Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: Xjcsg5/cnL6NSAZXK1XmoF5LXdYksOS5v6FaMT1W4RE=
Subject key identifier: D0:ED:96:EE:AB:62:52:31:20:73:23:CF:A4:07:44:37:1B:47:70:66
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019FA89A30417C0025224A36A1B64326A63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0E78
Signing time: Tue 28 Jul 2026 12:01:44 +0000
Manifest this update: Tue 28 Jul 2026 12:01:44 +0000
Manifest next update: Wed 29 Jul 2026 12:01:44 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: +4j8BnFMpwXFgdKjMhgUyHKMba3AnVIaPfjRpK47R0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:30:41:7c:00:25:22:4a:36:a1:b6:43:26:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jul 28 12:01:44 2026 GMT
Not After : Jul 29 12:01:44 2026 GMT
Subject: CN=d0ed96eeab625231207323cfa40744371b477066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:e7:a1:70:2e:ad:3c:e5:9a:ec:a8:29:90:
cd:0a:97:bd:c4:75:0b:71:81:7e:54:9a:21:78:c7:
f1:28:88:a9:53:df:78:6a:a3:ad:80:a0:99:23:df:
9a:78:42:47:66:30:20:6e:38:2b:8e:87:d9:4a:ea:
c3:67:2b:bb:d6:9b:10:4b:94:30:7e:0c:f2:28:b3:
4b:56:a4:6f:5a:77:dd:9c:06:16:ac:85:3c:f9:6b:
86:37:47:c4:d4:70:42:37:54:82:0d:74:71:b5:77:
0a:52:36:88:62:89:35:3e:6a:7f:d0:55:8d:73:5d:
b3:60:62:1d:b8:31:b3:d2:b6:6b:42:9f:ed:32:cd:
54:3c:34:66:e3:d4:05:34:e1:64:1b:a3:0b:13:47:
55:82:a8:4c:00:52:90:23:52:a2:e3:e9:3a:39:5f:
9d:70:e2:19:13:b2:eb:01:e5:35:ac:d8:ee:9a:ae:
f9:e3:1d:06:4e:83:f0:16:d1:7c:7a:47:ad:40:6b:
5a:f5:17:8b:a8:88:a8:6a:86:54:48:c1:84:43:bb:
ab:8a:af:07:64:99:c1:cb:f8:d8:af:23:30:09:3d:
09:5c:22:28:50:da:4c:e3:eb:ba:21:f9:36:44:5a:
f4:67:11:2b:42:dd:35:66:71:76:50:02:37:4b:db:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:96:EE:AB:62:52:31:20:73:23:CF:A4:07:44:37:1B:47:70:66
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:44:91:e5:96:2f:83:23:8d:3f:8c:5d:d4:99:ad:96:b7:06:
3f:f4:55:65:f8:75:d8:75:fc:d9:52:d0:8e:8b:3b:c3:28:4d:
2b:9c:e1:70:6c:d0:6a:70:9d:a4:31:e4:b8:b4:31:3a:cc:82:
37:32:a5:27:21:73:51:60:c9:fe:ef:18:b0:52:61:fc:6e:8c:
3e:34:76:34:11:b5:00:30:8f:13:3e:20:c6:12:66:f5:f1:24:
9e:92:1e:34:25:58:76:7a:fe:12:47:9d:f5:88:ff:e4:2a:b1:
5e:4e:10:0a:3f:c5:42:2b:d1:ff:b6:f8:85:2a:af:ec:53:c3:
cc:9e:67:e4:64:0d:b0:73:1e:80:d4:5a:df:d9:71:9d:b9:33:
4f:e0:03:21:4b:58:b4:5e:5d:75:2d:ee:e2:1b:06:41:af:df:
b2:19:2c:d2:f6:45:89:a4:02:ac:33:d9:13:0c:20:1a:b3:7d:
a6:21:15:5b:9d:9e:db:eb:b8:ed:fb:2c:8f:4f:96:24:d4:38:
0f:80:98:65:8e:c6:ef:ef:28:2f:7d:59:43:22:7f:6e:97:e1:
62:6b:40:a8:b2:24:51:c3:60:35:ac:80:93:1b:1f:89:d4:3f:
f3:82:53:87:13:10:54:4f:b4:85:48:25:4b:d7:d5:29:74:c2:
d1:21:74:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjBBfAAlIko2obZDJqY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNzI4MTIwMTQ0WhcNMjYwNzI5MTIwMTQ0WjAzMTEwLwYDVQQD
EyhkMGVkOTZlZWFiNjI1MjMxMjA3MzIzY2ZhNDA3NDQzNzFiNDc3MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XnoXAurTzlmuyoKZDNCpe9xHUL
cYF+VJoheMfxKIipU994aqOtgKCZI9+aeEJHZjAgbjgrjofZSurDZyu71psQS5Qw
fgzyKLNLVqRvWnfdnAYWrIU8+WuGN0fE1HBCN1SCDXRxtXcKUjaIYok1Pmp/0FWN
c12zYGIduDGz0rZrQp/tMs1UPDRm49QFNOFkG6MLE0dVgqhMAFKQI1Ki4+k6OV+d
cOIZE7LrAeU1rNjumq754x0GToPwFtF8eketQGta9ReLqIioaoZUSMGEQ7uriq8H
ZJnBy/jYryMwCT0JXCIoUNpM4+u6Ifk2RFr0ZxErQt01ZnF2UAI3S9vc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDtlu6rYlIxIHMjz6QHRDcbR3BmMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUSR5ZYv
gyONP4xd1JmtlrcGP/RVZfh12HX82VLQjos7wyhNK5zhcGzQanCdpDHkuLQxOsyC
NzKlJyFzUWDJ/u8YsFJh/G6MPjR2NBG1ADCPEz4gxhJm9fEknpIeNCVYdnr+Eked
9Yj/5CqxXk4QCj/FQivR/7b4hSqv7FPDzJ5n5GQNsHMegNRa39lxnbkzT+ADIUtY
tF5ddS3u4hsGQa/fshks0vZFiaQCrDPZEwwgGrN9piEVW52e2+u47fssj0+WJNQ4
D4CYZY7G7+8oL31ZQyJ/bpfhYmtAqLIkUcNgNayAkxsfidQ/84JThxMQVE+0hUgl
S9fVKXTC0SF0tA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:11 2026 by rpki-client