Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: jgYNp0zffMFSPHej69H8uxICzU5/QsPdKuzZPQW4iw8=
Subject key identifier: 85:09:35:8B:99:84:06:C9:0D:C7:DA:6D:5A:C0:52:7A:3E:A5:EB:DD
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019ED42B829AB9618F2B716C6BC7CDED63E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 084D
Signing time: Wed 17 Jun 2026 06:01:21 +0000
Manifest this update: Wed 17 Jun 2026 06:01:21 +0000
Manifest next update: Thu 18 Jun 2026 06:01:21 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: prQuGotX/nF9ZNbimQeCYwGEuTIVwZJkOkSC56e1HSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:82:9a:b9:61:8f:2b:71:6c:6b:c7:cd:ed:63:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Jun 17 06:01:21 2026 GMT
Not After : Jun 18 06:01:21 2026 GMT
Subject: CN=8509358b998406c90dc7da6d5ac0527a3ea5ebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:06:d1:a8:ee:b3:7b:07:51:1c:7d:09:8f:
64:75:54:25:df:1a:a7:f3:aa:2c:ea:33:27:f5:b3:
b0:27:ae:d5:4b:9c:54:53:5e:f8:ae:2f:29:18:7f:
ef:71:4e:83:1b:f7:75:0c:ce:58:d6:cd:37:14:0f:
c2:89:e2:4d:af:1b:18:50:b5:76:4c:c4:0d:fa:2a:
6c:57:b4:79:7a:9d:a9:1c:e9:1f:8f:c0:0d:96:86:
6d:a9:f6:50:bd:17:f8:c0:95:c8:3d:bf:55:21:70:
be:db:04:da:51:d4:d2:fc:b3:99:16:4d:19:73:cf:
15:29:c0:f0:5a:e9:b9:f1:50:de:e5:d6:e7:dd:11:
17:ce:34:39:43:60:ae:85:f9:c4:42:f9:38:37:c6:
e1:42:c1:f8:e0:8a:1e:a7:44:a7:19:0c:3e:53:12:
ec:37:63:c4:3b:20:67:79:57:7f:fd:74:c6:ae:88:
8b:62:0a:9b:59:ed:00:ee:d2:7a:46:2f:36:0a:82:
47:77:ff:29:9d:ee:41:ba:3b:da:1b:63:05:a4:a1:
be:4c:88:27:af:09:7c:b6:cc:54:0c:a7:b4:5f:d6:
d0:44:fe:36:9b:4e:c4:03:39:bb:55:ae:6e:6f:0a:
37:03:ec:75:63:bc:99:2c:fb:38:d5:47:72:5f:42:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:35:8B:99:84:06:C9:0D:C7:DA:6D:5A:C0:52:7A:3E:A5:EB:DD
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:ad:72:c6:01:29:55:44:cb:43:22:5d:8e:a4:ba:79:b8:
90:06:21:43:c7:d0:66:04:43:d2:b8:49:ad:7e:ee:44:5f:36:
7f:e2:73:81:36:15:eb:b4:4e:5f:78:ef:a8:8d:a8:f0:df:77:
5d:3e:09:4b:9e:7f:53:b7:24:ae:17:71:56:19:09:91:6f:d6:
2f:e9:dc:de:6a:cc:39:dd:0c:9f:34:a2:38:c0:5c:bc:f3:6f:
e6:5f:cb:b3:aa:5d:e2:11:dd:72:80:fc:59:87:f1:52:19:77:
ee:4b:3c:db:4d:5b:3e:4c:cf:27:34:00:3b:c6:8f:08:ce:46:
e6:50:43:2c:93:07:12:c5:d3:f8:db:16:e1:82:93:f7:7e:ac:
da:22:9e:f6:33:fd:e0:c8:d6:49:59:96:ae:55:fe:e7:a3:f0:
5b:fe:9a:62:2d:47:a8:a2:78:95:d3:79:be:68:64:ca:fa:72:
5d:8f:01:63:7d:83:0e:a4:10:a9:5f:72:52:97:29:b1:0a:3a:
c6:fd:be:29:14:3b:10:f1:67:2a:3d:72:e5:fe:dd:22:ed:7f:
a1:05:f8:40:14:4b:26:77:e4:1c:9e:61:54:2c:98:4a:66:5e:
c8:e0:bc:c1:f6:75:3a:c4:ff:b9:66:29:40:c7:f0:5d:ee:90:
fc:3f:6a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK4KauWGPK3Fsa8fN7WPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjYwNjE3MDYwMTIxWhcNMjYwNjE4MDYwMTIxWjAzMTEwLwYDVQQD
Eyg4NTA5MzU4Yjk5ODQwNmM5MGRjN2RhNmQ1YWMwNTI3YTNlYTVlYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKwG0ajus3sHURx9CY9kdVQl3xqn
86os6jMn9bOwJ67VS5xUU174ri8pGH/vcU6DG/d1DM5Y1s03FA/CieJNrxsYULV2
TMQN+ipsV7R5ep2pHOkfj8ANloZtqfZQvRf4wJXIPb9VIXC+2wTaUdTS/LOZFk0Z
c88VKcDwWum58VDe5dbn3REXzjQ5Q2CuhfnEQvk4N8bhQsH44Ioep0SnGQw+UxLs
N2PEOyBneVd//XTGroiLYgqbWe0A7tJ6Ri82CoJHd/8pne5BujvaG2MFpKG+TIgn
rwl8tsxUDKe0X9bQRP42m07EAzm7Va5ubwo3A+x1Y7yZLPs41UdyX0JCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUJNYuZhAbJDcfabVrAUno+pevdMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQytcsYB
KVVEy0MiXY6kunm4kAYhQ8fQZgRD0rhJrX7uRF82f+JzgTYV67ROX3jvqI2o8N93
XT4JS55/U7ckrhdxVhkJkW/WL+nc3mrMOd0MnzSiOMBcvPNv5l/Ls6pd4hHdcoD8
WYfxUhl37ks8201bPkzPJzQAO8aPCM5G5lBDLJMHEsXT+NsW4YKT936s2iKe9jP9
4MjWSVmWrlX+56PwW/6aYi1HqKJ4ldN5vmhkyvpyXY8BY32DDqQQqV9yUpcpsQo6
xv2+KRQ7EPFnKj1y5f7dIu1/oQX4QBRLJnfkHJ5hVCyYSmZeyOC8wfZ1OsT/uWYp
QMfwXe6Q/D9qhg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:49:01 2026 by rpki-client