Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: goT+esX9NazTaqj6Lsvaf9WTz3Yvr72mSmskjrLTAfg=
Subject key identifier: 4F:6B:12:D0:54:6C:5E:45:DD:B4:03:B8:12:16:B7:75:BF:D7:58:76
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019EC3A4F58CDE84ACA06E8D9A8B8764C417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 81
Signing time: Sun 14 Jun 2026 01:00:28 +0000
Manifest this update: Sun 14 Jun 2026 01:00:28 +0000
Manifest next update: Mon 15 Jun 2026 01:00:28 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: UC3p6K3R45hPoxInJpUNQrU0L9rVSzydl51UkClGnOc=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:f5:8c:de:84:ac:a0:6e:8d:9a:8b:87:64:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Jun 14 01:00:28 2026 GMT
Not After : Jun 15 01:00:28 2026 GMT
Subject: CN=4f6b12d0546c5e45ddb403b81216b775bfd75876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:38:8d:40:e0:c3:c7:af:e1:bc:36:58:d4:
08:19:db:05:9c:c0:a8:97:5c:91:54:bf:cf:da:58:
15:cf:bd:19:80:1e:7a:53:84:da:17:d8:8f:f6:e8:
29:87:63:aa:9f:2d:e7:6b:cb:f4:e6:8b:e9:49:75:
85:f1:39:a4:0f:b8:9c:c0:71:fa:8a:df:59:ac:c0:
e7:e2:b4:ba:c9:bf:59:f7:d0:b9:56:a0:68:74:33:
a0:19:86:35:66:29:54:d9:43:18:d0:08:82:07:53:
ae:60:41:63:9d:f5:3e:9f:3b:2b:d1:8b:63:03:f0:
fe:c0:37:19:6b:dc:43:d5:5d:1e:97:f7:2d:85:11:
88:d4:92:09:bd:ed:a9:5a:c6:bd:ce:a6:cc:46:a3:
5e:1e:ed:76:b5:a1:15:ba:c9:b4:33:73:33:1b:fe:
90:40:30:e1:ae:4e:2d:54:2c:d9:b8:75:96:b6:38:
e1:aa:be:dc:dd:58:97:08:e2:f6:1d:35:9a:0c:2d:
a0:f7:84:cb:16:32:dd:ce:04:6b:eb:98:a9:ee:25:
ba:b5:52:4a:4c:7b:84:32:14:50:7c:fe:f1:a9:a9:
bd:a9:96:92:10:90:77:95:37:59:e9:0b:3d:07:1f:
e4:f8:df:8d:d4:e7:b4:0b:da:75:2b:24:4c:bc:fd:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:12:D0:54:6C:5E:45:DD:B4:03:B8:12:16:B7:75:BF:D7:58:76
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c3:39:4f:86:cd:3a:1d:dd:27:94:42:a0:f5:3c:84:34:2b:
59:f9:ca:a2:38:2a:0d:96:1d:d6:cd:ac:01:56:f3:dc:69:2e:
d6:a8:f9:7b:df:c3:d2:27:f9:a0:f0:b7:fb:23:12:db:6d:35:
a1:e5:d4:ae:ed:61:c1:d5:0d:c9:5e:9b:bb:f8:f3:40:49:09:
aa:07:ac:91:d2:c9:b3:d6:19:0f:00:b2:55:81:d3:ac:b9:75:
e7:57:f7:36:b6:88:a9:b4:97:e2:72:65:4d:9d:c4:0e:e5:7a:
50:82:e8:62:ec:2e:f7:f7:05:56:9d:4d:4e:cf:dc:52:e5:e8:
9e:56:8f:e5:4f:7a:74:30:ad:c3:57:09:71:80:ee:11:a9:07:
2b:7d:0d:c8:84:c5:d6:bc:35:e8:42:fa:ab:19:d5:5c:ea:97:
fc:e3:bd:ab:39:7d:4e:19:b8:bd:b6:05:96:40:c8:59:85:0b:
ad:87:4e:6c:dc:9a:50:ba:15:53:b9:3e:fc:4f:4e:6f:16:31:
77:b8:b9:4f:ae:2b:67:06:f8:8e:27:3e:5e:ab:9b:cb:a4:70:
9c:5a:3b:47:e8:7f:e0:d3:bc:57:c0:0d:40:38:ce:88:e7:7c:
b0:4b:4f:05:7e:2f:11:a2:16:e5:43:fe:36:c8:19:b0:96:41:
42:c4:75:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpPWM3oSsoG6NmouHZMQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTNlNjBiZGE2NDY1ODQ4OGNlYTZhMzMwZjA1Yzc3NDlk
NWI5YzYwHhcNMjYwNjE0MDEwMDI4WhcNMjYwNjE1MDEwMDI4WjAzMTEwLwYDVQQD
Eyg0ZjZiMTJkMDU0NmM1ZTQ1ZGRiNDAzYjgxMjE2Yjc3NWJmZDc1ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCk4jUDgw8ev4bw2WNQIGdsFnMCo
l1yRVL/P2lgVz70ZgB56U4TaF9iP9ugph2Oqny3na8v05ovpSXWF8TmkD7icwHH6
it9ZrMDn4rS6yb9Z99C5VqBodDOgGYY1ZilU2UMY0AiCB1OuYEFjnfU+nzsr0Ytj
A/D+wDcZa9xD1V0el/cthRGI1JIJve2pWsa9zqbMRqNeHu12taEVusm0M3MzG/6Q
QDDhrk4tVCzZuHWWtjjhqr7c3ViXCOL2HTWaDC2g94TLFjLdzgRr65ip7iW6tVJK
THuEMhRQfP7xqam9qZaSEJB3lTdZ6Qs9Bx/k+N+N1Oe0C9p1KyRMvP3iNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9rEtBUbF5F3bQDuBIWt3W/11h2MB8GA1UdIwQY
MBaAFA9T5gvaZGWEiM6mozDwXHdJ1bnGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQt
ZDc0NjM3MDA1YjJjLzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQtZDc0NjM3MDA1YjJj
LzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcM5T4bN
Oh3dJ5RCoPU8hDQrWfnKojgqDZYd1s2sAVbz3Gku1qj5e9/D0if5oPC3+yMS2201
oeXUru1hwdUNyV6bu/jzQEkJqgeskdLJs9YZDwCyVYHTrLl151f3NraIqbSX4nJl
TZ3EDuV6UILoYuwu9/cFVp1NTs/cUuXonlaP5U96dDCtw1cJcYDuEakHK30NyITF
1rw16EL6qxnVXOqX/OO9qzl9Thm4vbYFlkDIWYULrYdObNyaULoVU7k+/E9ObxYx
d7i5T64rZwb4jic+Xquby6RwnFo7R+h/4NO8V8ANQDjOiOd8sEtPBX4vEaIW5UP+
NsgZsJZBQsR1fg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:10 2026 by rpki-client