Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: DmbNNoOh1r/Ke81n/1k269oqyLjficocLMdFNrVmmsg=
Subject key identifier: EC:5D:ED:6A:8E:AE:31:90:8F:7B:A0:27:0C:A4:37:AC:E5:4E:95:3C
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019F90C7A0846D0B9123F354BA04B0F96DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 067E
Signing time: Thu 23 Jul 2026 21:00:29 +0000
Manifest this update: Thu 23 Jul 2026 21:00:29 +0000
Manifest next update: Fri 24 Jul 2026 21:00:29 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: xTkXQMB3qEN2yW7m2k23L1I0u/nvLX38nz9Bec4gSbM=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:a0:84:6d:0b:91:23:f3:54:ba:04:b0:f9:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jul 23 21:00:29 2026 GMT
Not After : Jul 24 21:00:29 2026 GMT
Subject: CN=ec5ded6a8eae31908f7ba0270ca437ace54e953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4d:07:c1:4f:8b:5d:56:8a:93:e2:cd:2f:37:
2a:75:36:e0:59:ff:11:2d:6c:11:75:31:b0:c4:09:
4e:0e:7b:6f:c5:ef:e7:ea:ac:36:6e:77:54:fa:a2:
7d:f2:53:b8:7a:33:78:9b:9c:4f:28:07:e0:98:a6:
e7:f7:fd:03:75:bc:50:70:30:00:90:50:d8:74:86:
63:79:17:76:09:9f:9a:41:ab:7d:4a:62:37:8a:99:
fc:ff:98:6b:9b:d5:a0:d0:a5:6b:e9:0a:6f:da:76:
81:a1:00:f3:56:47:16:52:81:6b:07:8b:c1:65:e4:
62:0b:83:06:bd:f0:bc:87:b9:f6:43:44:6d:8a:99:
e1:fa:d9:04:c0:56:7f:2b:fc:03:9d:03:c7:d1:fb:
5d:0b:7b:53:3a:56:c4:5d:cb:70:3d:99:f0:c8:90:
bf:ff:86:95:b6:26:96:64:31:3a:aa:0c:49:14:50:
65:62:5b:17:e2:35:ed:90:61:6f:07:ad:fb:e8:4a:
83:f8:62:8b:bb:76:a2:1d:6a:c6:7b:78:f9:29:67:
78:e3:5d:f4:ef:b7:80:63:18:27:aa:78:0a:8d:9e:
39:49:ea:4c:e6:6b:0e:09:43:1e:d7:b9:ba:83:79:
c8:d0:28:d4:2b:f5:21:86:c7:0a:df:e9:d1:e4:52:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:ED:6A:8E:AE:31:90:8F:7B:A0:27:0C:A4:37:AC:E5:4E:95:3C
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a3:f8:80:34:89:5a:a2:93:9f:ed:30:09:2d:98:16:29:fe:
ab:75:3f:19:0d:cf:6b:0b:ea:75:53:0c:14:ee:ae:25:52:bd:
ff:de:08:9a:51:45:74:8b:bb:9f:f6:0a:7c:5e:af:bb:3f:c5:
60:0e:ce:b3:77:c4:1d:d0:2a:93:3c:3c:7e:2a:db:84:80:9c:
47:69:fb:a1:92:0c:b5:95:d2:b0:11:11:fd:5b:81:5a:3d:cb:
58:65:45:52:59:d1:59:3a:a9:93:5b:92:ac:98:1b:a4:0a:f5:
7b:15:cd:ed:4a:d5:4e:5d:ce:35:95:fc:b0:85:46:dd:62:37:
bb:07:f6:cc:e8:29:4d:f4:a0:31:14:74:df:db:61:8b:c6:a8:
ef:ab:90:f9:79:9a:09:d4:3e:a0:38:ee:d0:d6:36:10:89:a1:
ad:08:31:01:cb:80:fe:8e:69:1e:6f:7a:b9:8d:70:da:0a:6d:
fb:9f:43:52:fe:9f:db:5f:91:88:92:0f:b9:75:25:3e:9d:58:
79:f4:cc:0d:e4:b6:32:61:4a:67:27:7d:59:d8:cd:c5:44:d8:
dd:04:40:82:26:4f:28:6c:48:3b:bb:5c:df:6b:04:d1:76:e3:
a4:45:5b:99:06:b8:2b:0f:cf:5d:df:d8:4f:4f:69:a9:06:18:
0d:39:7e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx6CEbQuRI/NUugSw+W25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjYwNzIzMjEwMDI5WhcNMjYwNzI0MjEwMDI5WjAzMTEwLwYDVQQD
EyhlYzVkZWQ2YThlYWUzMTkwOGY3YmEwMjcwY2E0MzdhY2U1NGU5NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k0HwU+LXVaKk+LNLzcqdTbgWf8R
LWwRdTGwxAlODntvxe/n6qw2bndU+qJ98lO4ejN4m5xPKAfgmKbn9/0DdbxQcDAA
kFDYdIZjeRd2CZ+aQat9SmI3ipn8/5hrm9Wg0KVr6Qpv2naBoQDzVkcWUoFrB4vB
ZeRiC4MGvfC8h7n2Q0Rtipnh+tkEwFZ/K/wDnQPH0ftdC3tTOlbEXctwPZnwyJC/
/4aVtiaWZDE6qgxJFFBlYlsX4jXtkGFvB6376EqD+GKLu3aiHWrGe3j5KWd44130
77eAYxgnqngKjZ45SepM5msOCUMe17m6g3nI0CjUK/UhhscK3+nR5FKhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxd7WqOrjGQj3ugJwykN6zlTpU8MB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaP4gDSJ
WqKTn+0wCS2YFin+q3U/GQ3PawvqdVMMFO6uJVK9/94ImlFFdIu7n/YKfF6vuz/F
YA7Os3fEHdAqkzw8firbhICcR2n7oZIMtZXSsBER/VuBWj3LWGVFUlnRWTqpk1uS
rJgbpAr1exXN7UrVTl3ONZX8sIVG3WI3uwf2zOgpTfSgMRR039thi8ao76uQ+Xma
CdQ+oDju0NY2EImhrQgxAcuA/o5pHm96uY1w2gpt+59DUv6f21+RiJIPuXUlPp1Y
efTMDeS2MmFKZyd9WdjNxUTY3QRAgiZPKGxIO7tc32sE0XbjpEVbmQa4Kw/PXd/Y
T09pqQYYDTl+MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:37 2026 by rpki-client