Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: fjJQIxIvezPEErnUraZ9K3GWfrou9joMg0JrsO+YEDI=
Subject key identifier: 88:C7:9B:D2:AD:AD:FC:C3:D1:65:19:99:6A:B5:95:B5:E4:7F:0C:57
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019F0AABC717FDA8C1144B0DD3B4EA3C634C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0A91
Signing time: Sat 27 Jun 2026 20:00:57 +0000
Manifest this update: Sat 27 Jun 2026 20:00:57 +0000
Manifest next update: Sun 28 Jun 2026 20:00:57 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 3jxEbSyouEOUthlIHG1nGIOolPZBkkn0CS9DkNw0lxk=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:ab:c7:17:fd:a8:c1:14:4b:0d:d3:b4:ea:3c:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jun 27 20:00:57 2026 GMT
Not After : Jun 28 20:00:57 2026 GMT
Subject: CN=88c79bd2adadfcc3d16519996ab595b5e47f0c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:0b:f9:35:5c:7c:01:de:f9:76:02:63:b2:
9a:a0:13:d3:5c:4b:b4:ab:39:79:c2:67:af:96:f2:
88:93:07:61:e8:41:89:f1:7a:79:53:13:dd:40:23:
c6:1a:44:a3:73:8e:7b:43:9a:a5:55:81:9d:de:d6:
cb:af:da:bf:1d:42:7e:5f:39:75:79:bd:ea:3c:ca:
59:33:d4:bf:6c:9f:25:72:0e:b0:62:6f:95:49:aa:
44:0c:4f:93:80:aa:de:8c:70:54:4e:27:ba:e3:81:
74:f3:c4:10:e9:0d:2e:e2:8b:a4:c2:ab:d7:65:3f:
c1:54:02:18:34:6f:0d:d7:e9:3a:ca:4b:54:00:35:
12:93:49:c4:7b:c1:26:0c:16:69:cc:47:18:88:25:
0f:8f:25:34:64:37:e7:52:45:51:56:fd:f7:e5:0d:
a7:0e:0b:6a:dd:ce:bc:d8:68:2f:96:67:f5:f4:55:
80:79:3e:f2:ca:53:c7:6a:e4:0c:d8:a4:21:20:44:
d9:da:58:bc:59:df:ef:89:dc:48:04:61:bc:48:00:
e4:34:21:61:7c:be:7e:0e:59:8f:4a:86:08:0d:b3:
dd:e3:26:d2:a5:eb:3f:d9:8b:84:d4:ea:72:90:67:
06:1c:df:89:c3:6e:6b:96:65:9a:83:56:55:96:d2:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:9B:D2:AD:AD:FC:C3:D1:65:19:99:6A:B5:95:B5:E4:7F:0C:57
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:32:6b:67:38:59:58:14:c3:83:00:cb:17:f8:86:26:9a:
17:08:f6:04:40:6b:d0:5a:68:8a:f8:0e:14:3f:91:d3:a5:e1:
63:a7:fe:64:5c:8a:33:8b:e1:63:16:de:90:e4:05:f5:04:3f:
c8:e8:12:47:de:0f:77:97:26:c5:20:69:9b:b3:56:b4:6f:65:
28:d6:97:a0:e4:1c:cf:5b:8f:ba:13:40:c8:83:d2:81:49:83:
86:e6:ae:53:19:fe:04:e6:dc:88:67:f7:89:f4:ee:a9:95:01:
29:2c:24:6e:4f:00:a6:cb:a9:9a:39:e7:13:dd:c7:06:e0:4e:
1c:a9:fb:c8:06:e0:ac:db:37:9a:3a:46:22:64:cf:bd:f5:2e:
bb:1d:cf:be:69:58:d4:40:94:76:05:81:0b:67:54:0a:0b:7d:
59:75:98:6e:45:cd:07:1b:b2:31:60:78:14:25:f7:1d:c7:d8:
60:61:77:3e:9a:95:50:47:49:e9:22:6a:e2:61:82:89:f0:c0:
5f:14:17:b7:22:30:71:8e:54:5c:65:00:b0:a4:b5:76:e1:39:
34:76:25:f0:3b:7f:c9:00:45:06:09:d7:17:6d:99:5f:56:9b:
48:e1:68:f7:a4:18:1e:bc:72:28:26:cb:f7:90:a3:85:45:76:
20:27:11:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Kq8cX/ajBFEsN07TqPGNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjYwNjI3MjAwMDU3WhcNMjYwNjI4MjAwMDU3WjAzMTEwLwYDVQQD
Eyg4OGM3OWJkMmFkYWRmY2MzZDE2NTE5OTk2YWI1OTViNWU0N2YwYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0L+TVcfAHe+XYCY7KaoBPTXEu0
qzl5wmevlvKIkwdh6EGJ8Xp5UxPdQCPGGkSjc457Q5qlVYGd3tbLr9q/HUJ+Xzl1
eb3qPMpZM9S/bJ8lcg6wYm+VSapEDE+TgKrejHBUTie644F088QQ6Q0u4oukwqvX
ZT/BVAIYNG8N1+k6yktUADUSk0nEe8EmDBZpzEcYiCUPjyU0ZDfnUkVRVv335Q2n
Dgtq3c682Ggvlmf19FWAeT7yylPHauQM2KQhIETZ2li8Wd/vidxIBGG8SADkNCFh
fL5+DlmPSoYIDbPd4ybSpes/2YuE1OpykGcGHN+Jw25rlmWag1ZVltJYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjHm9KtrfzD0WUZmWq1lbXkfwxXMB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNAya2c4
WVgUw4MAyxf4hiaaFwj2BEBr0FpoivgOFD+R06XhY6f+ZFyKM4vhYxbekOQF9QQ/
yOgSR94Pd5cmxSBpm7NWtG9lKNaXoOQcz1uPuhNAyIPSgUmDhuauUxn+BObciGf3
ifTuqZUBKSwkbk8ApsupmjnnE93HBuBOHKn7yAbgrNs3mjpGImTPvfUuux3PvmlY
1ECUdgWBC2dUCgt9WXWYbkXNBxuyMWB4FCX3HcfYYGF3PpqVUEdJ6SJq4mGCifDA
XxQXtyIwcY5UXGUAsKS1duE5NHYl8Dt/yQBFBgnXF22ZX1abSOFo96QYHrxyKCbL
95CjhUV2ICcRFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 28 03:20:53 2026 by rpki-client