Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: PrqBD+BEzgN4rIdV7Cm38yoQ65GIamIkqi+xFIBVpZ0=
Subject key identifier: 8B:F4:9B:81:BE:3F:43:06:DA:85:B8:CD:61:9C:2D:57:52:79:93:0E
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019F1831016B490B21BF0290C9444ACC882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 11:01:32 +0000
Manifest this update: Tue 30 Jun 2026 11:01:32 +0000
Manifest next update: Wed 01 Jul 2026 11:01:32 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: 0cPbPj1jHyFHMHgqIbUlv4AwQyBm3oPV1aL7+cT7B7c=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:01:6b:49:0b:21:bf:02:90:c9:44:4a:cc:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jun 30 11:01:32 2026 GMT
Not After : Jul 1 11:01:32 2026 GMT
Subject: CN=8bf49b81be3f4306da85b8cd619c2d575279930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:64:95:7c:c1:f2:7a:4e:e6:27:ca:c8:f8:
72:58:4c:97:bc:30:9e:a1:3e:4a:fe:13:81:a3:ca:
21:78:77:2e:fb:f6:9c:27:de:a3:cc:ce:4d:66:5b:
a0:a9:ee:5b:7d:6e:88:c1:6b:e7:d6:06:f3:27:d8:
bf:dc:74:5a:77:a2:95:39:1d:e3:5f:f5:93:3f:99:
66:88:5f:70:a0:44:0b:54:79:07:17:3a:9f:ad:4e:
23:7b:b5:97:a4:74:57:7d:9c:fc:5f:34:18:a4:76:
bc:04:1d:ee:02:6d:87:7f:a4:5c:1a:40:cc:07:c0:
93:01:19:a0:e5:e1:d6:8a:79:02:f6:c1:11:ec:56:
be:ad:6f:d0:d5:27:9f:c5:fc:5f:de:f0:ff:6b:6d:
1b:2e:16:55:c6:d5:75:c7:25:b5:61:40:ba:25:ca:
fe:3b:bb:5e:7b:34:d5:f5:9a:87:cb:5b:e8:8a:64:
b8:8a:b1:54:72:9d:1c:31:f6:92:14:67:04:34:93:
ce:92:30:13:f2:eb:9f:6a:c9:b4:cb:79:28:41:35:
f5:43:e7:6e:42:f9:c2:ec:1f:d9:cb:06:57:af:03:
d1:c7:fb:5d:6d:cf:b7:dc:f6:07:15:e5:9a:58:66:
b1:b4:4d:ac:65:f3:07:dd:ee:22:16:f1:f5:e4:0b:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:9B:81:BE:3F:43:06:DA:85:B8:CD:61:9C:2D:57:52:79:93:0E
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3a:9c:45:a0:15:9a:88:73:0f:6b:a1:ec:96:e4:e3:83:44:
3c:3c:4b:18:8a:37:1a:0e:2d:e4:81:6b:6c:b3:13:70:7d:4c:
c3:80:df:01:ad:3c:3a:bf:a5:24:1e:7a:fb:87:e0:4d:50:21:
81:1f:d8:33:39:80:78:28:29:ad:b2:a3:06:76:f1:07:4c:73:
95:7b:49:ff:b6:b9:ec:f5:01:b7:fb:ba:6b:a9:b7:65:34:10:
fa:12:a8:ce:d9:03:37:41:4e:ca:0e:10:85:d7:a9:2b:f7:98:
79:21:3a:7b:17:44:58:3e:6e:df:f7:8e:8e:4c:f5:85:e2:ad:
90:f8:f4:c3:3b:da:7d:b1:1f:e5:6b:80:4a:5d:d6:a6:30:5e:
03:d1:9e:23:5e:d1:78:60:1a:35:bb:97:71:ed:74:69:11:14:
aa:3e:cd:f5:e7:5f:52:b5:fb:3a:ae:fc:10:af:b5:98:b6:1e:
c6:a1:ca:2c:64:f2:f8:ad:01:55:23:85:33:a9:3a:64:a1:3d:
9a:ce:79:73:f7:55:59:8a:e6:34:9e:4a:96:22:8f:73:0a:8b:
23:69:4c:ac:05:e3:ae:f6:86:f9:4c:c3:81:15:6e:0e:a0:43:
fe:5c:9e:03:c1:29:a7:92:e3:07:fa:41:bb:38:68:c6:61:f9:
30:15:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:51 2026 by rpki-client