Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: 1Ml9DYJi0JhgaiJRGlgIpfuhV4c/WUJGi2EU1lbKhVc=
Subject key identifier: C8:C1:2D:C6:27:8B:C4:F4:BF:97:58:F3:92:20:A0:81:86:F7:A2:29
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019FA906C8929CDB85D96685214B4F24E345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 14:00:21 +0000
Manifest this update: Tue 28 Jul 2026 14:00:21 +0000
Manifest next update: Wed 29 Jul 2026 14:00:21 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: 9oPLcNeD2VMW5MJbBdBqcMld/+BwYTGzqzkFF4palyU=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c8:92:9c:db:85:d9:66:85:21:4b:4f:24:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jul 28 14:00:21 2026 GMT
Not After : Jul 29 14:00:21 2026 GMT
Subject: CN=c8c12dc6278bc4f4bf9758f39220a08186f7a229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:95:b2:17:3f:13:fa:ce:79:4b:f5:44:48:
da:78:3e:60:17:c3:54:95:eb:fb:f8:9c:eb:85:f5:
c6:3a:a5:e4:84:aa:43:b6:9e:20:06:69:6c:a8:fb:
38:98:e1:43:51:86:5f:b3:4f:fd:57:d5:90:ab:ba:
ce:19:59:60:7e:8e:ff:9b:f7:f5:c5:ba:fd:f6:39:
df:80:56:f9:04:5c:2f:c4:bb:12:52:b2:79:e9:5d:
94:42:03:75:4e:14:8d:2b:7f:cd:f1:6a:99:e2:6d:
52:ef:5f:95:b8:bc:af:d5:a1:88:e0:3f:1e:4a:68:
86:d2:e8:65:a6:5c:03:d9:cc:1a:93:d9:0b:1c:6d:
2f:8b:1e:b8:f5:3f:4a:92:58:91:6f:5b:34:90:8e:
a4:7b:e0:c0:56:d7:cd:1a:0d:19:9d:f7:48:e0:7a:
8c:99:74:03:8f:e6:8e:80:a7:aa:d0:a8:bd:95:7b:
fb:5a:66:72:b0:eb:f1:e2:55:0f:f0:f6:05:9d:06:
92:8c:a2:24:c4:c1:a3:04:d3:0a:9d:59:c8:07:0f:
c2:64:1b:f7:a4:e7:c0:5d:89:99:27:86:9f:df:b0:
10:18:f7:18:ef:c5:e7:45:d5:7c:03:f7:63:60:f7:
ac:9f:15:b4:7c:5a:1e:e3:4b:1a:a0:d0:8a:b8:24:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C1:2D:C6:27:8B:C4:F4:BF:97:58:F3:92:20:A0:81:86:F7:A2:29
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:8c:0a:27:0d:d0:7b:8d:ae:52:af:7a:d7:75:0a:6a:f5:
d6:5f:39:3e:df:85:9d:80:86:f6:78:f8:34:03:36:35:a3:5e:
da:7f:cc:7b:1f:d6:45:fa:ae:19:60:38:78:e3:f6:9f:f9:ac:
83:19:23:c2:e9:0d:95:3e:b5:75:d9:d1:56:36:d1:96:22:8c:
8b:dc:32:6f:c5:56:da:6b:81:51:46:d4:ab:ca:35:6a:36:eb:
74:6b:7c:53:c4:d7:3f:f3:cd:91:85:ff:8f:aa:17:fd:a2:a3:
d2:bd:7d:22:72:23:a7:84:0f:03:a9:8c:df:c6:97:7f:20:36:
3a:b7:61:e1:31:a5:11:18:ac:32:47:4e:9d:a5:d3:2b:8b:fb:
2a:8f:40:40:3f:78:85:54:95:65:4d:c6:a4:67:8b:47:ee:48:
92:0a:17:68:2e:ff:cb:19:7f:ba:0b:c5:48:88:49:20:0b:90:
12:a4:02:9f:ec:b4:46:6c:a0:2a:64:04:43:21:bf:22:aa:e2:
2c:82:64:5f:2a:73:c2:2f:4f:6c:e9:57:f8:fe:25:60:47:6a:
07:bb:52:91:95:c8:60:b4:d9:4d:9c:ea:ae:f3:8d:59:fd:ce:
3b:13:c7:ff:60:33:a6:b7:6a:ce:82:ef:aa:5c:f2:54:fd:52:
cc:9a:06:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBsiSnNuF2WaFIUtPJONFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4
MzJkMGMwHhcNMjYwNzI4MTQwMDIxWhcNMjYwNzI5MTQwMDIxWjAzMTEwLwYDVQQD
EyhjOGMxMmRjNjI3OGJjNGY0YmY5NzU4ZjM5MjIwYTA4MTg2ZjdhMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMKVshc/E/rOeUv1REjaeD5gF8NU
lev7+JzrhfXGOqXkhKpDtp4gBmlsqPs4mOFDUYZfs0/9V9WQq7rOGVlgfo7/m/f1
xbr99jnfgFb5BFwvxLsSUrJ56V2UQgN1ThSNK3/N8WqZ4m1S71+VuLyv1aGI4D8e
SmiG0uhlplwD2cwak9kLHG0vix649T9KkliRb1s0kI6ke+DAVtfNGg0ZnfdI4HqM
mXQDj+aOgKeq0Ki9lXv7WmZysOvx4lUP8PYFnQaSjKIkxMGjBNMKnVnIBw/CZBv3
pOfAXYmZJ4af37AQGPcY78XnRdV8A/djYPesnxW0fFoe40saoNCKuCSdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjBLcYni8T0v5dY85IgoIGG96IpMB8GA1UdIwQY
MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt
NWUwYWZlYzEzNmIxLzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx
LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcCMCicN
0HuNrlKvetd1Cmr11l85Pt+FnYCG9nj4NAM2NaNe2n/Mex/WRfquGWA4eOP2n/ms
gxkjwukNlT61ddnRVjbRliKMi9wyb8VW2muBUUbUq8o1ajbrdGt8U8TXP/PNkYX/
j6oX/aKj0r19InIjp4QPA6mM38aXfyA2Ordh4TGlERisMkdOnaXTK4v7Ko9AQD94
hVSVZU3GpGeLR+5IkgoXaC7/yxl/ugvFSIhJIAuQEqQCn+y0RmygKmQEQyG/Iqri
LIJkXypzwi9PbOlX+P4lYEdqB7tSkZXIYLTZTZzqrvONWf3OOxPH/2AzprdqzoLv
qlzyVP1SzJoGMw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:25 2026 by rpki-client