Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: hYl4cn6VskD6kW8Y5p6S0y05MW5tl4yh6zDCWJhmeBk=
Subject key identifier: 40:EF:F4:9F:5E:55:11:7E:7C:5A:28:FB:C1:42:15:D8:C6:A2:BB:24
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019F8FECA5D9F751861428190B04E3E488E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 17:01:18 +0000
Manifest this update: Thu 23 Jul 2026 17:01:18 +0000
Manifest next update: Fri 24 Jul 2026 17:01:18 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 6b0PR5JjoEj7EU22N98tceEnsZlQuFL+nmSv5xKTfBU=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a5:d9:f7:51:86:14:28:19:0b:04:e3:e4:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jul 23 17:01:18 2026 GMT
Not After : Jul 24 17:01:18 2026 GMT
Subject: CN=40eff49f5e55117e7c5a28fbc14215d8c6a2bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:0b:85:8d:3b:b5:0a:5f:da:d5:86:35:50:
b0:98:f5:5d:3a:36:b4:c4:16:d4:c3:bf:4b:b6:b2:
54:7a:b1:9f:36:b0:29:a4:a3:c0:d0:d3:18:5a:ca:
9e:df:87:7f:23:3c:92:5d:29:c9:45:7d:4c:3d:f5:
1f:ee:d4:1d:91:21:6f:1a:5e:85:2a:49:c6:c6:6d:
13:6c:43:3e:16:f9:6c:66:bd:d9:e6:28:f3:70:01:
17:2c:37:cb:d7:9d:b7:6c:4c:f9:ac:71:1d:b9:f9:
87:2d:1b:40:d8:a3:c9:35:2f:43:c8:2f:d7:e2:db:
fb:75:d7:20:68:c9:9e:77:79:1d:c9:b2:c2:18:50:
e1:e2:83:3c:12:bf:63:e7:ff:6c:6a:3f:b9:15:52:
dd:61:33:fe:5a:e6:2e:d5:9a:a6:b9:58:d3:dd:19:
76:d5:13:ef:71:87:86:4f:97:22:10:20:4c:bc:c8:
ac:00:f2:10:01:70:ca:2e:2a:de:ba:64:2a:6f:4e:
bd:e9:d7:88:77:21:db:63:59:66:b9:e5:17:d6:d0:
4d:16:79:f4:20:18:ed:27:76:17:29:73:73:b0:41:
bd:84:13:5d:bd:57:15:0d:bc:ed:d7:11:8a:27:c0:
49:7f:85:ee:4c:c9:43:06:d8:e5:cf:91:15:10:64:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:F4:9F:5E:55:11:7E:7C:5A:28:FB:C1:42:15:D8:C6:A2:BB:24
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:aa:c5:ed:1e:e0:db:d7:5d:70:90:72:92:cd:c1:52:c1:
2a:58:08:0a:ec:0f:fc:37:06:d4:30:35:92:14:b5:f4:f5:8f:
16:a2:89:3f:b3:b8:3c:8a:af:29:0e:7a:fb:45:e8:10:49:60:
2f:c3:32:27:62:da:2c:25:75:92:53:24:e3:c0:5f:e0:46:7f:
49:cd:86:d4:e6:04:96:45:22:74:64:2b:38:bd:a3:11:e2:56:
52:41:92:35:69:b4:c8:13:81:c6:8e:27:a1:14:55:bf:81:96:
b3:bc:d2:4f:e4:52:cf:e6:32:2e:53:23:97:fe:63:4f:ce:e6:
ec:26:76:8f:ac:cb:c8:45:5c:75:e8:85:e5:ec:1c:18:14:64:
be:51:c2:46:9c:19:05:d9:d7:2b:e0:c1:83:63:f2:30:47:5a:
fb:18:74:29:0f:ec:88:14:ff:7c:e3:2e:35:0d:ad:ec:82:32:
7e:ba:aa:74:54:41:c2:ff:ac:96:3d:5f:94:f9:6d:24:21:52:
25:bc:d4:ae:dc:60:f4:33:d4:10:36:4e:2c:d7:e1:89:e5:19:
ff:db:55:cc:9e:51:8a:6a:36:99:66:3e:fd:fe:1a:57:cb:7a:
52:1c:fd:18:e8:d6:70:28:46:18:a9:df:b4:24:38:0e:60:8d:
bb:9f:09:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7KXZ91GGFCgZCwTj5IjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjYwNzIzMTcwMTE4WhcNMjYwNzI0MTcwMTE4WjAzMTEwLwYDVQQD
Eyg0MGVmZjQ5ZjVlNTUxMTdlN2M1YTI4ZmJjMTQyMTVkOGM2YTJiYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW4LhY07tQpf2tWGNVCwmPVdOja0
xBbUw79LtrJUerGfNrAppKPA0NMYWsqe34d/IzySXSnJRX1MPfUf7tQdkSFvGl6F
KknGxm0TbEM+FvlsZr3Z5ijzcAEXLDfL1523bEz5rHEdufmHLRtA2KPJNS9DyC/X
4tv7ddcgaMmed3kdybLCGFDh4oM8Er9j5/9saj+5FVLdYTP+WuYu1ZqmuVjT3Rl2
1RPvcYeGT5ciECBMvMisAPIQAXDKLireumQqb0696deIdyHbY1lmueUX1tBNFnn0
IBjtJ3YXKXNzsEG9hBNdvVcVDbzt1xGKJ8BJf4XuTMlDBtjlz5EVEGSWZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDv9J9eVRF+fFoo+8FCFdjGorskMB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ92qxe0e
4NvXXXCQcpLNwVLBKlgICuwP/DcG1DA1khS19PWPFqKJP7O4PIqvKQ56+0XoEElg
L8MyJ2LaLCV1klMk48Bf4EZ/Sc2G1OYElkUidGQrOL2jEeJWUkGSNWm0yBOBxo4n
oRRVv4GWs7zST+RSz+YyLlMjl/5jT87m7CZ2j6zLyEVcdeiF5ewcGBRkvlHCRpwZ
BdnXK+DBg2PyMEda+xh0KQ/siBT/fOMuNQ2t7IIyfrqqdFRBwv+slj1flPltJCFS
JbzUrtxg9DPUEDZOLNfhieUZ/9tVzJ5Rimo2mWY+/f4aV8t6Uhz9GOjWcChGGKnf
tCQ4DmCNu58J8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:35 2026 by rpki-client