Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: vdUhtqwSUirq7wbiPNmf0Lqp4P5sUD/meW/ENiZAyhU=
Subject key identifier: A1:CE:12:CC:A4:4A:C3:86:6E:F4:6B:0B:72:38:EF:6B:F4:AB:AC:E9
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019EC36E2E11FBB3DD00930FD355D02BE445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 1400
Signing time: Sun 14 Jun 2026 00:00:38 +0000
Manifest this update: Sun 14 Jun 2026 00:00:38 +0000
Manifest next update: Mon 15 Jun 2026 00:00:38 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: mud2ai9WPLK3mlJkECnEm0JohGFmVUO45MlAs5dJ/Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:2e:11:fb:b3:dd:00:93:0f:d3:55:d0:2b:e4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jun 14 00:00:38 2026 GMT
Not After : Jun 15 00:00:38 2026 GMT
Subject: CN=a1ce12cca44ac3866ef46b0b7238ef6bf4abace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:86:4d:b5:51:36:1f:a9:d1:b8:74:9e:00:
4f:c9:9a:2e:34:3a:16:88:41:32:13:21:f2:3e:44:
23:69:0c:fd:1c:be:bc:3e:ca:43:4b:bf:8a:d4:88:
dd:d4:fe:b6:66:a1:de:a6:ef:eb:83:f0:44:b1:77:
c9:10:27:6f:18:93:96:f7:8f:7a:b4:4b:40:e9:21:
f0:89:c6:50:a4:06:0f:d0:02:8a:35:5a:76:16:ac:
b0:ce:d2:68:7e:27:a3:21:7b:79:c9:bf:bd:0f:02:
58:b7:32:da:06:19:39:80:5e:97:6e:0f:87:f6:95:
c8:78:e2:e3:0f:91:5f:01:ad:9c:30:58:aa:d4:ac:
fe:a4:58:76:89:e7:2b:91:00:e4:0c:ad:80:aa:e3:
85:03:54:75:49:6a:b7:e6:88:af:ae:09:a0:e1:92:
12:02:d0:ed:32:12:12:50:68:73:5e:f8:09:dc:14:
3f:ab:43:73:95:c2:8f:2d:de:61:e6:a5:d5:25:40:
66:8e:42:1a:a8:06:11:3b:91:21:48:be:6a:ba:09:
82:38:4d:a8:6b:d7:7a:18:10:bd:bd:c8:ba:28:a9:
b4:13:70:b8:6e:74:1f:da:42:82:e9:ee:5d:85:d5:
8f:eb:43:03:87:ae:ab:62:b3:b1:fb:2f:21:f5:b1:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:12:CC:A4:4A:C3:86:6E:F4:6B:0B:72:38:EF:6B:F4:AB:AC:E9
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:04:89:0e:dd:a7:48:87:af:c5:71:83:31:fc:4d:76:98:13:
00:ba:07:a3:cf:40:70:65:3a:d1:2e:5f:0c:61:29:e9:9c:45:
30:ed:f9:87:bb:b8:6a:cd:1b:68:4e:28:29:26:a2:b2:68:b1:
ec:b7:9d:75:c2:64:cf:d2:5e:4c:be:98:2f:88:5e:35:8d:3e:
66:44:12:c9:80:fe:fb:04:76:50:ec:da:b2:86:ae:f0:4d:87:
ca:43:51:e7:39:f4:40:55:b8:05:3e:ed:14:78:f0:e2:3f:20:
51:ed:c2:e3:b5:7c:bc:3a:f7:4e:53:d8:79:35:38:05:fc:51:
c2:fa:ed:5c:88:e4:bf:02:c7:d5:38:13:c0:fb:5e:3b:d2:d4:
46:3c:23:fb:d9:2e:99:8b:92:77:ee:18:53:7b:57:1d:4c:5c:
b9:0c:56:27:bd:17:67:82:63:a5:56:ea:f4:b7:e0:03:53:e7:
0d:1d:b0:b2:d5:b0:06:cf:b1:99:5f:e0:1f:82:f5:ad:48:54:
d5:93:c4:24:34:0b:7b:63:62:03:4b:1a:37:0b:91:25:80:9f:
39:e3:bc:b1:6f:fb:99:94:d3:c9:8c:43:af:32:81:3e:19:31:
22:15:4e:16:97:29:16:1e:f5:71:1c:1d:43:a2:13:17:2e:fd:
9b:45:67:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Dbi4R+7PdAJMP01XQK+RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjYwNjE0MDAwMDM4WhcNMjYwNjE1MDAwMDM4WjAzMTEwLwYDVQQD
EyhhMWNlMTJjY2E0NGFjMzg2NmVmNDZiMGI3MjM4ZWY2YmY0YWJhY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6++GTbVRNh+p0bh0ngBPyZouNDoW
iEEyEyHyPkQjaQz9HL68PspDS7+K1Ijd1P62ZqHepu/rg/BEsXfJECdvGJOW9496
tEtA6SHwicZQpAYP0AKKNVp2FqywztJofiejIXt5yb+9DwJYtzLaBhk5gF6Xbg+H
9pXIeOLjD5FfAa2cMFiq1Kz+pFh2iecrkQDkDK2AquOFA1R1SWq35oivrgmg4ZIS
AtDtMhISUGhzXvgJ3BQ/q0NzlcKPLd5h5qXVJUBmjkIaqAYRO5EhSL5qugmCOE2o
a9d6GBC9vci6KKm0E3C4bnQf2kKC6e5dhdWP60MDh66rYrOx+y8h9bEMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHOEsykSsOGbvRrC3I472v0q6zpMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANASJDt2n
SIevxXGDMfxNdpgTALoHo89AcGU60S5fDGEp6ZxFMO35h7u4as0baE4oKSaismix
7LeddcJkz9JeTL6YL4heNY0+ZkQSyYD++wR2UOzasoau8E2HykNR5zn0QFW4BT7t
FHjw4j8gUe3C47V8vDr3TlPYeTU4BfxRwvrtXIjkvwLH1TgTwPteO9LURjwj+9ku
mYuSd+4YU3tXHUxcuQxWJ70XZ4JjpVbq9LfgA1PnDR2wstWwBs+xmV/gH4L1rUhU
1ZPEJDQLe2NiA0saNwuRJYCfOeO8sW/7mZTTyYxDrzKBPhkxIhVOFpcpFh71cRwd
Q6ITFy79m0Vnmw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:42:46 2026 by rpki-client