Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: 1cT1OQUIFtwpdddNUxx6VUIcEhYPtU+R1ZjJJbGWdPI=
Subject key identifier: C1:7D:53:41:B5:87:AA:40:F3:39:A8:07:22:0E:F2:F4:9B:E9:F1:6A
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019EC480DC73FEF4BDD890B2C145D2BAD33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0C2A
Signing time: Sun 14 Jun 2026 05:00:39 +0000
Manifest this update: Sun 14 Jun 2026 05:00:39 +0000
Manifest next update: Mon 15 Jun 2026 05:00:39 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: wMbnWRvpZRLNMEgxZadDEq/p0A5ODZtpaCXz6Hxv/ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:dc:73:fe:f4:bd:d8:90:b2:c1:45:d2:ba:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jun 14 05:00:39 2026 GMT
Not After : Jun 15 05:00:39 2026 GMT
Subject: CN=c17d5341b587aa40f339a807220ef2f49be9f16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:24:74:63:45:e5:49:80:13:b6:cb:7a:56:
1e:ae:92:71:93:3c:77:5f:7f:aa:a7:73:f5:84:36:
dd:9f:05:d0:50:a2:57:eb:5a:f8:23:a0:3d:f4:ee:
ff:6f:26:bc:20:92:a2:07:61:5c:40:d5:b9:35:5e:
de:cf:1c:d6:37:fb:ab:a0:17:87:57:1c:d1:46:07:
a4:fe:e4:57:11:7a:a4:54:2b:da:09:99:b0:60:6c:
7e:0b:ca:e7:9c:ec:d2:38:fe:69:01:7b:6a:f0:f8:
54:6c:f8:8a:7c:1e:cb:a5:7d:ba:56:4d:72:62:04:
1d:09:a3:50:46:fb:6a:2f:76:17:6b:d4:5f:c6:a7:
d6:d7:15:bb:a7:d0:37:83:dc:e3:dc:cb:6f:3b:23:
b4:16:fd:9a:d1:ee:2d:74:a0:1b:af:0c:64:dd:68:
cd:bb:15:7b:33:d0:84:ba:3e:f8:39:c3:16:a3:96:
82:c3:aa:d2:d0:cf:ae:88:cb:d5:85:10:f0:2f:46:
48:ab:5d:18:b0:37:18:f0:44:ca:58:e8:b6:7f:a6:
2b:8e:e7:6d:81:ac:9b:25:09:d0:27:bd:99:d3:71:
b8:5a:33:3f:b5:a6:1a:d5:ff:6c:a2:ae:88:77:37:
87:dc:1d:cc:13:86:c4:42:12:64:d3:16:0d:85:ba:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:53:41:B5:87:AA:40:F3:39:A8:07:22:0E:F2:F4:9B:E9:F1:6A
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:d4:b9:39:8c:9b:a3:43:47:f6:5b:66:75:1e:a5:24:28:
06:30:1a:30:5e:e4:2c:9b:08:fc:20:5d:ec:dd:82:bb:20:4a:
9c:07:b5:2a:8a:e5:99:07:fc:8f:6b:e0:9f:27:fc:e2:bc:7c:
52:d2:7c:06:ec:dd:bf:f4:f4:01:91:21:d2:06:40:3d:fa:9b:
02:6c:62:e3:34:89:bd:a2:fd:62:47:cd:79:f6:ff:1f:55:16:
a3:f1:77:13:18:12:2f:ed:7e:cf:9f:06:f9:fd:5b:ac:73:ce:
82:c8:bf:9e:8f:2e:eb:f0:00:f0:8c:9d:82:b8:12:03:8d:59:
b5:74:a7:55:c8:b9:1a:21:00:66:cc:46:79:3a:7d:c1:15:7b:
b0:52:9e:81:e4:3f:84:14:bf:5a:6a:4d:72:74:bd:7e:77:a9:
c7:fd:37:3b:26:39:d8:8c:8d:20:f9:0d:46:5f:d1:2f:a9:e2:
f6:45:19:12:30:c4:7e:0a:44:42:67:84:89:4e:c3:69:49:d2:
6d:8a:30:95:fa:c4:15:3a:f3:7f:10:e0:be:62:a7:2c:c7:a0:
53:6d:1f:fc:3e:c2:2c:41:15:4b:e8:2d:d7:f2:59:0c:4a:fa:
97:6a:1e:ce:d8:5d:53:6a:50:f3:c8:0b:c1:0e:41:64:3f:40:
7d:43:82:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EgNxz/vS92JCywUXSutM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx
N2E1YTQwHhcNMjYwNjE0MDUwMDM5WhcNMjYwNjE1MDUwMDM5WjAzMTEwLwYDVQQD
EyhjMTdkNTM0MWI1ODdhYTQwZjMzOWE4MDcyMjBlZjJmNDliZTlmMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr88kdGNF5UmAE7bLelYerpJxkzx3
X3+qp3P1hDbdnwXQUKJX61r4I6A99O7/bya8IJKiB2FcQNW5NV7ezxzWN/uroBeH
VxzRRgek/uRXEXqkVCvaCZmwYGx+C8rnnOzSOP5pAXtq8PhUbPiKfB7LpX26Vk1y
YgQdCaNQRvtqL3YXa9RfxqfW1xW7p9A3g9zj3MtvOyO0Fv2a0e4tdKAbrwxk3WjN
uxV7M9CEuj74OcMWo5aCw6rS0M+uiMvVhRDwL0ZIq10YsDcY8ETKWOi2f6Yrjudt
gaybJQnQJ72Z03G4WjM/taYa1f9soq6IdzeH3B3ME4bEQhJk0xYNhbrpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF9U0G1h6pA8zmoByIO8vSb6fFqMB8GA1UdIwQY
MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt
NDI5OTUzMjNjMDNkLzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk
LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizbUuTmM
m6NDR/ZbZnUepSQoBjAaMF7kLJsI/CBd7N2CuyBKnAe1KorlmQf8j2vgnyf84rx8
UtJ8Buzdv/T0AZEh0gZAPfqbAmxi4zSJvaL9YkfNefb/H1UWo/F3ExgSL+1+z58G
+f1brHPOgsi/no8u6/AA8IydgrgSA41ZtXSnVci5GiEAZsxGeTp9wRV7sFKegeQ/
hBS/WmpNcnS9fnepx/03OyY52IyNIPkNRl/RL6ni9kUZEjDEfgpEQmeEiU7DaUnS
bYowlfrEFTrzfxDgvmKnLMegU20f/D7CLEEVS+gt1/JZDEr6l2oezthdU2pQ88gL
wQ5BZD9AfUOCxQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:56 2026 by rpki-client