Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: 4/XyvsAE53gjXGcHw5+Y+EPKIaVvzxtUUjMPA25ASPM=
Subject key identifier: D2:98:13:2E:D0:CC:ED:9D:DF:57:8A:71:FA:CA:47:3F:6D:6F:A1:8A
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019EBDDA00758921294127EDC5B1CA633AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 99
Signing time: Fri 12 Jun 2026 22:00:41 +0000
Manifest this update: Fri 12 Jun 2026 22:00:41 +0000
Manifest next update: Sat 13 Jun 2026 22:00:41 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: /OlzMjpoGK4AWUoaXzeJ9fCAVmDRztRRLEk1YoNwZ4A=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:00:75:89:21:29:41:27:ed:c5:b1:ca:63:3a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jun 12 22:00:41 2026 GMT
Not After : Jun 13 22:00:41 2026 GMT
Subject: CN=d298132ed0cced9ddf578a71faca473f6d6fa18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:2a:73:5b:c1:50:8a:90:51:40:aa:80:98:
7a:e2:57:66:2b:7b:9a:5b:23:dd:59:c3:75:ed:65:
7b:51:33:a3:3b:4d:02:f9:c5:b6:ae:50:43:93:e7:
16:7a:3a:38:16:67:2f:85:2d:c5:7f:68:12:fa:dd:
30:bd:82:6a:53:58:80:d1:23:4c:a3:59:02:f5:c2:
31:db:85:cf:0d:26:dc:44:2f:b8:71:21:35:d0:dc:
17:7a:88:21:8f:fc:70:f2:4d:7c:7e:f0:35:1d:9e:
ef:12:d3:44:73:e6:5e:ce:29:7f:20:78:2e:f9:bd:
3a:c9:b2:64:e1:db:3c:29:ea:b0:ac:55:aa:de:f2:
03:69:b9:88:27:5b:b4:6a:33:d7:38:95:36:5d:98:
56:a4:3a:01:ef:8a:d4:13:c8:c6:26:34:84:07:ab:
50:56:c7:29:aa:fe:96:59:46:fa:4a:57:2e:fb:06:
d0:9c:49:6e:c4:49:73:7a:65:04:e1:e0:6f:b0:db:
af:b8:8e:61:56:3e:ef:20:2b:b9:c9:d1:fe:b4:30:
d0:a9:59:74:d7:31:42:13:6a:5b:4a:20:ac:52:20:
98:26:51:b5:c5:b0:2f:c4:d6:af:36:90:06:f5:9a:
f2:e4:63:7c:14:78:04:3e:e7:6a:44:f8:35:17:9a:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:13:2E:D0:CC:ED:9D:DF:57:8A:71:FA:CA:47:3F:6D:6F:A1:8A
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:74:12:80:e5:6e:ff:12:46:dc:5a:1a:a3:f4:53:7f:33:
bb:5b:59:89:79:55:0d:c7:91:2c:6a:cf:82:2c:0f:3c:58:f9:
e0:6e:08:e4:a1:da:d3:9c:db:15:29:05:13:df:59:b8:79:87:
da:1d:27:8a:2b:9b:88:d7:a4:72:11:22:41:3d:10:8a:23:7c:
fc:e6:bc:c5:f1:b3:b4:b5:10:9b:95:c9:72:dd:97:aa:3f:77:
4a:36:cf:2b:1b:62:8e:0a:60:6c:07:88:ee:55:d5:3b:61:11:
ed:2a:8f:9f:15:3b:bf:da:19:f9:86:5e:f1:53:0c:ae:cd:74:
d8:ab:f3:9c:0c:98:4d:10:c2:d1:28:0c:5d:29:a6:5e:a6:70:
da:b4:e8:02:97:27:35:7f:1a:c9:13:cf:fd:ee:a2:a7:f8:04:
d7:b8:c1:a8:b3:9c:ae:3c:2b:37:13:0b:90:b9:5c:25:4f:e4:
c1:42:33:ce:d2:27:ec:6f:a3:2f:e5:2e:ae:e9:38:e2:ed:ec:
90:23:6f:75:f3:db:00:44:e1:4f:0d:ab:ba:e6:a0:f2:8f:76:
98:26:f5:be:86:78:f3:fb:d6:a0:90:d0:e7:31:00:84:be:85:
6b:da:c6:b3:0c:b3:a3:4f:f7:6a:91:53:e7:ca:0c:98:a4:3a:
22:d9:fa:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692gB1iSEpQSftxbHKYzr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNmYyNmQ3YzgyYzY5MDg3N2RjM2MyY2I5MjI2YmE4MzNk
NzFmOTgwHhcNMjYwNjEyMjIwMDQxWhcNMjYwNjEzMjIwMDQxWjAzMTEwLwYDVQQD
EyhkMjk4MTMyZWQwY2NlZDlkZGY1NzhhNzFmYWNhNDczZjZkNmZhMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIIqc1vBUIqQUUCqgJh64ldmK3ua
WyPdWcN17WV7UTOjO00C+cW2rlBDk+cWejo4FmcvhS3Ff2gS+t0wvYJqU1iA0SNM
o1kC9cIx24XPDSbcRC+4cSE10NwXeoghj/xw8k18fvA1HZ7vEtNEc+Zezil/IHgu
+b06ybJk4ds8KeqwrFWq3vIDabmIJ1u0ajPXOJU2XZhWpDoB74rUE8jGJjSEB6tQ
Vscpqv6WWUb6Slcu+wbQnEluxElzemUE4eBvsNuvuI5hVj7vICu5ydH+tDDQqVl0
1zFCE2pbSiCsUiCYJlG1xbAvxNavNpAG9Zry5GN8FHgEPudqRPg1F5qaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKYEy7QzO2d31eKcfrKRz9tb6GKMB8GA1UdIwQY
MBaAFP9vJtfILGkId9w8LLkia6gz1x+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEt
NmE0NjgyOTQzZGZjLzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEtNmE0NjgyOTQzZGZj
LzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqZ0EoDl
bv8SRtxaGqP0U38zu1tZiXlVDceRLGrPgiwPPFj54G4I5KHa05zbFSkFE99ZuHmH
2h0niiubiNekchEiQT0QiiN8/Oa8xfGztLUQm5XJct2Xqj93SjbPKxtijgpgbAeI
7lXVO2ER7SqPnxU7v9oZ+YZe8VMMrs102KvznAyYTRDC0SgMXSmmXqZw2rToApcn
NX8ayRPP/e6ip/gE17jBqLOcrjwrNxMLkLlcJU/kwUIzztIn7G+jL+Uuruk44u3s
kCNvdfPbAEThTw2ruuag8o92mCb1voZ48/vWoJDQ5zEAhL6Fa9rGswyzo0/3apFT
58oMmKQ6Itn64A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:58 2026 by rpki-client