91:16:bc:d3:95:4f:d9:
70:5b:71:d2:4e:ea:7d:85:1e:51:04:a2:e0:c3:7f:
89:2e:3e:ea:47:3a:7e:f6:34:6d:66:53:b6:67:ba:
41:c0:59:77:4b:b8:90:5d:82:59:60:e1:3c:ea:d3:
06:e1:4c:9e:a6:2a:45:d0:65:57:2e:69:fe:ff:6b:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:58:2C:DB:58:59:64:58:B4:52:62:B4:89:79:7F:5C:15:85:85
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:66:61:19:c9:7b:73:4c:2a:ad:4e:64:70:16:54:12:9f:
36:12:9d:db:32:c6:72:39:b5:05:26:d8:37:02:10:f6:c9:33:
61:34:07:14:25:63:cd:32:33:42:d9:9c:07:9c:ea:7c:22:48:
1e:7d:9c:fc:78:ff:e0:1c:32:a3:6e:46:59:9e:3d:80:99:fd:
82:02:3f:be:b2:c2:d6:0d:4b:2b:ea:d9:2c:dc:20:90:6e:be:
6c:19:b4:dd:76:4d:97:63:46:19:27:b7:62:fa:1e:a8:e1:7b:
a4:79:b9:c5:d9:cf:22:e1:d9:e7:d3:a8:fa:a0:17:69:80:e0:
ce:99:91:4e:b4:10:37:90:89:da:5b:0b:f1:ec:51:ec:4b:24:
0e:fc:da:b7:5a:62:45:52:20:39:55:86:bc:80:21:89:8a:55:
95:89:a8:48:3e:c4:57:3d:1a:69:dc:2b:32:be:1a:47:aa:b9:
89:50:34:ac:4d:c8:16:be:1b:16:74:c5:73:3b:7b:40:49:cc:
53:96:94:3f:44:7a:f0:31:90:50:27:06:0e:61:21:19:7d:d0:
0b:b5:29:98:cf:12:50:50:75:96:f7:ba:1e:9f:80:da:99:66:
4f:f7:ed:7f:3f:a2:26:a4:59:cd:ef:7a:28:5b:b2:48:48:7c:
a8:d2:87:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMFjrl8C7tsbcbMvIwqlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjYwNjMwMTEwMDQ5WhcNMjYwNzAxMTEwMDQ5WjAzMTEwLwYDVQQD
EyhkNjkwNTgyY2RiNTg1OTY0NThiNDUyNjJiNDg5Nzk3ZjVjMTU4NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVBhzwKKgIsoJW8pd8TdEUyt+BTG
VaFOwejSioNYdqwZOHu7TBRbtGbxP0O/cglCx/ZaKjKcS7wRBTfg/md+k/vXI0SL
DzmaCwYuv+FpBmWHEjpmIQPO9QXCgSxmJfUHgCsIVJMnHeTQRl5QMaAKFMtb4vi9
Y/KoaO9Dcrbo8SInjIZg2LPr3DXIDk6cEH9O6kdlCl/rngjSEtO0wIHLGkjGT7yS
FxzKNv9uagISCAQTbPofQfwOwvpJ/JEWvNOVT9lwW3HSTup9hR5RBKLgw3+JLj7q
Rzp+9jRtZlO2Z7pBwFl3S7iQXYJZYOE86tMG4UyepipF0GVXLmn+/2tGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaQWCzbWFlkWLRSYrSJeX9cFYWFMB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXlmYRnJ
e3NMKq1OZHAWVBKfNhKd2zLGcjm1BSbYNwIQ9skzYTQHFCVjzTIzQtmcB5zqfCJI
Hn2c/Hj/4Bwyo25GWZ49gJn9ggI/vrLC1g1LK+rZLNwgkG6+bBm03XZNl2NGGSe3
YvoeqOF7pHm5xdnPIuHZ59Oo+qAXaYDgzpmRTrQQN5CJ2lsL8exR7EskDvzat1pi
RVIgOVWGvIAhiYpVlYmoSD7EVz0aadwrMr4aR6q5iVA0rE3IFr4bFnTFczt7QEnM
U5aUP0R68DGQUCcGDmEhGX3QC7UpmM8SUFB1lve6Hp+A2plmT/ftfz+iJqRZze96
KFuySEh8qNKHmA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:04 2026 by rpki-client