Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: 7d4msjc8JMPZZfRBVqvVuIJrrDkNn477en82/FONYnw=
Subject key identifier: 2D:62:D6:AD:73:AF:BB:81:50:C4:2A:84:35:14:F1:39:9F:48:FC:5A
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019EB732F8B7B5B57389A409AAEAA0D63B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 08FA
Signing time: Thu 11 Jun 2026 15:00:31 +0000
Manifest this update: Thu 11 Jun 2026 15:00:31 +0000
Manifest next update: Fri 12 Jun 2026 15:00:31 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: bqYxzCR9GhdA7vmbUeusCFhmWzHVaAAapNSpuijYAbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:f8:b7:b5:b5:73:89:a4:09:aa:ea:a0:d6:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jun 11 15:00:31 2026 GMT
Not After : Jun 12 15:00:31 2026 GMT
Subject: CN=2d62d6ad73afbb8150c42a843514f1399f48fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:d4:2f:20:01:c4:ca:64:e1:7b:9a:e6:42:
20:46:48:71:a3:ea:87:c0:45:c7:e1:4c:2d:1b:43:
a3:e9:e8:92:15:73:61:ec:9c:8e:81:af:03:ff:f1:
9b:75:54:e4:c5:42:1e:79:01:b2:02:4c:46:88:0f:
31:2f:ed:c0:04:0c:82:05:57:5c:0e:f2:b4:ad:45:
9e:61:1c:3d:1b:3c:d3:b1:68:d9:13:66:34:2e:3d:
12:a6:68:b1:ee:d4:d7:04:e3:b5:26:64:fa:51:12:
b9:be:37:13:6c:ae:be:e8:f6:af:29:bd:1a:8c:9d:
a3:3d:97:da:9a:23:9d:04:c8:49:2e:aa:af:db:8f:
44:2e:ab:bd:30:83:78:20:45:1e:bf:27:3f:d5:14:
61:94:e3:30:85:bb:22:ba:bf:30:ca:2a:e2:bb:f0:
13:eb:a9:9e:6f:f2:e6:b7:76:a7:64:16:cb:63:82:
0d:b8:ed:17:57:42:f6:57:06:96:8c:64:dc:8f:18:
db:ae:dd:f1:4f:ee:62:89:8c:cb:65:9f:01:63:9a:
7c:b7:5a:39:02:f5:46:eb:87:5d:ba:50:88:2f:b6:
14:67:4a:56:b1:07:e4:b6:e0:4f:ce:55:12:50:81:
1b:9a:b0:93:a0:bf:07:93:6c:95:b7:ee:ee:2b:20:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:62:D6:AD:73:AF:BB:81:50:C4:2A:84:35:14:F1:39:9F:48:FC:5A
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:e7:f3:c9:94:05:82:8c:ec:8b:cc:a8:d6:d1:eb:9d:c3:
62:56:04:84:f5:86:18:8c:a7:ae:09:de:60:90:55:c1:51:b7:
36:e4:e1:e1:71:e8:6d:39:16:55:05:d0:83:20:68:50:5b:10:
b4:0c:f2:f1:cc:27:b1:a8:22:6c:51:49:bb:ab:5c:c4:1b:fc:
2d:fc:f0:7f:e2:bf:e3:60:5f:c9:e8:17:8f:48:8c:1e:e0:10:
89:e7:95:e2:d9:c3:9c:94:ff:5f:79:a5:f3:01:78:16:19:e1:
a3:14:c5:ad:b5:e8:5c:5f:43:9d:be:f3:80:5f:a7:14:0a:24:
b7:bb:f0:6b:61:6c:e4:d4:ae:14:67:ad:23:b9:b1:07:a2:50:
38:81:7b:a9:a1:8e:41:69:40:7f:dc:1a:a6:31:33:f8:02:3c:
17:ff:44:03:99:da:1d:9a:6b:bb:39:21:f5:4b:82:40:f0:7d:
ce:86:af:76:34:e9:dc:1f:cb:99:3b:5b:14:fd:a7:d9:18:99:
0b:5c:0a:32:38:62:8e:c2:5b:95:0e:55:30:17:9c:b5:82:fb:
67:95:c1:14:e2:ca:93:a6:86:18:38:23:29:48:54:d8:17:43:
ab:48:23:9f:a3:ce:a8:27:8e:c5:1e:64:d4:ca:09:2f:7b:06:
86:da:fd:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63Mvi3tbVziaQJquqg1jshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwNjExMTUwMDMxWhcNMjYwNjEyMTUwMDMxWjAzMTEwLwYDVQQD
EygyZDYyZDZhZDczYWZiYjgxNTBjNDJhODQzNTE0ZjEzOTlmNDhmYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfjULyABxMpk4Xua5kIgRkhxo+qH
wEXH4UwtG0Oj6eiSFXNh7JyOga8D//GbdVTkxUIeeQGyAkxGiA8xL+3ABAyCBVdc
DvK0rUWeYRw9GzzTsWjZE2Y0Lj0Spmix7tTXBOO1JmT6URK5vjcTbK6+6PavKb0a
jJ2jPZfamiOdBMhJLqqv249ELqu9MIN4IEUevyc/1RRhlOMwhbsiur8wyiriu/AT
66meb/Lmt3anZBbLY4INuO0XV0L2VwaWjGTcjxjbrt3xT+5iiYzLZZ8BY5p8t1o5
AvVG64ddulCIL7YUZ0pWsQfktuBPzlUSUIEbmrCToL8Hk2yVt+7uKyDb/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1i1q1zr7uBUMQqhDUU8TmfSPxaMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIznn88mU
BYKM7IvMqNbR653DYlYEhPWGGIynrgneYJBVwVG3NuTh4XHobTkWVQXQgyBoUFsQ
tAzy8cwnsagibFFJu6tcxBv8Lfzwf+K/42BfyegXj0iMHuAQieeV4tnDnJT/X3ml
8wF4FhnhoxTFrbXoXF9Dnb7zgF+nFAokt7vwa2Fs5NSuFGetI7mxB6JQOIF7qaGO
QWlAf9wapjEz+AI8F/9EA5naHZpruzkh9UuCQPB9zoavdjTp3B/LmTtbFP2n2RiZ
C1wKMjhijsJblQ5VMBectYL7Z5XBFOLKk6aGGDgjKUhU2BdDq0gjn6POqCeOxR5k
1MoJL3sGhtr90g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:18:52 2026 by rpki-client