Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: /vmqQ5BheCa2+Z8yk792daJXhSnOizi8NV2m200XShM=
Subject key identifier: 98:2F:61:8A:18:56:3B:4C:8A:3F:92:28:70:D8:26:CE:ED:1B:A4:93
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019EBF5A3391E534BB4D08D0F5E6329ABA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 05:00:20 +0000
Manifest this update: Sat 13 Jun 2026 05:00:20 +0000
Manifest next update: Sun 14 Jun 2026 05:00:20 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: 5VPqh18JXcxE3q1bKr9kfNQe2xk2qpZHaF3ND1f7gfs=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:33:91:e5:34:bb:4d:08:d0:f5:e6:32:9a:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jun 13 05:00:20 2026 GMT
Not After : Jun 14 05:00:20 2026 GMT
Subject: CN=982f618a18563b4c8a3f922870d826ceed1ba493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:a6:71:f3:4e:cb:e0:ae:25:7f:5f:31:92:
af:e8:46:cc:8c:7a:4c:3d:bf:ad:ca:ba:94:48:ea:
65:81:6b:09:72:43:70:47:6f:4d:c3:98:91:1f:99:
6d:b6:f9:21:e7:1e:83:e9:30:70:e6:6e:87:7b:05:
1a:11:ff:f4:0f:db:da:74:0e:61:ab:4a:ee:37:14:
2a:09:29:d5:c6:d6:4a:99:aa:71:86:00:74:d4:a8:
7b:96:c0:a5:6d:62:12:f9:72:7c:a1:fc:17:40:3e:
2b:fc:8d:bc:ec:19:12:0d:ba:1b:bb:4e:21:f7:d4:
29:80:c4:e5:06:a0:78:42:ce:87:97:b1:77:c8:ae:
3f:c2:21:63:fa:c3:53:39:b1:36:0f:6e:95:ff:d6:
6f:0e:51:d7:30:a0:52:ac:3c:5f:0b:69:d6:2f:cf:
19:32:b9:29:ae:f0:aa:3d:28:50:c4:ff:f6:fe:7b:
d1:80:2b:63:54:e5:a3:95:6d:c9:99:4a:ae:81:0e:
b5:17:b0:b7:9b:7f:6e:73:44:02:22:ee:d6:42:53:
ac:ad:65:00:d7:c9:bb:26:fb:56:c4:f9:2d:b3:85:
fc:c0:a3:bc:f4:7b:8a:40:7f:da:dd:db:39:12:80:
f0:17:3f:15:19:7f:7f:15:55:cb:68:4c:d8:7a:73:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2F:61:8A:18:56:3B:4C:8A:3F:92:28:70:D8:26:CE:ED:1B:A4:93
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b0:63:ab:65:64:fb:09:88:53:c8:6a:86:f4:cb:c5:4c:96:
34:10:27:9e:92:6d:48:ff:06:5d:49:8e:81:91:26:ec:40:b1:
35:2d:75:da:ad:d6:df:10:38:af:0a:c8:82:96:b6:8a:8a:98:
e3:9f:28:0e:f0:0b:3b:53:b8:39:2a:57:93:25:66:a7:68:ae:
fd:50:e0:b5:01:bf:25:80:7e:83:f2:88:2f:fc:76:1c:e8:05:
c3:28:11:6e:9b:e0:76:ae:99:93:34:3b:0f:72:ac:78:93:e4:
91:58:f4:7b:cc:e6:47:e4:e9:42:db:a8:5b:0b:69:91:f5:1d:
3a:e2:47:07:4d:a3:db:c4:b8:14:d2:f3:37:f3:99:e3:32:c5:
65:12:65:6f:63:ba:30:01:87:0b:ff:96:eb:51:31:f5:77:2a:
5f:21:5f:a6:d5:a2:c2:ae:73:d3:fa:cf:4a:de:9a:1a:f8:37:
d9:1b:79:38:c5:d6:52:da:4d:f0:aa:e0:df:4b:48:47:50:06:
35:11:15:56:fb:0f:a7:5f:c5:90:5f:17:41:4c:78:31:6f:3c:
e3:90:f1:15:b5:dd:8e:28:27:c5:00:8d:b6:5f:f1:e3:ff:63:
e7:cf:1a:c3:de:45:b8:39:a2:09:de:05:32:c9:79:12:86:1c:
86:67:9d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WjOR5TS7TQjQ9eYymrqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4
MzJkMGMwHhcNMjYwNjEzMDUwMDIwWhcNMjYwNjE0MDUwMDIwWjAzMTEwLwYDVQQD
Eyg5ODJmNjE4YTE4NTYzYjRjOGEzZjkyMjg3MGQ4MjZjZWVkMWJhNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSymcfNOy+CuJX9fMZKv6EbMjHpM
Pb+tyrqUSOplgWsJckNwR29Nw5iRH5lttvkh5x6D6TBw5m6HewUaEf/0D9vadA5h
q0ruNxQqCSnVxtZKmapxhgB01Kh7lsClbWIS+XJ8ofwXQD4r/I287BkSDbobu04h
99QpgMTlBqB4Qs6Hl7F3yK4/wiFj+sNTObE2D26V/9ZvDlHXMKBSrDxfC2nWL88Z
MrkprvCqPShQxP/2/nvRgCtjVOWjlW3JmUqugQ61F7C3m39uc0QCIu7WQlOsrWUA
18m7JvtWxPkts4X8wKO89HuKQH/a3ds5EoDwFz8VGX9/FVXLaEzYenMC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgvYYoYVjtMij+SKHDYJs7tG6STMB8GA1UdIwQY
MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt
NWUwYWZlYzEzNmIxLzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx
LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprBjq2Vk
+wmIU8hqhvTLxUyWNBAnnpJtSP8GXUmOgZEm7ECxNS112q3W3xA4rwrIgpa2ioqY
458oDvALO1O4OSpXkyVmp2iu/VDgtQG/JYB+g/KIL/x2HOgFwygRbpvgdq6ZkzQ7
D3KseJPkkVj0e8zmR+TpQtuoWwtpkfUdOuJHB02j28S4FNLzN/OZ4zLFZRJlb2O6
MAGHC/+W61Ex9XcqXyFfptWiwq5z0/rPSt6aGvg32Rt5OMXWUtpN8Krg30tIR1AG
NREVVvsPp1/FkF8XQUx4MW8845DxFbXdjignxQCNtl/x4/9j588aw95FuDmiCd4F
Msl5EoYchmedSA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:24 2026 by rpki-client