Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: 4k8ObV6qM9NUoAVN4VrF+mD44lVW06B5OHFfYnZYmzA=
Subject key identifier: 69:CA:C8:50:32:6B:13:ED:D2:53:1D:8E:CC:9C:BC:96:66:F3:5A:F3
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 019FAA19D4CA2A33D833711361B81756BC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: 06
Signing time: Tue 28 Jul 2026 19:00:47 +0000
Manifest this update: Tue 28 Jul 2026 19:00:47 +0000
Manifest next update: Wed 29 Jul 2026 19:00:47 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: 7Vsxs27UVyWVwOGusspaq9QY0z3kwDXEWNn+w75T+/k=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d4:ca:2a:33:d8:33:71:13:61:b8:17:56:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Jul 28 19:00:47 2026 GMT
Not After : Jul 29 19:00:47 2026 GMT
Subject: CN=69cac850326b13edd2531d8ecc9cbc9666f35af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:30:c4:4b:5d:4b:ce:a6:2e:d5:ba:be:0c:
62:1d:d4:54:0d:fe:ed:b1:c2:20:e2:6b:e8:d6:7e:
8c:c0:37:e9:ae:a9:45:6d:b2:dd:87:e7:2f:df:ec:
2b:5d:87:8f:9a:55:22:00:8b:0f:6c:e5:2a:79:7c:
c7:c9:7f:14:a6:2c:1f:5a:ba:0b:ca:9d:88:77:29:
b8:9c:07:ce:80:a0:c4:34:62:69:4a:75:41:a0:c8:
d4:af:d4:10:4b:87:35:9d:a7:d9:4d:83:3d:93:b1:
10:d7:bf:b7:1a:0f:2a:9b:9c:1b:9b:1d:ca:0f:38:
5d:39:08:c2:96:25:a2:57:60:f3:2f:ce:13:25:d1:
1b:2f:b7:f8:8a:d0:83:78:69:de:b5:6b:d8:f5:d2:
00:17:42:f1:dd:d1:41:5c:02:98:3e:2f:0d:0c:98:
ae:1c:89:cb:32:ad:b4:c9:b0:dd:7a:3c:18:e7:68:
70:ca:c6:17:ef:9b:e8:f8:09:00:a2:e3:e7:77:d0:
a0:1d:78:74:dd:4d:d0:82:95:0f:ba:cb:d8:3e:d7:
e4:12:e3:e7:a6:9e:fd:d4:06:0a:ee:00:61:77:73:
7e:44:6f:ca:f3:29:5c:27:a6:3e:d9:c7:e2:ea:13:
47:5a:7c:79:54:20:86:33:98:1c:85:7f:f4:29:e9:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:C8:50:32:6B:13:ED:D2:53:1D:8E:CC:9C:BC:96:66:F3:5A:F3
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:5b:6a:2e:14:e8:df:b7:9a:ca:3d:4c:8c:98:95:ef:0c:
92:99:ac:77:44:f5:7f:01:c3:72:91:0e:08:ca:ad:bf:10:b2:
b0:f1:e8:60:29:17:a3:50:d7:d3:23:27:24:ba:f5:c5:b4:97:
58:02:ce:1b:6d:ad:ff:2f:33:ac:82:41:4e:c4:0c:39:7e:57:
10:f4:7e:9a:7e:c1:be:84:04:5b:1c:51:97:b7:dd:38:ea:2d:
df:47:20:6c:7c:4a:86:47:74:d7:b5:eb:57:7a:cb:4f:a2:1b:
e6:b5:68:e4:9d:ac:00:b9:81:86:24:d7:a5:23:14:a1:71:7c:
1e:aa:42:28:af:50:ed:e4:74:2f:78:a5:da:d3:45:d9:36:e5:
94:a6:60:fa:01:ef:08:6c:4a:47:f4:55:e3:15:54:43:b7:97:
fc:99:48:ad:a3:a6:74:e8:30:4d:4a:79:01:f5:93:62:cf:00:
5d:24:ba:a9:ab:3a:3a:a8:89:36:a4:6d:a6:2c:c7:eb:c6:49:
9d:8d:09:3f:c3:ab:bf:5b:41:e2:0a:b3:cb:e6:bb:ef:1f:8d:
0d:4e:88:a7:b5:45:ad:ed:c0:75:77:6f:c3:f9:3f:db:54:9b:
7b:50:c0:0b:61:c4:60:aa:7c:0d:ee:d9:96:64:da:10:01:50:
99:4f:5c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGdTKKjPYM3ETYbgXVrxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkYzMwYzU5ZWFiMTUzMDVlYzNjOGJlNGU1MmNiNDQw
NmE5MmIwHhcNMjYwNzI4MTkwMDQ3WhcNMjYwNzI5MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg2OWNhYzg1MDMyNmIxM2VkZDI1MzFkOGVjYzljYmM5NjY2ZjM1YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW8wxEtdS86mLtW6vgxiHdRUDf7t
scIg4mvo1n6MwDfprqlFbbLdh+cv3+wrXYePmlUiAIsPbOUqeXzHyX8UpiwfWroL
yp2Idym4nAfOgKDENGJpSnVBoMjUr9QQS4c1nafZTYM9k7EQ17+3Gg8qm5wbmx3K
DzhdOQjCliWiV2DzL84TJdEbL7f4itCDeGnetWvY9dIAF0Lx3dFBXAKYPi8NDJiu
HInLMq20ybDdejwY52hwysYX75vo+AkAouPnd9CgHXh03U3QgpUPusvYPtfkEuPn
pp791AYK7gBhd3N+RG/K8ylcJ6Y+2cfi6hNHWnx5VCCGM5gchX/0KemIrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnKyFAyaxPt0lMdjsycvJZm81rzMB8GA1UdIwQY
MBaAFA2R3DDFnqsVMF7DyL5OUstEBqkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGIt
YTgyOTMwNWNjMWExLzEvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGItYTgyOTMwNWNjMWEx
LzEvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLdbai4U
6N+3mso9TIyYle8Mkpmsd0T1fwHDcpEOCMqtvxCysPHoYCkXo1DX0yMnJLr1xbSX
WALOG22t/y8zrIJBTsQMOX5XEPR+mn7BvoQEWxxRl7fdOOot30cgbHxKhkd017Xr
V3rLT6Ib5rVo5J2sALmBhiTXpSMUoXF8HqpCKK9Q7eR0L3il2tNF2TbllKZg+gHv
CGxKR/RV4xVUQ7eX/JlIraOmdOgwTUp5AfWTYs8AXSS6qas6OqiJNqRtpizH68ZJ
nY0JP8Orv1tB4gqzy+a77x+NDU6Ip7VFre3AdXdvw/k/21Sbe1DAC2HEYKp8De7Z
lmTaEAFQmU9c1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:43 2026 by rpki-client