Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: oPRmvmPC3MTaDI9/pr00P4KOJcsq4/Q54abwyenQ0XQ=
Subject key identifier: 9B:6F:8F:DB:25:3A:42:BD:AF:1B:58:ED:09:13:DE:3D:19:2A:12:2C
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019EB73391E231A8D4C2F46A1386CA9F4AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 15:01:10 +0000
Manifest this update: Thu 11 Jun 2026 15:01:10 +0000
Manifest next update: Fri 12 Jun 2026 15:01:10 +0000
Files and hashes: 1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: K9p6drRtlGqo4XlGEz5Od+JbUqfu4pBvdD3wvKNPdu0=)
2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:91:e2:31:a8:d4:c2:f4:6a:13:86:ca:9f:4a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Jun 11 15:01:10 2026 GMT
Not After : Jun 12 15:01:10 2026 GMT
Subject: CN=9b6f8fdb253a42bdaf1b58ed0913de3d192a122c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:d6:c0:d9:b3:12:d3:0a:6e:e7:87:cf:2c:
2e:48:9d:04:b1:62:26:18:29:29:da:ad:7e:27:61:
5f:9c:b6:57:70:7c:4c:46:39:4e:a2:93:bf:6c:a1:
49:e5:8b:c1:a5:e9:47:8e:62:39:20:1e:13:03:1e:
e1:c5:71:02:fc:99:4a:73:a7:14:f2:99:5e:7e:0d:
d8:57:d4:50:1b:3a:66:bd:ab:ad:64:e6:d9:ac:1e:
ce:16:eb:60:16:b6:c2:f5:16:e6:c0:86:5c:e0:7b:
7c:ff:9b:be:38:79:17:8c:8e:c6:b4:b6:1f:66:54:
69:3d:30:60:1e:40:6d:68:b7:25:5a:5b:13:54:cb:
9b:ca:16:e2:71:a3:e5:01:65:6b:22:1f:4c:15:57:
8a:72:72:d3:81:39:59:0b:1e:24:ea:ee:9e:30:8d:
d6:aa:80:64:74:5f:83:d2:3e:da:8e:23:6b:83:f6:
ab:9a:fb:f8:2d:b3:0c:6e:6c:f5:e0:02:be:d0:a8:
6d:46:8f:8e:a0:19:aa:1a:7c:1f:28:b0:b2:82:3d:
f9:8e:84:14:85:f8:7d:72:77:34:42:cd:74:97:0f:
65:75:2c:28:2a:15:e2:15:aa:13:15:5a:a5:aa:be:
1d:9c:ad:cd:83:c0:23:36:41:5d:8d:16:a4:3d:91:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6F:8F:DB:25:3A:42:BD:AF:1B:58:ED:09:13:DE:3D:19:2A:12:2C
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:d9:77:6d:45:2e:66:3a:02:ce:70:96:20:67:63:07:80:
0c:51:c4:a6:7d:76:7c:df:92:9a:67:8a:8d:7d:92:cc:89:c2:
70:a6:e9:06:b2:cc:43:b5:69:be:28:4c:dd:2e:af:e6:b0:bf:
f6:c2:c4:78:7b:2a:98:58:2a:16:38:c0:34:8e:b0:03:cc:4a:
ec:95:3b:e7:5a:c1:2e:23:8c:05:c1:7f:47:5f:b7:1a:d2:bb:
29:b1:2a:cb:82:68:78:e6:e0:a9:c7:6c:a9:ae:2b:82:f2:2e:
40:76:f6:05:94:12:e9:c7:a4:73:3d:c7:dd:05:58:dd:86:d2:
07:f1:61:ba:02:65:62:d5:20:bd:1e:4e:a4:cf:21:5d:d0:17:
02:c5:10:d1:ef:86:19:c0:91:c3:c7:37:88:6b:60:68:4d:1f:
f3:18:18:07:55:01:68:d4:bf:db:29:0e:09:f2:c2:2a:66:9a:
ed:3c:a9:76:19:eb:e3:d8:09:ec:c5:4a:a5:64:4a:4c:6b:fc:
42:4e:79:f3:0d:f5:5f:bf:4c:e6:c8:97:af:c5:24:8a:4f:8a:
9a:35:3c:d1:6b:23:23:27:9a:cb:07:ca:23:92:f6:8c:21:32:
20:f4:81:d8:50:50:95:8c:1e:86:5d:21:80:70:64:91:f9:92:
54:61:51:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M5HiMajUwvRqE4bKn0rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjYwNjExMTUwMTEwWhcNMjYwNjEyMTUwMTEwWjAzMTEwLwYDVQQD
Eyg5YjZmOGZkYjI1M2E0MmJkYWYxYjU4ZWQwOTEzZGUzZDE5MmExMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WzWwNmzEtMKbueHzywuSJ0EsWIm
GCkp2q1+J2FfnLZXcHxMRjlOopO/bKFJ5YvBpelHjmI5IB4TAx7hxXEC/JlKc6cU
8plefg3YV9RQGzpmvautZObZrB7OFutgFrbC9RbmwIZc4Ht8/5u+OHkXjI7GtLYf
ZlRpPTBgHkBtaLclWlsTVMubyhbicaPlAWVrIh9MFVeKcnLTgTlZCx4k6u6eMI3W
qoBkdF+D0j7ajiNrg/armvv4LbMMbmz14AK+0KhtRo+OoBmqGnwfKLCygj35joQU
hfh9cnc0Qs10lw9ldSwoKhXiFaoTFVqlqr4dnK3Ng8AjNkFdjRakPZEsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtvj9slOkK9rxtY7QkT3j0ZKhIsMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCPZd21F
LmY6As5wliBnYweADFHEpn12fN+SmmeKjX2SzInCcKbpBrLMQ7VpvihM3S6v5rC/
9sLEeHsqmFgqFjjANI6wA8xK7JU751rBLiOMBcF/R1+3GtK7KbEqy4JoeObgqcds
qa4rgvIuQHb2BZQS6cekcz3H3QVY3YbSB/FhugJlYtUgvR5OpM8hXdAXAsUQ0e+G
GcCRw8c3iGtgaE0f8xgYB1UBaNS/2ykOCfLCKmaa7Typdhnr49gJ7MVKpWRKTGv8
Qk558w31X79M5siXr8Ukik+KmjU80WsjIyeaywfKI5L2jCEyIPSB2FBQlYwehl0h
gHBkkfmSVGFRhw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:46 2026 by rpki-client