Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: OM5ndajA+G5bqnr5mq7qCSLwqoy+mbOwjUQY7SFYcYk=
Subject key identifier: D1:88:72:7D:5B:92:8C:40:B9:32:E2:E5:AD:2F:76:19:1A:03:DB:C9
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019EBF5A207026BF9132200EAD088948D82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0A6A
Signing time: Sat 13 Jun 2026 05:00:15 +0000
Manifest this update: Sat 13 Jun 2026 05:00:15 +0000
Manifest next update: Sun 14 Jun 2026 05:00:15 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: w+AP33wChoqJ+9xrYLv0BFmqN758Sh7a+4D0AOOm3Rg=)
2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:20:70:26:bf:91:32:20:0e:ad:08:89:48:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jun 13 05:00:15 2026 GMT
Not After : Jun 14 05:00:15 2026 GMT
Subject: CN=d188727d5b928c40b932e2e5ad2f76191a03dbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:a0:74:ac:bc:a8:6c:1e:f9:d6:a8:2c:c5:
72:6e:3d:e1:92:37:95:bb:b9:76:9b:94:94:da:c0:
bf:46:2e:1f:12:fe:9e:7a:5b:e7:3c:ca:12:39:85:
e0:67:74:88:e2:8a:1e:43:7c:ae:8c:b0:5b:63:6f:
1d:68:3a:e2:e2:1f:57:e3:4a:f0:80:64:a0:55:0d:
bf:35:d4:12:76:54:6b:ba:de:07:9b:e9:85:9a:cd:
fb:8b:40:74:42:21:b4:86:26:a0:41:5e:db:10:75:
75:c7:86:a2:aa:aa:5d:16:c0:e2:b8:29:b8:84:0c:
08:70:e7:24:91:09:8b:40:29:70:06:51:69:c6:3c:
7a:3a:d5:2b:22:5d:49:05:c3:92:f1:72:fd:93:fb:
24:fa:62:fa:e5:b3:21:ed:25:55:e2:ca:ea:ff:de:
5c:4d:89:13:e8:6a:aa:37:70:06:52:55:26:3a:10:
71:56:25:f0:85:a8:f8:53:ed:60:89:82:cd:0e:6d:
ca:1b:51:0f:73:ba:6a:0c:66:1a:33:e7:d9:f2:b3:
f2:29:02:33:cf:93:64:7e:8b:e2:e0:b0:91:e1:79:
cb:5d:69:b5:cc:d0:b7:7a:99:c5:7f:cd:3f:21:ea:
30:07:7e:e0:be:b0:bf:a3:9c:f5:5f:31:4f:00:04:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:72:7D:5B:92:8C:40:B9:32:E2:E5:AD:2F:76:19:1A:03:DB:C9
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e4:eb:56:a5:9e:d7:bd:04:7f:c0:f9:c4:80:7c:85:ae:bb:
2d:23:08:2e:02:c5:6c:d3:d5:27:e3:d8:7f:5b:c6:0c:39:a3:
01:44:3d:92:d9:5f:6f:82:d2:29:c5:8e:b0:56:5f:46:5d:cb:
08:e8:b8:b2:fb:b0:30:37:34:cd:ba:85:da:0c:bf:95:4d:90:
98:04:6c:fe:40:49:98:7d:8b:f5:a2:61:2f:cf:09:ed:d9:ec:
4b:27:99:2b:6d:5b:49:44:f2:e3:78:19:81:8a:5c:2d:86:a2:
66:41:4e:14:e3:c9:80:59:34:96:80:53:73:a8:7b:98:2d:9d:
a0:c5:5c:2c:58:76:cf:b5:85:15:01:4b:12:d1:57:7e:aa:c4:
f2:0c:58:f1:6f:97:e2:00:5e:11:e5:c1:b5:ab:0e:7a:65:4d:
06:ed:5b:96:b4:fd:b2:5c:be:7b:d1:e0:f4:aa:f7:ee:68:df:
6a:2c:a9:a7:23:72:29:c4:81:2b:43:e2:01:c8:d8:b2:17:9d:
53:6c:50:70:9f:c8:e4:74:a2:e2:f8:58:c4:a3:5c:7a:c3:02:
dd:da:d9:83:60:0a:b3:c7:0c:0e:55:d8:84:9a:40:3e:c2:dd:
51:a0:8c:d8:33:2a:31:a0:fa:65:ca:ff:c7:85:fe:90:d9:db:
a3:52:8e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WiBwJr+RMiAOrQiJSNguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjYwNjEzMDUwMDE1WhcNMjYwNjE0MDUwMDE1WjAzMTEwLwYDVQQD
EyhkMTg4NzI3ZDViOTI4YzQwYjkzMmUyZTVhZDJmNzYxOTFhMDNkYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1CgdKy8qGwe+daoLMVybj3hkjeV
u7l2m5SU2sC/Ri4fEv6eelvnPMoSOYXgZ3SI4ooeQ3yujLBbY28daDri4h9X40rw
gGSgVQ2/NdQSdlRrut4Hm+mFms37i0B0QiG0hiagQV7bEHV1x4aiqqpdFsDiuCm4
hAwIcOckkQmLQClwBlFpxjx6OtUrIl1JBcOS8XL9k/sk+mL65bMh7SVV4srq/95c
TYkT6GqqN3AGUlUmOhBxViXwhaj4U+1giYLNDm3KG1EPc7pqDGYaM+fZ8rPyKQIz
z5Nkfovi4LCR4XnLXWm1zNC3epnFf80/IeowB37gvrC/o5z1XzFPAARCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGIcn1bkoxAuTLi5a0vdhkaA9vJMB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOTrVqWe
170Ef8D5xIB8ha67LSMILgLFbNPVJ+PYf1vGDDmjAUQ9ktlfb4LSKcWOsFZfRl3L
COi4svuwMDc0zbqF2gy/lU2QmARs/kBJmH2L9aJhL88J7dnsSyeZK21bSUTy43gZ
gYpcLYaiZkFOFOPJgFk0loBTc6h7mC2doMVcLFh2z7WFFQFLEtFXfqrE8gxY8W+X
4gBeEeXBtasOemVNBu1blrT9sly+e9Hg9Kr37mjfaiyppyNyKcSBK0PiAcjYshed
U2xQcJ/I5HSi4vhYxKNcesMC3drZg2AKs8cMDlXYhJpAPsLdUaCM2DMqMaD6Zcr/
x4X+kNnbo1KO5w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:29 2026 by rpki-client