Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: hUKWYqcIbDpD25k5IrmgKVGbA0i0XA7BlMAOaUDIGmA=
Subject key identifier: 56:15:7B:DD:44:A0:7A:11:69:28:86:4B:89:E0:2A:E3:29:CD:01:79
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019EC25BDF2319F8A04D82811E720B9D421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 169B
Signing time: Sat 13 Jun 2026 19:01:01 +0000
Manifest this update: Sat 13 Jun 2026 19:01:01 +0000
Manifest next update: Sun 14 Jun 2026 19:01:01 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: SqpCuejRAViMQfxT8wuS8qSyLNB5cISu7RSDtj0EPkU=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:df:23:19:f8:a0:4d:82:81:1e:72:0b:9d:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jun 13 19:01:01 2026 GMT
Not After : Jun 14 19:01:01 2026 GMT
Subject: CN=56157bdd44a07a116928864b89e02ae329cd0179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:af:a7:53:73:f4:48:f3:30:50:63:2d:d8:
e4:80:a4:f4:68:3b:47:20:cf:a8:da:a4:36:87:1b:
54:b5:3a:b1:82:cf:1d:a6:63:95:22:b9:2a:16:1d:
f0:f7:78:c7:d3:b0:a6:ab:e2:0c:07:1d:8b:07:25:
04:98:bb:34:b7:c6:65:af:81:a0:f5:0e:99:01:0c:
cc:41:0e:9a:e7:c4:47:d5:da:0a:b4:11:44:6f:a2:
ce:9f:5b:2d:0d:ae:54:25:95:ac:23:57:02:48:44:
77:18:7b:2e:17:89:70:c8:05:f0:dd:ac:17:e5:e5:
26:5f:c8:f8:56:c2:fa:a0:e9:67:c5:15:04:b8:50:
83:48:ce:99:30:cd:b6:bd:b3:5d:81:d3:a0:fb:9e:
2a:12:86:09:0a:63:f2:52:54:73:08:08:0e:0d:15:
ca:28:17:d7:e0:da:2b:53:1e:bf:73:28:a9:30:b1:
0a:1b:1a:5f:bc:6d:e8:68:1a:c1:ca:c8:6c:d8:41:
45:25:cf:e5:35:f4:eb:dc:9f:12:c0:95:8f:cc:28:
f1:c6:46:1c:11:e2:ba:04:50:01:22:3e:b7:a3:4e:
e2:77:b8:f1:8b:45:09:fd:31:59:4c:5b:79:01:e0:
f8:14:d7:e9:03:a9:7d:e8:13:82:95:48:67:0c:08:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:15:7B:DD:44:A0:7A:11:69:28:86:4B:89:E0:2A:E3:29:CD:01:79
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:25:24:0f:dd:52:79:8e:27:4c:18:b0:c3:ce:67:9b:10:
43:a1:9a:c5:3a:ff:d1:80:4b:52:ab:e5:57:07:65:ef:82:35:
ab:7a:cf:22:e3:e3:e3:41:ea:c0:fb:5d:84:4e:b0:eb:d6:ab:
6b:ad:c9:ff:46:04:7f:c3:8b:73:eb:e9:ba:e7:0a:f8:f9:c4:
d3:3a:59:35:04:57:72:ba:c1:74:45:09:78:ff:c8:18:d0:e4:
80:77:22:8d:37:51:76:d6:cc:7d:e9:29:16:80:26:dc:0f:7a:
8c:26:09:2a:bf:4c:aa:9b:5e:39:82:19:d7:09:72:48:56:e8:
c3:5b:c5:2b:de:82:d5:f5:fc:53:d2:e3:a5:c4:c5:89:bd:2d:
82:57:67:42:80:55:70:ed:e7:4d:16:7c:59:50:4b:db:83:03:
80:b5:c5:aa:fe:fe:7c:3d:12:d7:34:03:bf:7c:58:79:74:05:
75:4d:f5:21:ee:54:01:43:32:5a:73:3f:09:52:d8:fe:ad:85:
54:6d:ad:ed:5c:e1:6e:dc:03:88:c5:bc:be:df:e4:31:01:c0:
a3:aa:cc:eb:85:b7:8c:50:c2:a1:ee:74:2a:96:c0:eb:4a:18:
4c:3e:5d:99:e3:30:43:d1:5d:63:1f:de:14:78:3f:1b:a8:38:
bc:b8:0e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW98jGfigTYKBHnILnUIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjYwNjEzMTkwMTAxWhcNMjYwNjE0MTkwMTAxWjAzMTEwLwYDVQQD
Eyg1NjE1N2JkZDQ0YTA3YTExNjkyODg2NGI4OWUwMmFlMzI5Y2QwMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GOvp1Nz9EjzMFBjLdjkgKT0aDtH
IM+o2qQ2hxtUtTqxgs8dpmOVIrkqFh3w93jH07Cmq+IMBx2LByUEmLs0t8Zlr4Gg
9Q6ZAQzMQQ6a58RH1doKtBFEb6LOn1stDa5UJZWsI1cCSER3GHsuF4lwyAXw3awX
5eUmX8j4VsL6oOlnxRUEuFCDSM6ZMM22vbNdgdOg+54qEoYJCmPyUlRzCAgODRXK
KBfX4NorUx6/cyipMLEKGxpfvG3oaBrByshs2EFFJc/lNfTr3J8SwJWPzCjxxkYc
EeK6BFABIj63o07id7jxi0UJ/TFZTFt5AeD4FNfpA6l96BOClUhnDAi+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYVe91EoHoRaSiGS4ngKuMpzQF5MB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFQlJA/d
UnmOJ0wYsMPOZ5sQQ6GaxTr/0YBLUqvlVwdl74I1q3rPIuPj40HqwPtdhE6w69ar
a63J/0YEf8OLc+vpuucK+PnE0zpZNQRXcrrBdEUJeP/IGNDkgHcijTdRdtbMfekp
FoAm3A96jCYJKr9MqpteOYIZ1wlySFbow1vFK96C1fX8U9LjpcTFib0tgldnQoBV
cO3nTRZ8WVBL24MDgLXFqv7+fD0S1zQDv3xYeXQFdU31Ie5UAUMyWnM/CVLY/q2F
VG2t7VzhbtwDiMW8vt/kMQHAo6rM64W3jFDCoe50KpbA60oYTD5dmeMwQ9FdYx/e
FHg/G6g4vLgOsA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:38:41 2026 by rpki-client