Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: Fioo/wyjyPAN7noJcj1obLgQvS8CQUWlTgoW3MF0wGE=
Subject key identifier: 47:14:4D:0C:82:AC:75:A0:26:E1:45:94:13:0A:10:54:B6:F7:CB:DE
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019EBE4823BFD5226FFFA1D2AB4C70314EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 00:00:59 +0000
Manifest this update: Sat 13 Jun 2026 00:00:59 +0000
Manifest next update: Sun 14 Jun 2026 00:00:59 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: +MTrriQZ/claQPJFHg9cuHgZvjKs+Ag2VTSo+bq/PiU=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:23:bf:d5:22:6f:ff:a1:d2:ab:4c:70:31:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 13 00:00:59 2026 GMT
Not After : Jun 14 00:00:59 2026 GMT
Subject: CN=47144d0c82ac75a026e14594130a1054b6f7cbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:bd:d6:92:d0:88:65:49:97:a0:d0:a4:04:
38:92:04:87:17:af:b5:45:8f:33:5a:aa:e4:5a:28:
b6:b8:c4:e7:29:a2:1f:5c:17:c3:8b:99:d1:8b:98:
5f:ae:9d:5a:f4:3b:a0:aa:60:f5:89:51:6d:e5:36:
89:87:b5:c7:93:ea:8c:01:e0:d4:07:e3:a0:27:b4:
68:67:11:5e:d5:92:c2:5c:91:34:50:3e:94:f3:28:
ae:8e:63:eb:88:aa:cf:bc:e4:87:b7:6b:dd:bc:b7:
52:41:01:27:aa:1e:09:4d:0c:f7:95:5d:bd:ed:18:
df:23:61:89:d8:e0:81:14:2c:d1:f3:b2:7e:62:bd:
71:1d:0c:3b:f4:97:a6:28:79:a4:42:46:6a:a0:06:
b7:0d:c2:76:95:d0:83:3c:5e:9e:67:f1:4a:fb:ed:
3c:90:2c:85:59:af:40:52:d8:5f:52:10:b9:0d:8e:
65:22:29:4f:f7:e8:cd:6f:a8:b7:d0:46:81:77:6c:
24:f1:60:a1:6b:75:8b:26:6e:f2:f8:69:8b:48:80:
e1:43:7b:58:7a:99:d0:f1:93:57:10:f0:87:f1:9e:
de:99:a1:5e:31:e4:e1:18:5f:20:f3:87:f5:45:c4:
bf:04:cf:19:e0:ec:1f:d4:11:a4:56:12:58:0c:a2:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:4D:0C:82:AC:75:A0:26:E1:45:94:13:0A:10:54:B6:F7:CB:DE
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:34:0d:00:9c:39:10:24:17:a9:6b:b5:78:3a:c0:11:49:
32:60:43:a5:19:f7:30:1a:46:f9:e9:34:c3:fd:3d:73:ef:80:
cb:bc:6c:e5:d4:bb:8e:31:41:0b:b3:4e:89:b9:5c:7f:e4:2f:
bb:80:e2:00:6d:77:dd:c5:f2:35:b1:78:56:0e:2c:f0:de:6a:
2d:75:4b:2a:da:28:17:fe:b2:6d:65:e6:40:dd:e8:00:f2:fe:
2d:a8:6e:b1:90:88:9f:9c:e6:8b:32:da:4c:56:a6:42:47:b9:
36:78:f6:57:80:97:95:7c:1e:e6:93:17:7d:60:82:f6:93:28:
e7:d0:c6:4a:15:54:b9:5f:69:ba:fa:c5:95:8b:e1:7a:03:35:
1f:dd:31:da:0a:75:28:61:9f:72:34:62:56:be:63:b2:1d:ec:
19:08:97:0c:82:96:c1:92:bb:c5:94:91:da:ae:06:69:86:5a:
c6:64:5d:2d:52:77:d1:fb:aa:93:ae:3c:59:e6:7f:53:ff:47:
2a:0d:ff:35:e6:e1:d3:e2:44:b2:b0:10:5a:76:92:17:b9:48:
bd:27:cd:da:ef:75:14:b9:bf:f8:b9:7e:9c:cf:fd:5a:b7:5f:
01:5c:be:86:ae:1a:8f:d5:ae:76:00:de:16:a4:ca:90:19:70:
79:c1:f5:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SCO/1SJv/6HSq0xwMU7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjYwNjEzMDAwMDU5WhcNMjYwNjE0MDAwMDU5WjAzMTEwLwYDVQQD
Eyg0NzE0NGQwYzgyYWM3NWEwMjZlMTQ1OTQxMzBhMTA1NGI2ZjdjYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8K91pLQiGVJl6DQpAQ4kgSHF6+1
RY8zWqrkWii2uMTnKaIfXBfDi5nRi5hfrp1a9DugqmD1iVFt5TaJh7XHk+qMAeDU
B+OgJ7RoZxFe1ZLCXJE0UD6U8yiujmPriKrPvOSHt2vdvLdSQQEnqh4JTQz3lV29
7RjfI2GJ2OCBFCzR87J+Yr1xHQw79JemKHmkQkZqoAa3DcJ2ldCDPF6eZ/FK++08
kCyFWa9AUthfUhC5DY5lIilP9+jNb6i30EaBd2wk8WCha3WLJm7y+GmLSIDhQ3tY
epnQ8ZNXEPCH8Z7emaFeMeThGF8g84f1RcS/BM8Z4Owf1BGkVhJYDKK+VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcUTQyCrHWgJuFFlBMKEFS298veMB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPM0DQCc
ORAkF6lrtXg6wBFJMmBDpRn3MBpG+ek0w/09c++Ay7xs5dS7jjFBC7NOiblcf+Qv
u4DiAG133cXyNbF4Vg4s8N5qLXVLKtooF/6ybWXmQN3oAPL+LahusZCIn5zmizLa
TFamQke5Nnj2V4CXlXwe5pMXfWCC9pMo59DGShVUuV9puvrFlYvhegM1H90x2gp1
KGGfcjRiVr5jsh3sGQiXDIKWwZK7xZSR2q4GaYZaxmRdLVJ30fuqk648WeZ/U/9H
Kg3/Nebh0+JEsrAQWnaSF7lIvSfN2u91FLm/+Ll+nM/9WrdfAVy+hq4aj9WudgDe
FqTKkBlwecH1qQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:26 2026 by rpki-client