Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: G+UcJLAKYAqQAb1bwE9HWFpgcHl3UnkTVSZlgH9iKzs=
Subject key identifier: 9C:CF:8C:28:AB:DE:B6:54:37:CD:A1:7B:CB:F3:B3:7A:6A:DA:DE:83
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019F148AD24281CAE4446BC334E6CB02132D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 18:01:09 +0000
Manifest this update: Mon 29 Jun 2026 18:01:09 +0000
Manifest next update: Tue 30 Jun 2026 18:01:09 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: 6EftfWY5NKuqHJTYZELDyjoh4HitO/L7OA99FgVdqns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:8a:d2:42:81:ca:e4:44:6b:c3:34:e6:cb:02:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jun 29 18:01:09 2026 GMT
Not After : Jun 30 18:01:09 2026 GMT
Subject: CN=9ccf8c28abdeb65437cda17bcbf3b37a6adade83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:62:eb:41:fa:42:2c:d6:5b:02:0d:f9:d0:
1a:cc:64:0e:ca:5e:51:7b:a4:61:81:26:0b:f8:1c:
4d:45:7a:c1:40:7d:0e:d1:8e:8e:f7:03:9d:25:8e:
04:95:f6:de:7f:4a:f7:bd:9a:e0:f5:3a:78:98:d4:
b5:d5:0b:8f:cc:f8:9b:90:6d:c9:c6:3c:99:bb:c3:
dd:81:51:09:95:64:f0:28:e1:72:10:d4:63:9c:33:
52:fc:be:6a:df:e0:a1:3e:fd:56:2e:18:e4:8a:97:
92:97:5a:21:7b:d2:50:8c:b6:d3:ab:50:40:1b:8c:
99:74:cf:09:3c:2a:4f:9f:28:19:4c:e3:63:93:20:
1e:27:69:2c:8e:50:69:94:b4:46:bb:e2:e8:44:2b:
e3:e8:04:7d:76:9e:92:42:a9:7b:1a:00:0f:4e:f0:
bc:8b:e4:0a:6f:5c:2f:2b:86:db:86:fb:8d:5c:67:
5a:dc:d7:ff:4c:7b:e3:a6:ba:96:c7:34:7a:a5:75:
d0:74:9a:98:44:32:87:ed:50:de:9f:e1:2d:57:85:
4a:92:28:da:55:83:9d:3f:d3:e9:0a:c0:5f:79:ac:
14:83:51:64:4f:9e:9e:40:1e:a0:37:d2:37:fd:f4:
67:4f:4a:5e:21:ae:79:3a:ed:84:1f:83:4e:1c:93:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:8C:28:AB:DE:B6:54:37:CD:A1:7B:CB:F3:B3:7A:6A:DA:DE:83
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:c5:81:9a:35:97:9e:d8:ee:69:e2:81:bd:25:ab:d1:28:
bb:df:68:fa:1c:a4:ff:6b:da:11:da:1d:e0:7d:d4:94:d1:3c:
e3:c4:f5:51:d5:22:dd:36:b0:0b:8e:46:28:b4:60:f0:f5:04:
46:39:34:18:6c:01:54:7e:0b:f5:31:5f:ec:b8:12:15:94:f0:
3a:77:2c:30:3a:fd:41:38:c7:72:4c:a5:ab:16:68:2e:ca:b7:
77:c2:97:20:9f:d6:4e:2f:51:ee:2a:13:33:95:91:d2:0c:5c:
90:61:43:3a:5a:d3:f8:38:45:e1:2d:00:e0:94:62:57:3f:94:
01:ed:8b:a4:2c:21:f0:a9:be:f8:2b:c5:b2:24:49:6f:a3:20:
22:ba:5d:9c:c4:bb:e0:d6:0c:9c:bf:e3:e6:bf:fb:0d:13:40:
24:00:0b:f2:74:05:de:3d:84:6b:20:a8:15:57:64:12:0e:b7:
d4:ff:16:be:cc:75:ad:db:37:48:39:a5:77:c8:98:5d:af:4a:
3a:ef:2f:05:1b:63:09:f1:db:45:55:e3:c3:1f:8f:5c:c7:c5:
83:93:68:c1:1a:51:90:c3:bf:a5:76:bb:9f:70:dd:3f:67:87:
ae:38:11:cf:70:fd:e3:d7:f6:96:bb:f7:f5:79:24:fe:7c:ea:
bb:be:cf:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UitJCgcrkRGvDNObLAhMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjYwNjI5MTgwMTA5WhcNMjYwNjMwMTgwMTA5WjAzMTEwLwYDVQQD
Eyg5Y2NmOGMyOGFiZGViNjU0MzdjZGExN2JjYmYzYjM3YTZhZGFkZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuBi60H6QizWWwIN+dAazGQOyl5R
e6RhgSYL+BxNRXrBQH0O0Y6O9wOdJY4Elfbef0r3vZrg9Tp4mNS11QuPzPibkG3J
xjyZu8PdgVEJlWTwKOFyENRjnDNS/L5q3+ChPv1WLhjkipeSl1ohe9JQjLbTq1BA
G4yZdM8JPCpPnygZTONjkyAeJ2ksjlBplLRGu+LoRCvj6AR9dp6SQql7GgAPTvC8
i+QKb1wvK4bbhvuNXGda3Nf/THvjprqWxzR6pXXQdJqYRDKH7VDen+EtV4VKkija
VYOdP9PpCsBfeawUg1FkT56eQB6gN9I3/fRnT0peIa55Ou2EH4NOHJMJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzPjCir3rZUN82he8vzs3pq2t6DMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQXFgZo1
l57Y7mnigb0lq9Eou99o+hyk/2vaEdod4H3UlNE848T1UdUi3TawC45GKLRg8PUE
Rjk0GGwBVH4L9TFf7LgSFZTwOncsMDr9QTjHckylqxZoLsq3d8KXIJ/WTi9R7ioT
M5WR0gxckGFDOlrT+DhF4S0A4JRiVz+UAe2LpCwh8Km++CvFsiRJb6MgIrpdnMS7
4NYMnL/j5r/7DRNAJAAL8nQF3j2EayCoFVdkEg631P8Wvsx1rds3SDmld8iYXa9K
Ou8vBRtjCfHbRVXjwx+PXMfFg5NowRpRkMO/pXa7n3DdP2eHrjgRz3D949f2lrv3
9Xkk/nzqu77Pzg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:35:02 2026 by rpki-client