Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: jh8ag7NeLFOML6tinYgZGA6U6FaLS2Ies2ADaAUz5S4=
Subject key identifier: C3:DA:0F:6F:E7:5E:69:85:8D:7A:08:3A:EF:46:87:2C:71:3E:B4:91
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 019F12D36DB93064D9ED2590A5A4703B3ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 10:01:13 +0000
Manifest this update: Mon 29 Jun 2026 10:01:13 +0000
Manifest next update: Tue 30 Jun 2026 10:01:13 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 5gg+p5tvulUX6RfBLXYdq48oGEwgnyHQYxbLkJLP1BM=)
2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:6d:b9:30:64:d9:ed:25:90:a5:a4:70:3b:3e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Jun 29 10:01:13 2026 GMT
Not After : Jun 30 10:01:13 2026 GMT
Subject: CN=c3da0f6fe75e69858d7a083aef46872c713eb491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:0e:b2:67:24:57:fb:90:dc:2c:de:9c:c9:
5d:9c:fc:dc:e9:0a:de:e3:c2:59:39:e0:e8:c0:14:
53:f8:87:24:81:82:28:a4:f4:02:b3:24:a4:0e:fe:
ed:c2:7b:30:4f:03:d2:ab:2b:be:f2:5b:a6:3e:c5:
62:bf:87:18:bb:17:92:02:15:39:dc:15:f7:32:82:
37:a9:11:f1:68:f3:d1:d4:9b:34:68:20:0c:74:06:
c1:c2:76:d9:d7:d0:21:dd:30:3b:70:9f:de:91:b9:
da:79:c4:75:28:97:b1:ad:e4:23:b8:ef:66:bb:c2:
17:0b:9d:81:52:f2:27:3d:fa:3e:1b:ae:97:52:78:
e7:a5:f8:9d:8a:57:d9:59:b6:a5:65:20:eb:d7:d7:
11:b5:47:2d:88:20:c1:86:f8:67:78:71:fa:6a:f4:
80:53:a8:e4:9b:05:7a:1c:b2:f4:59:47:de:db:a2:
2e:47:a1:20:8b:51:e6:5f:f5:61:fc:b0:db:ac:66:
17:ae:1a:e8:d8:65:e6:93:14:4e:97:0e:e9:4b:c4:
a4:ef:1c:55:24:8d:86:a1:24:c0:5b:56:a4:c9:5b:
93:92:b4:ac:64:d9:5a:1b:68:5b:9a:4a:82:81:ff:
7f:d1:e0:90:d1:67:bb:0b:00:0a:0d:6f:b2:c4:30:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:0F:6F:E7:5E:69:85:8D:7A:08:3A:EF:46:87:2C:71:3E:B4:91
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2f:a1:7a:3a:d1:2c:57:4e:ea:b0:d2:94:4d:ad:83:e5:58:
7d:08:96:82:72:0c:90:c2:c3:bc:9b:87:44:90:71:b9:dc:68:
c1:6b:36:8c:79:eb:b8:02:b6:1e:04:be:8c:ef:de:cb:c1:19:
0d:b9:15:e8:b0:b3:48:34:df:e6:6b:c7:3b:29:b1:a3:1c:21:
bc:bd:7a:a6:ce:ad:59:2a:02:01:da:c6:d1:b3:e6:61:84:6e:
c4:9a:13:4e:4b:ca:6c:80:95:25:8c:18:07:57:ef:fc:ab:92:
a1:31:e7:5c:e6:67:6b:89:88:9a:62:d6:09:10:eb:ce:5b:6c:
28:4d:c6:fd:aa:15:8e:6d:06:ea:db:60:99:53:bc:d3:05:a9:
88:c9:6e:2e:50:a7:b0:03:4d:bc:84:26:29:3d:3a:fc:c6:33:
da:e1:7b:72:59:a6:f0:55:e8:50:4e:53:fd:5b:d7:cf:d5:b1:
37:4e:eb:b4:e9:6c:aa:e3:c6:4d:4a:87:ae:04:c3:fc:d4:1d:
3a:84:64:db:be:a3:dc:a3:55:c9:7b:dd:ed:95:76:dd:4f:c6:
72:62:70:ce:b2:29:d9:25:f9:55:fa:0f:0c:3c:6e:cf:dd:27:
d5:33:e8:6b:98:8d:54:f7:7e:1a:62:20:b8:71:ee:27:6f:a9:
76:45:76:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S0225MGTZ7SWQpaRwOz7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm
NDAxMzYwHhcNMjYwNjI5MTAwMTEzWhcNMjYwNjMwMTAwMTEzWjAzMTEwLwYDVQQD
EyhjM2RhMGY2ZmU3NWU2OTg1OGQ3YTA4M2FlZjQ2ODcyYzcxM2ViNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUsOsmckV/uQ3CzenMldnPzc6Qre
48JZOeDowBRT+IckgYIopPQCsySkDv7twnswTwPSqyu+8lumPsViv4cYuxeSAhU5
3BX3MoI3qRHxaPPR1Js0aCAMdAbBwnbZ19Ah3TA7cJ/ekbnaecR1KJexreQjuO9m
u8IXC52BUvInPfo+G66XUnjnpfidilfZWbalZSDr19cRtUctiCDBhvhneHH6avSA
U6jkmwV6HLL0WUfe26IuR6Egi1HmX/Vh/LDbrGYXrhro2GXmkxROlw7pS8Sk7xxV
JI2GoSTAW1akyVuTkrSsZNlaG2hbmkqCgf9/0eCQ0We7CwAKDW+yxDACvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPaD2/nXmmFjXoIOu9GhyxxPrSRMB8GA1UdIwQY
MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt
ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1
LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAti+hejrR
LFdO6rDSlE2tg+VYfQiWgnIMkMLDvJuHRJBxudxowWs2jHnruAK2HgS+jO/ey8EZ
DbkV6LCzSDTf5mvHOymxoxwhvL16ps6tWSoCAdrG0bPmYYRuxJoTTkvKbICVJYwY
B1fv/KuSoTHnXOZna4mImmLWCRDrzltsKE3G/aoVjm0G6ttgmVO80wWpiMluLlCn
sANNvIQmKT06/MYz2uF7clmm8FXoUE5T/VvXz9WxN07rtOlsquPGTUqHrgTD/NQd
OoRk276j3KNVyXvd7ZV23U/GcmJwzrIp2SX5VfoPDDxuz90n1TPoa5iNVPd+GmIg
uHHuJ2+pdkV22A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:33:10 2026 by rpki-client