Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: tIL90AAaSYx5jVnOT3kZm4ccyIBGr+X/THHebUsOlak=
Subject key identifier: 09:B7:07:47:1D:4C:BC:10:3C:F0:C1:08:B0:7E:F5:0B:FA:A0:67:98
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019EC17FAE63107630265CC0BFC4708EFA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1967
Signing time: Sat 13 Jun 2026 15:00:30 +0000
Manifest this update: Sat 13 Jun 2026 15:00:30 +0000
Manifest next update: Sun 14 Jun 2026 15:00:30 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: 75Ejl2xmr9hVim1PmzC/lWRs+z/y7Aqn6dp39kwxtzI=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:ae:63:10:76:30:26:5c:c0:bf:c4:70:8e:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jun 13 15:00:30 2026 GMT
Not After : Jun 14 15:00:30 2026 GMT
Subject: CN=09b707471d4cbc103cf0c108b07ef50bfaa06798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:09:cc:ac:58:5d:bd:ee:cf:64:e0:91:da:
4c:2d:bf:65:68:d8:f0:2b:e1:c1:0d:7a:06:a7:9d:
ff:52:54:7d:50:6d:e6:6a:9b:01:eb:ed:86:c1:0f:
39:64:cf:c9:cf:71:e7:38:60:f9:92:90:40:d1:6a:
c2:db:9a:73:2a:25:1f:86:44:ee:5f:53:25:6a:16:
f1:2f:1b:97:dc:31:1f:88:c7:75:e5:08:a8:fd:6f:
e5:fd:0c:4b:eb:34:5e:a9:25:4d:6f:e7:af:d3:93:
7e:a3:7d:be:dd:23:ad:48:c0:fd:a9:1e:c3:e3:b2:
29:d2:7b:0b:47:49:7e:9d:fe:61:dd:6a:a9:b4:60:
55:02:90:8c:0b:a9:53:7b:81:5a:7e:31:dc:64:b6:
0f:06:91:79:f9:e3:5a:04:94:15:30:44:fc:60:12:
35:d0:97:92:bc:16:2d:9a:99:7f:b0:a5:fc:a6:c7:
17:d9:89:6c:fc:de:4b:97:e3:62:1c:57:2c:89:57:
d0:ca:88:dc:a7:a9:0e:b5:9f:8c:af:22:71:66:b9:
ca:4b:49:9a:b1:a6:3d:d2:c7:70:f4:c5:4c:f4:09:
93:57:10:13:40:0c:fd:13:d1:f3:b9:15:87:5b:14:
7d:84:b5:ea:36:ae:bf:4f:8e:df:ce:a7:ce:9a:6c:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B7:07:47:1D:4C:BC:10:3C:F0:C1:08:B0:7E:F5:0B:FA:A0:67:98
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:e4:aa:fa:c4:03:5c:4a:28:d9:22:30:a8:bb:a7:94:e7:
09:4c:55:aa:ef:3f:1b:d3:b0:7f:9e:e1:ee:17:11:d6:fa:7e:
7f:5d:4d:9f:11:83:04:79:04:4a:54:cf:6b:f8:11:67:ce:5e:
ec:7c:ad:1b:5a:f5:a6:d8:c5:41:39:11:32:8c:b9:b5:ad:3c:
61:0f:80:71:a8:8e:26:10:6f:e1:be:d6:b3:5a:96:30:97:ea:
fc:34:37:fc:fb:61:6e:5e:fc:4c:75:40:fe:ca:e2:e4:9e:ce:
56:05:ad:75:59:14:9f:48:72:54:85:47:14:fd:4f:66:60:11:
6a:a9:9c:fd:67:84:a0:7a:19:04:be:d2:7d:69:f1:3c:16:e8:
63:a9:63:17:0a:bc:ad:05:7f:a6:87:c3:1d:f9:e1:d9:5d:02:
4d:66:ff:98:ca:e1:ca:3a:5b:5a:ea:55:49:8b:91:46:02:be:
d9:14:43:2d:dc:da:18:aa:4b:67:49:f3:3e:01:34:46:69:61:
89:1c:c6:34:94:5c:58:1c:62:97:48:26:f6:9e:c9:67:43:7b:
07:72:a0:fe:ce:cb:48:a4:33:18:9b:3d:c4:5e:a0:7a:98:da:
89:f9:7b:5f:0c:79:ad:b5:ae:66:ce:59:2e:a5:bb:f8:b3:b3:
dc:da:b4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf65jEHYwJlzAv8RwjvotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj
Y2U3NzkwHhcNMjYwNjEzMTUwMDMwWhcNMjYwNjE0MTUwMDMwWjAzMTEwLwYDVQQD
EygwOWI3MDc0NzFkNGNiYzEwM2NmMGMxMDhiMDdlZjUwYmZhYTA2Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknQJzKxYXb3uz2TgkdpMLb9laNjw
K+HBDXoGp53/UlR9UG3mapsB6+2GwQ85ZM/Jz3HnOGD5kpBA0WrC25pzKiUfhkTu
X1MlahbxLxuX3DEfiMd15Qio/W/l/QxL6zReqSVNb+ev05N+o32+3SOtSMD9qR7D
47Ip0nsLR0l+nf5h3WqptGBVApCMC6lTe4FafjHcZLYPBpF5+eNaBJQVMET8YBI1
0JeSvBYtmpl/sKX8pscX2Yls/N5Ll+NiHFcsiVfQyojcp6kOtZ+MryJxZrnKS0ma
saY90sdw9MVM9AmTVxATQAz9E9HzuRWHWxR9hLXqNq6/T47fzqfOmmx0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm3B0cdTLwQPPDBCLB+9Qv6oGeYMB8GA1UdIwQY
MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt
ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh
LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhbkqvrE
A1xKKNkiMKi7p5TnCUxVqu8/G9Owf57h7hcR1vp+f11NnxGDBHkESlTPa/gRZ85e
7HytG1r1ptjFQTkRMoy5ta08YQ+AcaiOJhBv4b7Ws1qWMJfq/DQ3/Pthbl78THVA
/sri5J7OVgWtdVkUn0hyVIVHFP1PZmARaqmc/WeEoHoZBL7SfWnxPBboY6ljFwq8
rQV/pofDHfnh2V0CTWb/mMrhyjpbWupVSYuRRgK+2RRDLdzaGKpLZ0nzPgE0Rmlh
iRzGNJRcWBxil0gm9p7JZ0N7B3Kg/s7LSKQzGJs9xF6gepjaifl7Xwx5rbWuZs5Z
LqW7+LOz3Nq0kQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:56 2026 by rpki-client