Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: bJjuFCRj3TwWwdtwACnk9tkIA9A48DchYtNXDu2A2u8=
Subject key identifier: 4E:EA:78:7D:23:6A:59:99:D0:4D:3F:58:9C:21:7E:16:47:D7:FA:99
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019EB6FC5D44B63C2C64CA5B37179258B868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0D94
Signing time: Thu 11 Jun 2026 14:00:52 +0000
Manifest this update: Thu 11 Jun 2026 14:00:52 +0000
Manifest next update: Fri 12 Jun 2026 14:00:52 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: 9KbDSKber3ks5OayGxTLebvJO5WNhHWBKMO5K2ir/Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:5d:44:b6:3c:2c:64:ca:5b:37:17:92:58:b8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Jun 11 14:00:52 2026 GMT
Not After : Jun 12 14:00:52 2026 GMT
Subject: CN=4eea787d236a5999d04d3f589c217e1647d7fa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:e6:6a:03:25:f1:13:92:b6:7e:8c:bb:72:
be:d8:2a:8a:ae:ed:6f:80:9c:b7:95:ef:ad:66:d1:
e6:2d:b4:a2:52:ab:08:27:0b:ee:71:5b:a6:9a:b9:
d3:1a:db:de:86:03:74:56:01:56:56:6b:7d:3e:2f:
21:07:48:fa:60:5b:73:c1:a1:83:39:68:fc:bc:17:
74:a6:a3:ba:5f:80:47:09:c5:57:60:98:7e:7c:3a:
b5:4c:d2:08:95:5f:29:51:96:31:34:1d:ff:69:98:
fa:2a:62:fb:22:a2:7a:dc:3a:05:2e:d1:48:07:bb:
8c:38:0c:0a:29:c6:56:14:e4:8f:7f:9f:b2:72:4d:
e3:ae:65:c0:3e:2e:3c:93:da:5d:99:74:83:78:bf:
af:91:10:47:ed:1f:cf:3f:c3:44:8b:b4:6d:53:3a:
29:ee:d7:94:80:2a:4e:c7:7c:64:f7:51:43:0a:4b:
0d:9a:52:ec:7a:c0:60:66:f5:6e:33:14:8f:4d:87:
2e:91:cc:ef:87:a2:91:da:de:6a:a1:d6:ff:08:3a:
4e:92:da:18:73:9d:07:eb:48:af:9a:3a:7c:7c:40:
d4:15:6c:34:a7:ee:e8:37:4a:24:2e:07:78:39:bf:
cb:ba:3f:f1:60:53:bc:03:2c:12:5c:6c:2f:51:a5:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:78:7D:23:6A:59:99:D0:4D:3F:58:9C:21:7E:16:47:D7:FA:99
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:bf:e3:4b:4b:7d:29:bb:4a:ad:01:eb:dc:70:0e:57:08:
5b:63:3f:4b:ec:be:98:0f:e6:45:b6:ac:57:55:cc:80:fa:5a:
6b:bd:77:9e:00:df:da:ed:f4:e8:0c:3e:4c:a9:1f:40:2a:cc:
29:6c:bf:eb:85:ef:61:70:b7:89:76:fa:78:86:d6:6a:6e:8d:
40:a9:23:d9:38:b7:4f:81:57:20:15:2a:a3:18:a8:2c:88:e0:
5a:22:0e:5d:88:65:67:a9:97:f9:b3:c3:bf:7e:dd:5e:0b:dc:
91:8e:ae:9a:26:ed:f7:e7:c3:1c:eb:30:6b:16:54:5c:ec:09:
c2:46:c7:1c:1f:9b:e8:91:a0:9f:2e:4a:0a:df:a2:16:5b:c1:
bb:b3:f7:f8:97:51:5e:1b:c0:44:65:3e:30:35:06:0a:96:71:
8d:fe:22:87:fe:fe:36:48:77:01:80:31:57:52:7e:c1:5d:ae:
e0:18:80:4c:fe:63:34:97:57:31:29:33:91:40:ab:69:fe:c6:
a5:15:38:42:28:16:ba:b3:9d:7f:d1:ae:6d:00:f2:2a:2d:18:
d0:c3:b4:0a:c2:df:0b:fe:7f:0d:90:bf:4e:4f:92:f8:b6:56:
2d:25:40:b1:c3:5e:6a:85:44:12:29:0b:57:e4:84:28:7b:b8:
79:ac:56:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/F1EtjwsZMpbNxeSWLhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl
MzY2MmMwHhcNMjYwNjExMTQwMDUyWhcNMjYwNjEyMTQwMDUyWjAzMTEwLwYDVQQD
Eyg0ZWVhNzg3ZDIzNmE1OTk5ZDA0ZDNmNTg5YzIxN2UxNjQ3ZDdmYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop/magMl8ROStn6Mu3K+2CqKru1v
gJy3le+tZtHmLbSiUqsIJwvucVummrnTGtvehgN0VgFWVmt9Pi8hB0j6YFtzwaGD
OWj8vBd0pqO6X4BHCcVXYJh+fDq1TNIIlV8pUZYxNB3/aZj6KmL7IqJ63DoFLtFI
B7uMOAwKKcZWFOSPf5+yck3jrmXAPi48k9pdmXSDeL+vkRBH7R/PP8NEi7RtUzop
7teUgCpOx3xk91FDCksNmlLsesBgZvVuMxSPTYcukczvh6KR2t5qodb/CDpOktoY
c50H60ivmjp8fEDUFWw0p+7oN0okLgd4Ob/Luj/xYFO8AywSXGwvUaXJnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7qeH0jalmZ0E0/WJwhfhZH1/qZMB8GA1UdIwQY
MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt
NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2
LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8m/40tL
fSm7Sq0B69xwDlcIW2M/S+y+mA/mRbasV1XMgPpaa713ngDf2u306Aw+TKkfQCrM
KWy/64XvYXC3iXb6eIbWam6NQKkj2Ti3T4FXIBUqoxioLIjgWiIOXYhlZ6mX+bPD
v37dXgvckY6umibt9+fDHOswaxZUXOwJwkbHHB+b6JGgny5KCt+iFlvBu7P3+JdR
XhvARGU+MDUGCpZxjf4ih/7+Nkh3AYAxV1J+wV2u4BiATP5jNJdXMSkzkUCraf7G
pRU4QigWurOdf9GubQDyKi0Y0MO0CsLfC/5/DZC/Tk+S+LZWLSVAscNeaoVEEikL
V+SEKHu4eaxWLA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:44 2026 by rpki-client