Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: U3QFXLU7nESv9/m7Wx5B/eMv4WF+0BUrFieCJVFEYkM=
Subject key identifier: 32:EE:44:00:22:5F:92:1A:95:62:34:D0:D1:BA:9D:B8:5D:53:C2:7B
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019EC0DB6A515E6BFFCDA04738AB18D85337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0E00
Signing time: Sat 13 Jun 2026 12:01:05 +0000
Manifest this update: Sat 13 Jun 2026 12:01:05 +0000
Manifest next update: Sun 14 Jun 2026 12:01:05 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: LX0l45ACjBgRDeVU6eOFhk5+s1nfbN3uhaIbxMjP/lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:6a:51:5e:6b:ff:cd:a0:47:38:ab:18:d8:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jun 13 12:01:05 2026 GMT
Not After : Jun 14 12:01:05 2026 GMT
Subject: CN=32ee4400225f921a956234d0d1ba9db85d53c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:4d:86:be:6d:75:a2:0b:19:a5:75:be:ec:
91:45:e9:ef:8f:95:6b:db:b3:cc:13:3a:cc:29:5c:
f4:94:8b:35:b5:d0:6d:30:9c:47:0d:78:b3:aa:9c:
39:56:45:04:37:55:7c:f0:db:be:50:55:2e:78:d2:
3c:f9:c7:7b:f8:24:3c:54:5b:54:9e:ea:b0:23:f3:
14:00:90:98:45:ab:cf:73:a2:ba:5e:40:81:da:90:
f2:13:f5:82:1c:8d:50:02:6b:26:c8:25:d4:df:1a:
93:47:07:91:c4:15:a1:57:89:9a:f6:bf:71:06:ca:
f8:18:59:af:e7:b5:09:d9:8c:7d:ea:04:a4:fe:27:
14:d0:96:ad:40:bb:94:f2:c0:c4:28:81:5a:93:de:
3c:17:bf:c2:d1:a2:14:e8:94:c2:28:25:03:43:24:
7a:22:5e:3d:35:24:93:32:0d:86:cb:1a:2f:34:2d:
8e:4a:17:4a:f4:b7:57:3d:7d:b9:2d:a6:4f:40:c4:
2e:b0:bc:31:c0:4f:26:b3:de:38:ee:11:8f:c6:df:
8f:9b:41:a4:83:09:f6:29:c1:cb:a9:83:64:19:6f:
0f:5c:b7:a6:3c:17:33:63:ec:1b:6f:e7:33:c3:fb:
2e:7e:d2:84:42:5d:89:3c:27:05:d5:84:8e:f2:75:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:44:00:22:5F:92:1A:95:62:34:D0:D1:BA:9D:B8:5D:53:C2:7B
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4a:3c:7f:7b:a3:2c:06:80:e5:8a:6a:a4:fd:a3:9f:2a:68:
32:b6:4e:da:e1:bf:fe:2d:29:d4:5f:76:80:ae:93:59:47:5c:
f5:9f:83:6a:d9:85:6a:75:fe:67:34:2b:bc:0b:50:6a:55:e2:
a4:52:9a:cc:51:ae:5a:3a:e2:75:75:b9:af:6b:af:6a:b5:9a:
7c:48:a6:36:0f:12:27:02:9a:04:b3:fd:e0:5e:b1:33:b1:f6:
98:24:1f:40:d0:a4:f5:ee:06:82:f3:71:d3:29:2c:a0:88:75:
7a:e0:16:9a:1b:a0:92:de:f9:3e:69:65:ef:e6:5f:1e:68:e5:
bd:36:d4:e8:d8:bc:96:5b:11:f3:ad:30:f3:dd:1f:79:60:fd:
b6:aa:89:5e:ba:85:64:0c:31:e5:f5:70:13:51:44:1b:aa:21:
31:d4:5e:f8:d3:2e:7d:0c:a9:7b:77:b5:85:04:7a:d0:a9:b4:
b6:c2:e3:29:31:ac:53:47:8d:58:d7:bc:7b:4a:bc:db:6b:b4:
fd:f9:ec:35:84:53:d8:41:02:05:e0:36:53:28:03:5b:ce:90:
6b:8b:59:25:e7:38:60:23:14:1c:58:2a:12:be:02:ee:79:2e:
9a:f3:85:4e:ec:52:f3:25:2f:18:d1:7a:4b:06:59:b6:f5:a8:
1a:06:cb:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A22pRXmv/zaBHOKsY2FM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNjEzMTIwMTA1WhcNMjYwNjE0MTIwMTA1WjAzMTEwLwYDVQQD
EygzMmVlNDQwMDIyNWY5MjFhOTU2MjM0ZDBkMWJhOWRiODVkNTNjMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzhNhr5tdaILGaV1vuyRRenvj5Vr
27PMEzrMKVz0lIs1tdBtMJxHDXizqpw5VkUEN1V88Nu+UFUueNI8+cd7+CQ8VFtU
nuqwI/MUAJCYRavPc6K6XkCB2pDyE/WCHI1QAmsmyCXU3xqTRweRxBWhV4ma9r9x
Bsr4GFmv57UJ2Yx96gSk/icU0JatQLuU8sDEKIFak948F7/C0aIU6JTCKCUDQyR6
Il49NSSTMg2GyxovNC2OShdK9LdXPX25LaZPQMQusLwxwE8ms9447hGPxt+Pm0Gk
gwn2KcHLqYNkGW8PXLemPBczY+wbb+czw/suftKEQl2JPCcF1YSO8nW8rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLuRAAiX5IalWI00NG6nbhdU8J7MB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtko8f3uj
LAaA5YpqpP2jnypoMrZO2uG//i0p1F92gK6TWUdc9Z+DatmFanX+ZzQrvAtQalXi
pFKazFGuWjridXW5r2uvarWafEimNg8SJwKaBLP94F6xM7H2mCQfQNCk9e4GgvNx
0yksoIh1euAWmhugkt75Pmll7+ZfHmjlvTbU6Ni8llsR860w890feWD9tqqJXrqF
ZAwx5fVwE1FEG6ohMdRe+NMufQype3e1hQR60Km0tsLjKTGsU0eNWNe8e0q822u0
/fnsNYRT2EECBeA2UygDW86Qa4tZJec4YCMUHFgqEr4C7nkumvOFTuxS8yUvGNF6
SwZZtvWoGgbLcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:08 2026 by rpki-client