Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: bJqPxf4LaUrPRasgLeS2V2elQQ0xvyLHzNRT4ESv/1A=
Subject key identifier: 28:98:BD:6D:53:EA:DC:94:FE:01:2A:0E:F9:FB:CF:EE:68:39:E6:33
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019EBF5AF43EE5F6F06ABD738AF255B15118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1423
Signing time: Sat 13 Jun 2026 05:01:09 +0000
Manifest this update: Sat 13 Jun 2026 05:01:09 +0000
Manifest next update: Sun 14 Jun 2026 05:01:09 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: drj5eJ3SVxfxeEB3YflBbuVFp1H3tOUpG3uBPHVImRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f4:3e:e5:f6:f0:6a:bd:73:8a:f2:55:b1:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jun 13 05:01:09 2026 GMT
Not After : Jun 14 05:01:09 2026 GMT
Subject: CN=2898bd6d53eadc94fe012a0ef9fbcfee6839e633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:e2:6e:0c:1a:9e:9f:32:2e:8f:20:0e:a5:
2d:8e:ac:37:6d:34:fd:c5:d6:6f:1c:10:82:8a:d8:
49:51:c7:17:1d:22:df:93:df:7a:7d:f5:42:bc:35:
bf:81:71:b9:f4:0f:5c:bb:6b:bf:7d:ec:91:c9:f6:
7f:1e:74:68:eb:68:d5:cf:97:aa:ab:dd:0f:f2:66:
54:3c:4c:52:d2:bf:ce:27:d8:ce:c8:34:1f:4a:02:
cb:b7:07:73:e5:01:55:ba:fc:80:bc:0c:34:d6:d1:
13:69:2a:28:0f:5f:96:fb:12:a5:53:a6:3b:eb:7f:
65:58:a8:84:c9:8c:0c:fc:24:48:01:e0:7a:e7:19:
65:aa:f3:89:e4:c1:06:7d:f0:ed:53:f6:59:96:c2:
3e:43:7c:58:d7:3e:7b:c0:6f:cb:86:12:99:74:95:
98:ab:58:69:a9:58:a4:90:9c:0d:30:0f:26:be:8b:
71:b1:09:35:e0:03:b3:ca:2a:4c:cf:eb:69:8d:da:
bb:30:40:7b:5d:ee:5c:38:da:f7:fe:e7:57:76:20:
d8:fd:f4:37:2b:93:87:b3:25:b3:13:e8:46:11:6c:
f9:34:34:3b:66:ef:af:8b:4a:67:a5:29:85:52:31:
6f:36:38:87:db:d6:03:a9:ea:43:37:7a:ef:3d:14:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:BD:6D:53:EA:DC:94:FE:01:2A:0E:F9:FB:CF:EE:68:39:E6:33
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:7e:61:7b:6d:1d:52:23:d9:d4:7a:72:3c:b1:80:3a:1b:
fd:d8:af:4a:43:65:71:85:27:81:7a:f1:f8:42:7d:60:ea:34:
99:6e:a5:e0:b7:b2:e5:69:4c:b7:1d:cd:82:b0:0e:e5:f0:4e:
76:85:c1:ed:51:f9:0a:25:83:78:bb:9b:cf:cb:65:64:08:dd:
4e:5d:e2:c8:60:d9:c5:1e:90:ee:5e:6e:c5:2f:ae:b4:40:2a:
3f:6d:ec:b5:05:cf:19:4d:43:93:5a:70:2c:73:65:e3:98:b2:
fd:06:b8:d9:56:fb:54:c9:00:72:a2:81:12:fe:8a:d6:25:03:
67:3d:c8:1b:b2:1c:9d:cf:49:85:3f:45:2c:37:48:27:d6:08:
67:50:4b:3f:c1:81:f5:ec:1d:aa:5d:65:fc:f9:53:a6:5b:dd:
90:8e:5e:d6:59:61:28:45:67:df:b0:41:f9:30:c2:64:91:2c:
d4:6a:d0:6a:46:a3:f9:1c:6f:f6:ce:a8:6a:8f:03:b9:2a:d3:
56:17:b5:02:cb:95:66:7d:7a:3c:0f:0a:75:42:2b:17:35:5a:
32:5c:f6:41:c7:d5:57:e9:29:ab:31:da:7f:e0:23:ac:c0:bc:
c4:34:26:e1:a9:07:f0:96:54:e8:ee:b0:09:cd:ba:49:f0:fb:
37:af:76:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WvQ+5fbwar1zivJVsVEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwNjEzMDUwMTA5WhcNMjYwNjE0MDUwMTA5WjAzMTEwLwYDVQQD
EygyODk4YmQ2ZDUzZWFkYzk0ZmUwMTJhMGVmOWZiY2ZlZTY4MzllNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3vibgwanp8yLo8gDqUtjqw3bTT9
xdZvHBCCithJUccXHSLfk996ffVCvDW/gXG59A9cu2u/feyRyfZ/HnRo62jVz5eq
q90P8mZUPExS0r/OJ9jOyDQfSgLLtwdz5QFVuvyAvAw01tETaSooD1+W+xKlU6Y7
639lWKiEyYwM/CRIAeB65xllqvOJ5MEGffDtU/ZZlsI+Q3xY1z57wG/LhhKZdJWY
q1hpqVikkJwNMA8mvotxsQk14AOzyipMz+tpjdq7MEB7Xe5cONr3/udXdiDY/fQ3
K5OHsyWzE+hGEWz5NDQ7Zu+vi0pnpSmFUjFvNjiH29YDqepDN3rvPRTBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiYvW1T6tyU/gEqDvn7z+5oOeYzMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0F+YXtt
HVIj2dR6cjyxgDob/divSkNlcYUngXrx+EJ9YOo0mW6l4Ley5WlMtx3NgrAO5fBO
doXB7VH5CiWDeLubz8tlZAjdTl3iyGDZxR6Q7l5uxS+utEAqP23stQXPGU1Dk1pw
LHNl45iy/Qa42Vb7VMkAcqKBEv6K1iUDZz3IG7Icnc9JhT9FLDdIJ9YIZ1BLP8GB
9ewdql1l/PlTplvdkI5e1llhKEVn37BB+TDCZJEs1GrQakaj+Rxv9s6oao8DuSrT
Vhe1AsuVZn16PA8KdUIrFzVaMlz2QcfVV+kpqzHaf+AjrMC8xDQm4akH8JZU6O6w
Cc26SfD7N692BA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:00 2026 by rpki-client