Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: o2fS65bBLoyMO7Z2t/gqBsG6q4bh6t00s3udobxtgw4=
Subject key identifier: 75:DF:22:A2:01:DA:FD:D9:0F:50:CC:DE:EA:64:AA:34:58:49:F6:8B
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019FAD527129FC6257B757D0E9ABC84ED89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: FA
Signing time: Wed 29 Jul 2026 10:01:28 +0000
Manifest this update: Wed 29 Jul 2026 10:01:28 +0000
Manifest next update: Thu 30 Jul 2026 10:01:28 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: 54RMv/Y9vBEgUVFMI+vYP7qu4bo1Ad0PxoOgaglLB8Y=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:71:29:fc:62:57:b7:57:d0:e9:ab:c8:4e:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Jul 29 10:01:28 2026 GMT
Not After : Jul 30 10:01:28 2026 GMT
Subject: CN=75df22a201dafdd90f50ccdeea64aa345849f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:19:67:fa:ce:46:7b:29:cd:ec:b6:88:e6:
38:ea:ea:b3:78:c8:4e:3d:ea:f5:8c:e0:d6:73:6a:
10:4a:48:fb:c4:1b:cf:59:6b:f4:a1:e7:aa:80:57:
2e:28:fe:5b:d4:20:9f:6e:22:16:e2:7a:82:07:c5:
20:6f:bd:84:a7:bc:e8:fb:cf:0e:22:bf:bc:37:ed:
c7:50:0d:2b:b5:b5:be:85:f9:64:30:92:d4:82:e4:
56:ee:5f:15:f2:1a:47:05:a9:10:df:56:10:76:00:
14:2a:1c:03:86:d4:9b:4f:c5:0d:4f:30:5e:e6:2b:
af:e8:6d:c9:63:22:96:0a:ed:77:1a:c9:e9:a5:69:
a8:9c:1b:10:dd:ff:50:07:8e:aa:a8:66:19:0d:e2:
46:e7:96:03:7a:5b:25:f0:3d:0d:89:a9:d7:52:b1:
ce:b7:f8:cf:7c:f4:de:99:7c:9b:3f:86:38:bf:e7:
9f:fd:cf:c1:0d:ad:6f:50:9f:db:c4:6b:98:50:55:
9c:78:6b:42:3e:af:32:a6:c7:19:4d:7f:2f:2e:d4:
1e:56:d0:14:24:51:ea:a3:e7:90:e3:e2:8f:a0:f7:
41:e8:93:ce:74:f2:b7:6c:8b:7d:cb:e4:71:82:c8:
f5:34:bd:d3:1c:3a:30:b6:14:03:e5:c9:de:12:ba:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:22:A2:01:DA:FD:D9:0F:50:CC:DE:EA:64:AA:34:58:49:F6:8B
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:37:89:79:56:3c:f5:0d:b1:b8:f5:4f:0e:c3:10:5b:54:
48:b0:65:97:f5:30:82:c2:52:45:13:a6:8e:af:f8:23:d7:67:
ad:dc:58:19:de:f9:03:f8:8c:aa:77:77:77:34:79:86:1a:e5:
21:a2:a7:89:d6:2c:e6:86:74:0f:e6:35:bc:02:7b:3a:98:2f:
93:60:42:da:1a:ff:77:dd:de:ba:d7:3b:01:ec:94:38:6a:ff:
3e:70:18:ad:8e:58:60:7d:7c:8e:83:c5:6b:9c:50:0d:b5:a4:
e8:f8:cc:15:94:12:ee:01:c1:d6:27:a9:cf:95:03:4f:84:f8:
24:df:58:89:e6:80:88:c6:7f:c3:54:c5:c9:84:2c:64:77:1b:
fa:a0:d1:78:9d:5a:e2:d9:0c:90:28:8b:b8:2a:fa:00:93:07:
0c:c0:47:0c:30:08:78:5a:0c:d2:d0:e0:41:e6:44:6b:ef:0b:
b2:2c:9d:2d:b2:2f:01:ff:a8:dc:9a:29:2d:7b:e7:3b:98:70:
fd:69:f8:7e:f3:6a:ee:c8:2d:dd:06:2d:7e:7e:a0:27:9f:f6:
d9:2e:20:bc:4e:1b:3d:6d:82:1e:65:3a:af:11:23:4a:6e:04:
20:ee:5e:22:49:85:59:3a:39:77:69:5e:59:48:b3:cd:63:9a:
29:9d:6d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUnEp/GJXt1fQ6avITtiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTNlNjBiZGE2NDY1ODQ4OGNlYTZhMzMwZjA1Yzc3NDlk
NWI5YzYwHhcNMjYwNzI5MTAwMTI4WhcNMjYwNzMwMTAwMTI4WjAzMTEwLwYDVQQD
Eyg3NWRmMjJhMjAxZGFmZGQ5MGY1MGNjZGVlYTY0YWEzNDU4NDlmNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUUZZ/rORnspzey2iOY46uqzeMhO
Per1jODWc2oQSkj7xBvPWWv0oeeqgFcuKP5b1CCfbiIW4nqCB8Ugb72Ep7zo+88O
Ir+8N+3HUA0rtbW+hflkMJLUguRW7l8V8hpHBakQ31YQdgAUKhwDhtSbT8UNTzBe
5iuv6G3JYyKWCu13GsnppWmonBsQ3f9QB46qqGYZDeJG55YDelsl8D0NianXUrHO
t/jPfPTemXybP4Y4v+ef/c/BDa1vUJ/bxGuYUFWceGtCPq8ypscZTX8vLtQeVtAU
JFHqo+eQ4+KPoPdB6JPOdPK3bIt9y+Rxgsj1NL3THDowthQD5cneErrXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXfIqIB2v3ZD1DM3upkqjRYSfaLMB8GA1UdIwQY
MBaAFA9T5gvaZGWEiM6mozDwXHdJ1bnGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQt
ZDc0NjM3MDA1YjJjLzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQtZDc0NjM3MDA1YjJj
LzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAk3iXlW
PPUNsbj1Tw7DEFtUSLBll/UwgsJSRROmjq/4I9dnrdxYGd75A/iMqnd3dzR5hhrl
IaKnidYs5oZ0D+Y1vAJ7Opgvk2BC2hr/d93eutc7AeyUOGr/PnAYrY5YYH18joPF
a5xQDbWk6PjMFZQS7gHB1iepz5UDT4T4JN9YieaAiMZ/w1TFyYQsZHcb+qDReJ1a
4tkMkCiLuCr6AJMHDMBHDDAIeFoM0tDgQeZEa+8LsiydLbIvAf+o3JopLXvnO5hw
/Wn4fvNq7sgt3QYtfn6gJ5/22S4gvE4bPW2CHmU6rxEjSm4EIO5eIkmFWTo5d2le
WUizzWOaKZ1tMw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:45:00 2026 by rpki-client