Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: WtWK3fK+DlKHt5h2bE2K+rwhZkx0wBFEglLErgoLR54=
Subject key identifier: D1:C9:15:6B:4B:DE:1E:83:DF:B7:7B:9E:AE:9D:65:B2:04:EB:E2:90
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019ED5070901D9166F0294EA88BDD1471EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 19E9
Signing time: Wed 17 Jun 2026 10:01:08 +0000
Manifest this update: Wed 17 Jun 2026 10:01:08 +0000
Manifest next update: Thu 18 Jun 2026 10:01:08 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: 1Xmvo8lipXUIBUKE9xPh1nJbUl7AxWjjkLFgLabdPqY=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:09:01:d9:16:6f:02:94:ea:88:bd:d1:47:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 17 10:01:08 2026 GMT
Not After : Jun 18 10:01:08 2026 GMT
Subject: CN=d1c9156b4bde1e83dfb77b9eae9d65b204ebe290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:ac:c8:3f:69:21:9e:f1:d5:44:ab:b0:aa:
44:9f:d8:c0:bb:96:72:45:bd:ae:e0:e7:a7:9f:a9:
f0:9a:4b:c2:d3:b2:d2:14:b8:70:f6:fe:98:7d:83:
dd:16:e7:55:32:a3:bd:46:d6:13:80:c8:e0:98:c0:
dd:9e:32:9a:02:6e:d2:48:50:84:6f:5b:27:47:1c:
8d:e7:eb:a0:90:22:c8:15:e4:a6:80:6c:19:69:d6:
01:b8:e3:13:26:cf:42:c9:9c:d1:3a:86:a6:61:5d:
6d:5f:9b:cd:e5:12:cc:8f:20:e2:e3:aa:e7:38:1b:
b7:ca:cb:25:1c:81:65:74:f4:0a:02:4d:82:da:0a:
28:b7:ef:a9:04:4a:08:20:0b:53:25:72:67:58:d9:
32:c4:95:f5:92:61:b5:8a:e6:20:0a:6c:7e:f6:c8:
5a:5f:3c:a4:19:45:7a:99:c2:f3:77:f3:e3:d3:90:
26:56:8a:5d:aa:1f:eb:70:c6:e4:61:38:8a:f2:78:
24:9c:e5:d5:54:19:3a:32:49:b1:79:14:b0:01:3e:
50:87:f9:ce:f2:6a:74:4c:07:ba:76:8e:ee:ce:7d:
14:69:28:07:88:c2:ca:96:ad:b8:83:48:ee:07:64:
f5:34:8f:68:7d:8f:51:14:21:db:d4:ef:e9:ac:e7:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:15:6B:4B:DE:1E:83:DF:B7:7B:9E:AE:9D:65:B2:04:EB:E2:90
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:1f:9d:26:f8:39:96:24:c7:79:bd:55:54:27:6c:97:e2:
12:b3:46:9c:80:11:81:e2:12:00:dc:78:a4:81:77:a3:04:13:
76:ae:56:33:57:63:78:a4:c9:48:ff:56:9e:1b:cd:78:c5:6a:
eb:21:ac:0c:66:af:38:d2:fc:fe:48:35:5b:b4:13:d2:dd:e9:
51:29:68:3f:4d:b1:fd:ee:eb:cd:94:c4:f4:2c:05:89:cc:25:
88:1d:e3:2d:fe:b4:8c:96:ff:22:c9:3c:22:58:39:0f:9a:db:
f8:6c:c0:9d:44:50:e8:8f:d0:b6:4b:d7:aa:92:42:25:38:7a:
5e:d6:4c:da:02:51:64:4f:33:09:b9:74:ed:fd:22:25:fd:ff:
3a:89:fb:26:cd:b7:cf:f8:60:0b:0f:b8:f0:70:f0:7e:dc:9f:
09:f4:36:f3:60:d8:43:1d:26:d5:8b:33:64:1b:25:64:eb:7a:
1c:9c:b5:6c:53:74:78:49:79:50:1b:89:3e:4d:0a:aa:1c:32:
6f:21:bf:48:fe:bd:6d:6b:00:e0:a2:8d:00:5c:a9:26:8a:a0:
21:fe:a6:7d:90:c4:dc:f2:3c:23:b2:db:fe:7c:ea:03:54:02:
d0:ad:0c:3b:4c:85:bd:a1:39:34:25:dd:2f:8f:95:a3:0e:39:
8e:cf:7e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VBwkB2RZvApTqiL3RRx7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjYwNjE3MTAwMTA4WhcNMjYwNjE4MTAwMTA4WjAzMTEwLwYDVQQD
EyhkMWM5MTU2YjRiZGUxZTgzZGZiNzdiOWVhZTlkNjViMjA0ZWJlMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRqsyD9pIZ7x1USrsKpEn9jAu5Zy
Rb2u4Oenn6nwmkvC07LSFLhw9v6YfYPdFudVMqO9RtYTgMjgmMDdnjKaAm7SSFCE
b1snRxyN5+ugkCLIFeSmgGwZadYBuOMTJs9CyZzROoamYV1tX5vN5RLMjyDi46rn
OBu3ysslHIFldPQKAk2C2goot++pBEoIIAtTJXJnWNkyxJX1kmG1iuYgCmx+9sha
XzykGUV6mcLzd/Pj05AmVopdqh/rcMbkYTiK8ngknOXVVBk6MkmxeRSwAT5Qh/nO
8mp0TAe6do7uzn0UaSgHiMLKlq24g0juB2T1NI9ofY9RFCHb1O/prOdZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHJFWtL3h6D37d7nq6dZbIE6+KQMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwofnSb4
OZYkx3m9VVQnbJfiErNGnIARgeISANx4pIF3owQTdq5WM1djeKTJSP9WnhvNeMVq
6yGsDGavONL8/kg1W7QT0t3pUSloP02x/e7rzZTE9CwFicwliB3jLf60jJb/Isk8
Ilg5D5rb+GzAnURQ6I/QtkvXqpJCJTh6XtZM2gJRZE8zCbl07f0iJf3/Oon7Js23
z/hgCw+48HDwftyfCfQ282DYQx0m1YszZBslZOt6HJy1bFN0eEl5UBuJPk0Kqhwy
byG/SP69bWsA4KKNAFypJoqgIf6mfZDE3PI8I7Lb/nzqA1QC0K0MO0yFvaE5NCXd
L4+Vow45js9+ZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 16:49:33 2026 by rpki-client