Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: +85w10IERGMbLZ7tWBoqnHMureEn5kcfcPJO72oRsTY=
Subject key identifier: BD:F8:EE:F9:49:F9:2C:B9:EF:81:35:A6:8B:26:E4:79:E2:23:4C:B8
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019EBF91A8D81603BBA15E6EC8C7C2C7C746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 06:00:54 +0000
Manifest this update: Sat 13 Jun 2026 06:00:54 +0000
Manifest next update: Sun 14 Jun 2026 06:00:54 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: QnURsJJUx+s9pJ75waNqU38HDuWttWo/bhhiaSB9UPc=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a8:d8:16:03:bb:a1:5e:6e:c8:c7:c2:c7:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 13 06:00:54 2026 GMT
Not After : Jun 14 06:00:54 2026 GMT
Subject: CN=bdf8eef949f92cb9ef8135a68b26e479e2234cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:e2:95:f6:ca:73:91:30:e1:10:50:32:d3:
c7:a5:0a:ed:10:a1:60:b7:e5:41:7a:49:bb:8f:c8:
b8:4b:0a:1d:50:89:a2:98:27:40:b2:8f:4e:6c:d3:
b9:4a:55:41:77:dc:c9:48:8b:9e:a8:5e:0e:91:7b:
bd:4d:25:a5:7b:c9:ec:ae:42:40:ec:ec:1f:30:7a:
25:dd:68:39:91:be:b0:69:aa:5c:65:1b:7f:9d:7f:
2b:52:ac:13:6c:8c:7e:fc:b7:fb:4e:1e:5c:64:26:
ed:f5:40:94:7b:0a:0d:09:56:e5:7c:37:75:55:2c:
54:db:53:59:9f:7b:8e:83:0e:f9:c5:66:72:94:12:
62:d2:9c:e2:67:0e:d0:97:2d:65:18:1c:26:4a:c9:
28:cc:b7:4f:c0:eb:31:e7:f9:4d:87:cf:ce:3a:c6:
3b:71:f1:80:a7:08:f1:6c:66:8e:9d:da:99:90:01:
6e:8c:c8:ff:4b:4b:82:8a:17:b6:7d:48:c4:ac:33:
73:91:bd:9b:97:a9:04:74:cc:a6:5b:7a:7d:80:03:
45:bd:ef:7e:14:f4:11:d4:7b:77:8b:4b:c6:8f:2a:
72:20:65:a1:7e:33:a2:3b:58:af:7b:45:e9:3a:a5:
3e:38:24:59:68:b1:18:bd:f3:08:47:c7:8b:ef:79:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:EE:F9:49:F9:2C:B9:EF:81:35:A6:8B:26:E4:79:E2:23:4C:B8
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:94:7f:b4:e3:73:3f:82:91:52:25:5b:db:c9:24:87:c7:
5e:9a:66:58:7b:21:5f:84:f3:92:4c:7c:8e:00:11:2d:87:71:
36:93:e1:f6:70:f8:b4:8e:cf:94:e6:86:6f:5f:36:71:2f:a1:
98:e1:97:43:b4:12:4f:19:f6:e9:ff:8c:c8:d2:c9:6d:1b:93:
0d:95:93:72:a0:02:22:e6:ad:90:63:93:63:83:14:73:96:10:
68:0b:28:32:76:6a:ee:1f:12:e6:68:17:88:2e:fa:89:21:20:
c7:d8:eb:06:2a:97:d6:1d:bb:01:e8:9d:5a:b6:fa:99:87:74:
11:a8:ea:bf:06:14:40:eb:52:c6:b3:01:14:d5:dc:fc:f2:2b:
17:e1:a1:08:12:6e:13:58:40:dd:8b:1a:72:98:f7:66:cb:c6:
78:b6:7d:aa:56:26:ca:c3:3d:f5:a2:22:a8:75:65:b4:a5:82:
b9:a5:0a:9e:e6:9e:25:9b:a0:2f:74:be:ea:9b:85:4a:b9:04:
f2:48:33:74:01:31:50:d6:9b:45:3c:7c:49:17:c0:1a:7c:c5:
df:b5:62:20:25:c6:1c:c9:e6:7b:b8:1e:78:7b:78:5f:21:42:
a9:fb:06:64:03:f0:59:c3:a6:fd:6e:33:35:33:7b:4e:7f:75:
00:0e:85:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kajYFgO7oV5uyMfCx8dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjYwNjEzMDYwMDU0WhcNMjYwNjE0MDYwMDU0WjAzMTEwLwYDVQQD
EyhiZGY4ZWVmOTQ5ZjkyY2I5ZWY4MTM1YTY4YjI2ZTQ3OWUyMjM0Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwrilfbKc5Ew4RBQMtPHpQrtEKFg
t+VBekm7j8i4SwodUImimCdAso9ObNO5SlVBd9zJSIueqF4OkXu9TSWle8nsrkJA
7OwfMHol3Wg5kb6waapcZRt/nX8rUqwTbIx+/Lf7Th5cZCbt9UCUewoNCVblfDd1
VSxU21NZn3uOgw75xWZylBJi0pziZw7Qly1lGBwmSskozLdPwOsx5/lNh8/OOsY7
cfGApwjxbGaOndqZkAFujMj/S0uCihe2fUjErDNzkb2bl6kEdMymW3p9gANFve9+
FPQR1Ht3i0vGjypyIGWhfjOiO1ive0XpOqU+OCRZaLEYvfMIR8eL73myoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL347vlJ+Sy574E1posm5HniI0y4MB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZWUf7Tj
cz+CkVIlW9vJJIfHXppmWHshX4Tzkkx8jgARLYdxNpPh9nD4tI7PlOaGb182cS+h
mOGXQ7QSTxn26f+MyNLJbRuTDZWTcqACIuatkGOTY4MUc5YQaAsoMnZq7h8S5mgX
iC76iSEgx9jrBiqX1h27AeidWrb6mYd0EajqvwYUQOtSxrMBFNXc/PIrF+GhCBJu
E1hA3Ysacpj3ZsvGeLZ9qlYmysM99aIiqHVltKWCuaUKnuaeJZugL3S+6puFSrkE
8kgzdAExUNabRTx8SRfAGnzF37ViICXGHMnme7geeHt4XyFCqfsGZAPwWcOm/W4z
NTN7Tn91AA6F6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:22 2026 by rpki-client