Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: eMXD+CfGpXK78IFcEM+eGX3mCShynjq/a8d8oTuamg0=
Subject key identifier: D1:E1:60:EE:32:8F:BB:D3:81:DB:6F:40:F1:04:05:A9:51:B9:6E:F3
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019F916D8159A15112051A676EAE2C15B21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0E6C
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: jtaOz17mD8sNmdc7m5NYlIrwq1G46g63qyTPAh5zB5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:81:59:a1:51:12:05:1a:67:6e:ae:2c:15:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=d1e160ee328fbbd381db6f40f10405a951b96ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:53:3b:97:31:1b:fc:5d:6a:c3:69:6f:f6:
bb:32:fa:13:77:f3:8e:b0:1c:42:c2:8f:0d:79:de:
a1:3d:9d:77:1e:67:74:bf:b3:2a:49:11:6c:f4:4d:
90:b7:41:54:f4:c5:13:3e:86:92:29:93:bf:eb:4c:
7c:9f:f6:99:0f:3a:2b:a6:11:8b:3f:3c:5d:4f:9b:
f9:93:90:6b:4a:92:b6:8a:7a:38:87:1b:96:57:b4:
fb:1d:03:a8:49:15:d2:ac:cb:d0:38:df:be:8e:fc:
4c:39:9f:d8:87:99:eb:d1:3e:a2:a0:e4:2e:08:aa:
be:89:be:61:f2:4f:cf:ef:42:bb:95:f2:21:05:0a:
fe:ec:04:77:4a:d4:48:e2:42:b8:8e:a8:6e:19:2b:
04:34:87:7d:fb:91:6c:27:b0:79:62:68:2e:06:f7:
92:9c:fa:82:ae:78:96:0a:59:92:f7:96:ae:ca:3f:
1e:dd:73:83:ee:4c:97:6c:0a:99:97:21:87:ce:3f:
2d:62:7e:bd:32:a4:c9:c0:b2:08:94:5d:06:01:77:
04:b8:8a:45:07:4e:49:42:5b:48:ad:f5:db:1c:56:
41:78:35:d2:f7:6e:ca:6f:56:ff:dd:a8:55:2e:71:
f3:a7:b9:af:ef:36:16:2b:de:4f:c5:3b:a0:0c:b0:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:60:EE:32:8F:BB:D3:81:DB:6F:40:F1:04:05:A9:51:B9:6E:F3
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dc:4e:b5:a5:18:87:42:3d:ca:15:9f:f2:96:15:5d:53:f8:
2c:c8:df:2c:71:6f:3d:e5:33:10:74:4c:5b:96:1f:9d:08:86:
ba:66:70:6b:8c:42:9a:ac:2a:67:56:e7:7f:a6:ed:13:95:7c:
0c:b5:7a:25:d9:e8:88:b1:61:c6:c0:64:b2:b0:16:0f:77:af:
5d:b5:6b:89:77:66:93:3f:11:db:aa:92:fa:f5:30:0d:2b:27:
7c:da:02:32:5f:e6:76:23:d3:ad:d4:ff:28:03:9b:89:44:e2:
8a:f7:44:2c:40:5d:57:8b:05:90:0f:cf:2e:fc:66:17:01:2b:
5f:1d:48:4b:87:b3:bb:a4:83:a8:85:a4:cf:3c:0e:ce:f3:f1:
e2:72:6b:97:5c:73:73:55:9f:02:d5:cb:07:81:eb:f5:6f:bf:
8e:ea:c6:fb:ec:1d:2e:11:29:38:0b:9f:51:8d:31:e0:d4:fd:
3c:cd:03:b9:cd:a8:76:f0:d8:15:f4:91:98:8c:f7:cc:9d:9c:
9f:4f:21:5a:e0:df:aa:24:dc:94:42:d8:09:e5:68:28:0d:f6:
d0:20:f1:4e:69:d3:e4:20:2b:78:61:74:04:f9:03:ab:cb:b0:
d2:6a:ce:35:f3:4d:19:4d:a5:b2:96:31:85:36:bf:fa:cf:e4:
71:e7:fd:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbYFZoVESBRpnbq4sFbIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNzI0MDAwMTQwWhcNMjYwNzI1MDAwMTQwWjAzMTEwLwYDVQQD
EyhkMWUxNjBlZTMyOGZiYmQzODFkYjZmNDBmMTA0MDVhOTUxYjk2ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BTO5cxG/xdasNpb/a7MvoTd/OO
sBxCwo8Ned6hPZ13Hmd0v7MqSRFs9E2Qt0FU9MUTPoaSKZO/60x8n/aZDzorphGL
PzxdT5v5k5BrSpK2ino4hxuWV7T7HQOoSRXSrMvQON++jvxMOZ/Yh5nr0T6ioOQu
CKq+ib5h8k/P70K7lfIhBQr+7AR3StRI4kK4jqhuGSsENId9+5FsJ7B5YmguBveS
nPqCrniWClmS95auyj8e3XOD7kyXbAqZlyGHzj8tYn69MqTJwLIIlF0GAXcEuIpF
B05JQltIrfXbHFZBeDXS927Kb1b/3ahVLnHzp7mv7zYWK95PxTugDLCFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHhYO4yj7vTgdtvQPEEBalRuW7zMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdxOtaUY
h0I9yhWf8pYVXVP4LMjfLHFvPeUzEHRMW5YfnQiGumZwa4xCmqwqZ1bnf6btE5V8
DLV6JdnoiLFhxsBksrAWD3evXbVriXdmkz8R26qS+vUwDSsnfNoCMl/mdiPTrdT/
KAObiUTiivdELEBdV4sFkA/PLvxmFwErXx1IS4ezu6SDqIWkzzwOzvPx4nJrl1xz
c1WfAtXLB4Hr9W+/jurG++wdLhEpOAufUY0x4NT9PM0Duc2odvDYFfSRmIz3zJ2c
n08hWuDfqiTclELYCeVoKA320CDxTmnT5CAreGF0BPkDq8uw0mrONfNNGU2lspYx
hTa/+s/kcef9Ow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:12 2026 by rpki-client