Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: JUclfdy+5QaHx2RIOMXO7wSLce1/MkIuRFoig9sxqh4=
Subject key identifier: 70:4A:0B:9D:1E:05:C9:B2:0B:7D:E4:81:00:CF:C2:53:7C:8A:FD:2E
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019F9090D31859CF1983EEBBE1DEB9872E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 15C3
Signing time: Thu 23 Jul 2026 20:00:37 +0000
Manifest this update: Thu 23 Jul 2026 20:00:37 +0000
Manifest next update: Fri 24 Jul 2026 20:00:37 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: TIVlHD12/xQdUqG0m9seOt9fgyDxQqk5FIxz5Wwsj6s=)
2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d3:18:59:cf:19:83:ee:bb:e1:de:b9:87:2e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Jul 23 20:00:37 2026 GMT
Not After : Jul 24 20:00:37 2026 GMT
Subject: CN=704a0b9d1e05c9b20b7de48100cfc2537c8afd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:2f:41:9b:dc:aa:4c:be:fe:bd:79:2c:fa:
4c:cc:25:85:1f:6a:d4:35:0d:d8:42:e3:fb:77:06:
6f:ac:5b:99:13:df:ef:66:71:0f:10:c3:d9:c0:fd:
8d:63:ea:61:5e:b1:8e:89:d2:f1:b8:a2:c0:fc:43:
60:69:1d:23:1c:01:c0:ec:c1:df:14:4d:e9:6b:10:
c6:10:99:c3:6e:24:0b:5c:c6:eb:da:79:ea:19:02:
9b:e1:22:8c:5e:bf:50:2b:0f:25:4d:10:91:8f:7e:
54:8f:11:5c:cd:c3:32:60:0b:e9:7b:a7:e8:7c:0c:
76:65:f4:ef:86:74:3d:f5:3c:d3:d8:1c:e3:af:2d:
47:46:f2:74:7c:0b:72:23:60:73:76:5f:e3:8d:01:
33:8d:5f:57:0e:4e:12:77:34:28:b0:8e:bc:27:87:
10:5f:0b:16:a8:b0:f2:65:a1:d0:4b:c6:a0:71:60:
0f:e7:ed:cf:45:cf:36:4c:cd:43:a0:92:24:07:d5:
7b:d5:cb:8e:35:72:26:ed:2c:b2:65:93:c4:cf:4e:
c1:20:ec:db:ed:a5:4f:ef:f0:ba:51:d3:cd:39:84:
cc:b1:cc:33:f3:40:72:ca:26:c9:71:63:fb:02:a6:
ba:f3:1e:9f:ef:ba:10:f6:a5:7f:7d:6b:99:69:54:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:0B:9D:1E:05:C9:B2:0B:7D:E4:81:00:CF:C2:53:7C:8A:FD:2E
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cc:3b:0d:1b:85:df:dc:6a:19:27:ee:37:11:e3:d3:c1:d4:
1d:c8:b6:d6:ac:8c:a2:aa:4d:12:1a:8e:c3:b2:a5:ac:40:a2:
cd:b1:c0:58:52:aa:6c:f0:eb:15:b6:ce:39:96:68:81:e6:96:
c9:eb:a7:60:0e:c7:30:8f:c6:e1:b0:29:3e:b9:f0:f3:f6:00:
b1:68:4b:d6:b3:04:3f:d9:54:37:ae:18:33:8c:4f:b6:92:27:
1e:50:80:3e:75:25:47:c0:26:90:f3:f8:85:b3:2b:42:58:40:
1c:0f:52:af:2e:fe:2e:85:dd:4e:87:08:4a:57:71:99:bf:1c:
95:09:19:04:1e:c2:12:ca:bc:84:48:1b:e9:e6:80:d2:8c:50:
41:5d:a6:b4:09:6d:39:38:cf:1e:00:61:65:bc:98:8b:c7:12:
ae:1d:86:4e:78:69:bf:c0:c1:80:e2:1a:b8:6d:1c:31:1c:ec:
3f:e0:73:33:c2:b0:4d:f6:4c:5b:c1:17:3b:ce:dc:45:f2:45:
a0:e1:08:ae:1f:05:8d:13:ce:1c:de:0f:91:37:05:c1:52:6e:
f6:3c:58:3c:c7:94:29:f8:2c:e8:5e:4c:50:20:fd:a9:83:6e:
a1:13:12:ba:7e:a2:69:c6:3f:c9:83:42:f0:d6:fe:7e:2d:19:
b9:13:3a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkNMYWc8Zg+674d65hy57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw
ZWVkMDMwHhcNMjYwNzIzMjAwMDM3WhcNMjYwNzI0MjAwMDM3WjAzMTEwLwYDVQQD
Eyg3MDRhMGI5ZDFlMDVjOWIyMGI3ZGU0ODEwMGNmYzI1MzdjOGFmZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ovQZvcqky+/r15LPpMzCWFH2rU
NQ3YQuP7dwZvrFuZE9/vZnEPEMPZwP2NY+phXrGOidLxuKLA/ENgaR0jHAHA7MHf
FE3paxDGEJnDbiQLXMbr2nnqGQKb4SKMXr9QKw8lTRCRj35UjxFczcMyYAvpe6fo
fAx2ZfTvhnQ99TzT2Bzjry1HRvJ0fAtyI2Bzdl/jjQEzjV9XDk4SdzQosI68J4cQ
XwsWqLDyZaHQS8agcWAP5+3PRc82TM1DoJIkB9V71cuONXIm7SyyZZPEz07BIOzb
7aVP7/C6UdPNOYTMscwz80ByyibJcWP7Aqa68x6f77oQ9qV/fWuZaVQdHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBKC50eBcmyC33kgQDPwlN8iv0uMB8GA1UdIwQY
MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt
ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx
LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcw7DRuF
39xqGSfuNxHj08HUHci21qyMoqpNEhqOw7KlrECizbHAWFKqbPDrFbbOOZZogeaW
yeunYA7HMI/G4bApPrnw8/YAsWhL1rMEP9lUN64YM4xPtpInHlCAPnUlR8AmkPP4
hbMrQlhAHA9Sry7+LoXdTocISldxmb8clQkZBB7CEsq8hEgb6eaA0oxQQV2mtAlt
OTjPHgBhZbyYi8cSrh2GTnhpv8DBgOIauG0cMRzsP+BzM8KwTfZMW8EXO87cRfJF
oOEIrh8FjRPOHN4PkTcFwVJu9jxYPMeUKfgs6F5MUCD9qYNuoRMSun6iacY/yYNC
8Nb+fi0ZuRM6EQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:58 2026 by rpki-client