Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: stBBt0KRMSSp6XYCzYjGxk992qHkLMf2PhivCAOmyog=
Subject key identifier: 2C:85:18:F3:97:52:DB:C8:CD:F0:19:F3:75:AB:BF:45:13:B0:CC:7D
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019EC06D7870661ACA1D5C85FA2A3C674BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0EA2
Signing time: Sat 13 Jun 2026 10:01:00 +0000
Manifest this update: Sat 13 Jun 2026 10:01:00 +0000
Manifest next update: Sun 14 Jun 2026 10:01:00 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: s6PpBlEi2go8J+JDix6uRib4EWAqMeGi5x8QLGN/wPA=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:78:70:66:1a:ca:1d:5c:85:fa:2a:3c:67:4b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Jun 13 10:01:00 2026 GMT
Not After : Jun 14 10:01:00 2026 GMT
Subject: CN=2c8518f39752dbc8cdf019f375abbf4513b0cc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:12:57:42:f6:bf:43:c9:2d:04:9f:5f:f2:
97:6c:90:0d:1d:f2:8c:e5:48:64:21:9d:28:8e:b3:
5f:c4:d7:29:9d:48:27:c1:d9:c8:c8:d7:8f:16:2a:
f0:b6:91:eb:84:b5:a8:9d:19:57:00:3a:18:e2:c0:
e9:98:5d:3e:72:16:60:c0:52:a3:22:cf:a5:7c:0e:
b1:3f:49:e2:46:d7:02:e6:f3:b1:4d:a6:11:03:2c:
07:44:b5:6a:e4:d2:55:e4:63:d6:1e:35:c9:62:da:
6c:23:bf:40:5b:71:00:f7:8f:00:b6:1b:46:b4:28:
02:7b:dc:17:07:16:98:40:0a:21:97:36:c3:22:6e:
32:90:f9:b0:90:ae:09:9e:f1:f9:af:9d:f5:8b:d4:
b0:21:2a:18:e7:26:2b:d9:83:5a:51:23:18:5f:36:
96:2f:fb:cc:72:8a:53:dc:bd:be:5b:7c:58:ee:77:
52:01:d1:0b:dd:56:6b:bf:60:1e:b2:36:b4:97:d6:
d3:12:ae:80:55:86:5c:3e:ab:2c:6e:0f:7f:c8:81:
d0:ab:77:8a:23:8f:69:37:0f:c9:64:06:ca:bf:76:
44:78:e2:26:8b:c7:f5:e8:91:be:08:a9:ea:75:53:
53:e2:da:0a:10:97:32:76:bd:18:4f:a7:41:c4:7d:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:18:F3:97:52:DB:C8:CD:F0:19:F3:75:AB:BF:45:13:B0:CC:7D
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c5:25:bb:6d:89:cb:3e:c0:bc:41:c4:db:53:53:9d:e6:9e:
77:15:eb:78:47:65:1d:78:ed:63:2e:60:46:9f:aa:b5:3f:07:
8b:8a:bc:55:b4:46:4a:af:63:40:08:c4:ea:5b:66:f6:09:92:
d4:c3:4d:94:d1:95:cb:bc:5a:b6:ed:2d:9c:e1:66:99:c3:ec:
a9:b4:f4:b7:05:56:7f:22:79:d1:ed:25:89:15:83:e5:61:2e:
5b:64:7d:c1:6e:79:ab:72:d7:44:8a:79:10:27:6c:8f:88:d9:
dc:28:d7:b7:5f:6e:3c:e8:8b:0a:c7:0e:fa:2e:f4:c5:60:a8:
85:86:cc:96:e4:f4:0e:c4:f1:5e:e6:13:f9:ca:f1:a5:e8:84:
42:f5:f0:8a:2e:36:63:70:ac:24:92:15:3f:d2:b4:c9:47:ce:
df:7b:ec:6e:d6:32:fb:38:28:2f:1b:7b:7c:a9:91:eb:43:7e:
b1:e1:d0:88:86:d0:88:97:95:c1:5b:bc:01:a5:ee:05:09:31:
be:b8:ab:9f:b4:5c:2c:8e:35:66:95:1e:a3:af:42:e0:2c:5c:
2e:39:7d:de:74:ab:e2:56:58:96:ae:6c:c6:9b:36:6b:ac:55:
80:7d:e7:55:82:2f:b1:80:65:63:f1:21:33:1d:95:1a:1f:21:
21:88:1a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbXhwZhrKHVyF+io8Z0vmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzBkNjk0ZDU5ZDdkMzZiYTQyMWEzMDUwZjRlYzdkZDM3
ODFlZmQwHhcNMjYwNjEzMTAwMTAwWhcNMjYwNjE0MTAwMTAwWjAzMTEwLwYDVQQD
EygyYzg1MThmMzk3NTJkYmM4Y2RmMDE5ZjM3NWFiYmY0NTEzYjBjYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I0SV0L2v0PJLQSfX/KXbJANHfKM
5UhkIZ0ojrNfxNcpnUgnwdnIyNePFirwtpHrhLWonRlXADoY4sDpmF0+chZgwFKj
Is+lfA6xP0niRtcC5vOxTaYRAywHRLVq5NJV5GPWHjXJYtpsI79AW3EA948AthtG
tCgCe9wXBxaYQAohlzbDIm4ykPmwkK4JnvH5r531i9SwISoY5yYr2YNaUSMYXzaW
L/vMcopT3L2+W3xY7ndSAdEL3VZrv2Aesja0l9bTEq6AVYZcPqssbg9/yIHQq3eK
I49pNw/JZAbKv3ZEeOImi8f16JG+CKnqdVNT4toKEJcydr0YT6dBxH2FowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyFGPOXUtvIzfAZ83Wrv0UTsMx9MB8GA1UdIwQY
MBaAFNTA1pTVnX02ukIaMFD07H3TeB79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgt
YTc5NTEwZTYxM2U4LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgtYTc5NTEwZTYxM2U4
LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcUlu22J
yz7AvEHE21NTneaedxXreEdlHXjtYy5gRp+qtT8Hi4q8VbRGSq9jQAjE6ltm9gmS
1MNNlNGVy7xatu0tnOFmmcPsqbT0twVWfyJ50e0liRWD5WEuW2R9wW55q3LXRIp5
ECdsj4jZ3CjXt19uPOiLCscO+i70xWCohYbMluT0DsTxXuYT+crxpeiEQvXwii42
Y3CsJJIVP9K0yUfO33vsbtYy+zgoLxt7fKmR60N+seHQiIbQiJeVwVu8AaXuBQkx
vrirn7RcLI41ZpUeo69C4CxcLjl93nSr4lZYlq5sxps2a6xVgH3nVYIvsYBlY/Eh
Mx2VGh8hIYgaog==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:25 2026 by rpki-client