Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier: AJh4H4TqEUaVvKu2X2Ie8kUu/Sj0B+BWH8GdUA9o+uU=
Subject key identifier: 28:AF:2A:34:A1:B8:58:16:5B:88:A0:A6:AE:9B:EA:FF:70:09:79:05
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 019F1BD627E7C3371FD6B0397DD0E4BBD622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number: 1384
Signing time: Wed 01 Jul 2026 04:00:47 +0000
Manifest this update: Wed 01 Jul 2026 04:00:47 +0000
Manifest next update: Thu 02 Jul 2026 04:00:47 +0000
Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: EILnlw3p7dlwW9ovo2rJF4MbwgNu8qa26YZIUefVLBY=)
2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:27:e7:c3:37:1f:d6:b0:39:7d:d0:e4:bb:d6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Jul 1 04:00:47 2026 GMT
Not After : Jul 2 04:00:47 2026 GMT
Subject: CN=28af2a34a1b858165b88a0a6ae9beaff70097905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:8a:85:cc:cf:e6:71:10:59:c8:29:dd:19:
76:7c:ee:84:cf:89:aa:5f:47:0a:27:d9:da:23:87:
95:0d:89:92:77:3b:78:24:8d:07:39:25:3d:8e:d4:
7b:d9:9a:d9:be:71:00:f5:91:07:a9:f4:e4:0e:47:
5d:e5:e9:d6:7f:d6:d0:10:eb:7d:d1:49:d8:97:70:
df:b7:dc:db:db:a8:d2:03:f0:ee:db:29:c8:f7:5b:
d2:e7:9c:8a:90:ba:5f:ef:d2:db:15:17:1f:03:e1:
6d:bf:02:90:35:2a:66:fa:01:c5:31:ba:f2:46:22:
ab:9c:4d:b1:aa:7a:b5:be:30:55:4c:ab:0d:6a:61:
0e:4e:6d:e5:96:9f:79:27:f9:09:16:16:a7:de:af:
96:f1:42:c5:d3:84:ef:3d:4b:2d:5d:27:1d:fd:e0:
73:be:a2:74:0c:ee:39:28:cb:8c:68:23:fb:71:24:
05:54:07:aa:1c:46:26:0b:64:85:a2:45:82:73:ca:
9c:bb:60:6b:95:83:c9:81:9e:56:e0:1c:65:12:7d:
da:29:4c:38:f3:ad:c2:03:6c:6f:12:b4:3e:86:6e:
c8:b1:14:a8:fa:16:5e:9b:83:ff:10:2a:5d:bd:29:
6e:83:1b:39:69:45:a7:38:8b:31:30:13:5e:ff:94:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:2A:34:A1:B8:58:16:5B:88:A0:A6:AE:9B:EA:FF:70:09:79:05
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:c5:ff:1b:08:3e:5e:fa:0a:27:ec:35:47:d8:22:56:30:
c1:65:29:56:c2:70:e4:45:cc:76:c8:dc:c4:92:da:ad:4e:6d:
e5:7b:9d:bd:1b:6f:8d:ce:48:25:ce:8f:f6:63:e9:27:20:4a:
31:52:db:43:92:a8:86:07:b1:b3:9b:17:d0:53:0f:45:1f:00:
f1:3a:51:67:76:ef:26:5b:b4:2f:bf:ce:df:88:48:d1:e7:df:
3f:98:65:d3:7f:89:53:59:21:4a:9e:18:ed:34:65:80:c0:3d:
62:c9:51:e8:dc:6b:71:ac:f2:4d:2b:55:42:27:49:ed:dc:b4:
ef:4d:15:f3:6b:aa:05:a2:20:ab:7f:79:cb:b9:5e:b9:15:a9:
65:d2:34:d0:cc:07:c5:c7:de:3d:0a:c4:9b:d4:0f:b2:44:f5:
fa:66:6f:87:93:82:c9:8a:c7:bb:5e:d5:32:2a:ec:3c:bd:fe:
4a:2a:5f:6a:97:8e:6b:d6:5a:d3:df:d8:2e:74:b1:2e:84:94:
73:63:26:f0:06:82:ee:93:a4:5b:cb:2a:56:10:98:9e:93:b7:
ad:ea:c7:c3:98:1b:7a:ce:55:fa:e0:c3:e8:6d:10:2b:24:64:
4d:ff:e0:e9:81:10:0e:48:4a:ec:19:a5:0c:7e:6b:db:c2:5f:
d6:df:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8b1ifnwzcf1rA5fdDku9YiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh
MzhmOWIwHhcNMjYwNzAxMDQwMDQ3WhcNMjYwNzAyMDQwMDQ3WjAzMTEwLwYDVQQD
EygyOGFmMmEzNGExYjg1ODE2NWI4OGEwYTZhZTliZWFmZjcwMDk3OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYiKhczP5nEQWcgp3Rl2fO6Ez4mq
X0cKJ9naI4eVDYmSdzt4JI0HOSU9jtR72ZrZvnEA9ZEHqfTkDkdd5enWf9bQEOt9
0UnYl3Dft9zb26jSA/Du2ynI91vS55yKkLpf79LbFRcfA+FtvwKQNSpm+gHFMbry
RiKrnE2xqnq1vjBVTKsNamEOTm3llp95J/kJFhan3q+W8ULF04TvPUstXScd/eBz
vqJ0DO45KMuMaCP7cSQFVAeqHEYmC2SFokWCc8qcu2BrlYPJgZ5W4BxlEn3aKUw4
863CA2xvErQ+hm7IsRSo+hZem4P/ECpdvSlugxs5aUWnOIsxMBNe/5SBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCivKjShuFgWW4igpq6b6v9wCXkFMB8GA1UdIwQY
MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt
OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx
LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndHF/xsI
Pl76CifsNUfYIlYwwWUpVsJw5EXMdsjcxJLarU5t5XudvRtvjc5IJc6P9mPpJyBK
MVLbQ5Kohgexs5sX0FMPRR8A8TpRZ3bvJlu0L7/O34hI0effP5hl03+JU1khSp4Y
7TRlgMA9YslR6NxrcazyTStVQidJ7dy0700V82uqBaIgq395y7leuRWpZdI00MwH
xcfePQrEm9QPskT1+mZvh5OCyYrHu17VMirsPL3+SipfapeOa9Za09/YLnSxLoSU
c2Mm8AaC7pOkW8sqVhCYnpO3rerHw5gbes5V+uDD6G0QKyRkTf/g6YEQDkhK7Bml
DH5r28Jf1t9zbg==
-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:43 2026 by rpki-client