Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: pnHI+H4Si3Z2p0RhR9yvmbvEEnZMpGkfZZzzdbGaqz8=
Subject key identifier: FA:71:F0:09:B1:D2:A1:B5:26:6A:53:E3:7A:37:8F:2D:44:50:F4:6A
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019EBF5AD337DC43A79E20F6A6353A34084A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 05:01:00 +0000
Manifest this update: Sat 13 Jun 2026 05:01:00 +0000
Manifest next update: Sun 14 Jun 2026 05:01:00 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: EPi1JufW70vitV6uTpu3JS2+gKloWuPtfxkyQucuV2U=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:d3:37:dc:43:a7:9e:20:f6:a6:35:3a:34:08:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jun 13 05:01:00 2026 GMT
Not After : Jun 14 05:01:00 2026 GMT
Subject: CN=fa71f009b1d2a1b5266a53e37a378f2d4450f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:df:fd:0b:cc:f2:9c:45:99:f5:db:cc:4c:
12:75:19:4c:0e:7f:4b:e1:b8:bf:c3:b7:f9:f5:7a:
9e:4f:e5:c9:de:ab:a6:bc:d0:ea:ab:ce:77:41:a1:
99:73:9e:54:a8:7b:8b:36:0f:79:ad:9f:01:f5:f2:
97:a4:73:a5:64:5a:b2:31:c4:69:7d:a0:46:9f:25:
41:17:84:29:60:7e:c1:ae:6a:4a:9c:72:bb:d9:dd:
14:d0:b3:4a:af:41:3f:5f:19:d3:f7:cb:bb:34:98:
08:29:fb:ea:93:53:28:7d:f0:a3:7c:b1:b2:39:92:
17:6c:40:c1:8e:9d:6c:92:25:46:8c:66:f1:c6:4f:
d4:0c:7d:ce:dc:48:dd:91:2e:a3:52:c9:d9:d1:95:
22:4d:df:ed:9f:f7:16:8f:22:a3:a7:93:57:c0:87:
4d:be:84:45:1b:cf:e8:5d:ed:d2:91:9d:8f:26:70:
64:14:4e:58:25:fa:aa:22:83:5b:8a:2f:46:ff:8b:
75:de:fe:41:56:d9:20:7f:a9:00:7f:d7:4a:9e:e7:
e4:f8:b6:19:61:25:01:46:66:84:9d:83:94:fb:9b:
c4:ab:9f:a5:01:89:3f:bd:ef:e0:43:99:01:44:12:
5c:45:6f:4f:e5:13:18:7b:46:11:6e:18:e7:00:99:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:F0:09:B1:D2:A1:B5:26:6A:53:E3:7A:37:8F:2D:44:50:F4:6A
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:58:64:e1:65:f5:92:34:ac:22:f2:39:5a:2c:d6:5e:b1:
c0:90:5e:73:a8:9e:86:29:b9:ef:78:09:3e:f7:57:53:70:b2:
6c:4d:65:95:d7:56:72:5e:b1:ce:b8:56:49:19:e2:82:aa:72:
c9:54:30:28:d4:09:d3:df:a6:70:60:ef:07:fe:90:20:16:83:
6d:e4:f2:4d:8b:8d:81:f9:10:9e:8a:cb:3d:1c:54:4b:d5:24:
35:38:1c:d0:86:66:3c:04:10:80:3b:ec:ec:0c:61:a0:35:9c:
d4:37:b2:87:72:f9:9e:d4:68:af:60:48:d4:39:98:62:f6:ac:
dc:05:39:74:5b:2e:47:4e:ca:d9:76:9b:50:4e:30:47:9c:46:
61:65:ed:d5:2a:e0:9a:db:ad:ce:7c:17:96:2a:4d:19:01:3a:
b9:61:85:6f:20:80:77:dd:5c:38:7e:ed:ae:fb:6f:22:05:42:
dd:bb:c2:0b:2b:92:e5:b5:2a:79:17:d3:ec:f3:89:12:29:56:
4d:a1:58:ce:41:6b:dd:2c:f1:ee:be:da:9e:f8:1c:43:48:12:
3b:06:a4:41:58:77:d8:06:1c:25:c0:c8:c3:ac:e3:9e:05:09:
f8:bb:46:5f:cf:30:71:9c:26:37:40:06:9c:f1:1d:af:24:d6:
9a:1e:4c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WtM33EOnniD2pjU6NAhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjYwNjEzMDUwMTAwWhcNMjYwNjE0MDUwMTAwWjAzMTEwLwYDVQQD
EyhmYTcxZjAwOWIxZDJhMWI1MjY2YTUzZTM3YTM3OGYyZDQ0NTBmNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7f/QvM8pxFmfXbzEwSdRlMDn9L
4bi/w7f59XqeT+XJ3qumvNDqq853QaGZc55UqHuLNg95rZ8B9fKXpHOlZFqyMcRp
faBGnyVBF4QpYH7BrmpKnHK72d0U0LNKr0E/XxnT98u7NJgIKfvqk1MoffCjfLGy
OZIXbEDBjp1skiVGjGbxxk/UDH3O3EjdkS6jUsnZ0ZUiTd/tn/cWjyKjp5NXwIdN
voRFG8/oXe3SkZ2PJnBkFE5YJfqqIoNbii9G/4t13v5BVtkgf6kAf9dKnufk+LYZ
YSUBRmaEnYOU+5vEq5+lAYk/ve/gQ5kBRBJcRW9P5RMYe0YRbhjnAJnN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpx8Amx0qG1JmpT43o3jy1EUPRqMB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6FYZOFl
9ZI0rCLyOVos1l6xwJBec6iehim573gJPvdXU3CybE1llddWcl6xzrhWSRnigqpy
yVQwKNQJ09+mcGDvB/6QIBaDbeTyTYuNgfkQnorLPRxUS9UkNTgc0IZmPAQQgDvs
7AxhoDWc1Deyh3L5ntRor2BI1DmYYvas3AU5dFsuR07K2XabUE4wR5xGYWXt1Srg
mtutznwXlipNGQE6uWGFbyCAd91cOH7trvtvIgVC3bvCCyuS5bUqeRfT7POJEilW
TaFYzkFr3Szx7r7anvgcQ0gSOwakQVh32AYcJcDIw6zjngUJ+LtGX88wcZwmN0AG
nPEdryTWmh5MVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:35 2026 by rpki-client