Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: XA4nryKOXOa+ElB0hTMveElXSow27H1aIAHuD0NAnoE=
Subject key identifier: E6:32:14:0D:2C:B7:8A:11:E8:33:68:48:99:78:6A:23:C0:1E:56:5F
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019F9E15D1EECFA143CE9CB63ED28EA86275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 0205
Signing time: Sun 26 Jul 2026 11:00:57 +0000
Manifest this update: Sun 26 Jul 2026 11:00:57 +0000
Manifest next update: Mon 27 Jul 2026 11:00:57 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: Hd3l2YsVo3AJHaS8/E67s4G6AJj4y+Aq6tEqJSRvsEk=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:d1:ee:cf:a1:43:ce:9c:b6:3e:d2:8e:a8:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Jul 26 11:00:57 2026 GMT
Not After : Jul 27 11:00:57 2026 GMT
Subject: CN=e632140d2cb78a11e833684899786a23c01e565f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:6a:40:45:01:da:48:99:0a:c8:d0:31:7c:
4b:a4:42:81:a0:aa:2b:f5:47:de:81:77:28:88:75:
e0:e6:f1:0c:2f:96:29:61:0e:b8:71:8d:09:92:86:
eb:65:05:07:6d:83:30:bf:a3:72:89:01:6a:b7:54:
b1:ba:86:bb:fd:ce:67:95:b1:1a:05:6b:5f:2e:f4:
c8:0f:d1:29:d8:1e:2e:0f:ed:2d:e8:a4:2e:73:12:
e0:1c:d8:96:7d:5f:49:54:6b:e5:e4:c7:84:30:7b:
84:10:1a:31:ca:3d:19:2f:08:79:ff:27:59:27:0f:
c1:47:65:ec:cd:8b:03:fa:99:84:38:1a:70:90:e4:
66:3f:3f:93:80:0d:db:21:ad:04:15:b3:a0:11:db:
e9:dc:f8:a5:81:e6:98:ed:05:d8:31:d9:87:ba:72:
11:31:31:b4:22:ea:7c:d8:68:e5:fa:25:7f:b0:9d:
19:15:3e:4e:27:a2:db:17:61:85:98:1b:8f:f9:2b:
4e:c5:0b:d4:a3:56:b0:69:0e:b5:3e:31:36:31:db:
bb:ce:c2:d8:bd:25:66:3c:d2:02:d2:cf:e2:b1:8d:
c4:bc:05:91:0f:5d:dc:6b:e2:f5:95:15:7e:f1:f4:
58:08:51:f0:2a:e0:3c:91:62:0a:3f:59:56:f7:97:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:32:14:0D:2C:B7:8A:11:E8:33:68:48:99:78:6A:23:C0:1E:56:5F
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b1:ff:75:20:bb:b2:64:93:33:dd:fc:ac:31:db:bb:fb:45:
7d:94:3c:60:7b:0d:70:2d:f0:d8:12:45:38:33:ee:85:4c:92:
21:5a:ea:64:07:d2:92:b0:3d:fa:ef:73:b8:f3:26:92:1a:03:
aa:80:11:3b:dd:56:a1:aa:92:53:51:fe:4c:28:b9:26:a3:75:
d7:57:b8:f2:74:a8:bb:49:f7:8e:8a:82:71:95:ca:64:11:fe:
85:aa:90:60:36:34:94:08:f9:4c:34:a4:37:4a:a2:4e:54:ed:
8b:42:b9:f6:a0:c2:f9:33:5a:7e:5f:2d:5a:61:31:53:9b:a4:
0e:87:ed:ff:69:08:8c:d2:d5:f6:a6:24:46:b9:a6:1c:80:ac:
ab:61:54:b9:b0:a4:10:00:39:4b:75:7d:a3:0f:01:8b:f8:53:
28:1e:a2:ef:e8:18:dc:04:3d:8e:8f:00:5c:39:8f:4b:92:f9:
24:6c:32:db:8b:76:5a:43:7b:3c:5d:7b:a0:ab:50:d4:84:30:
ae:cf:74:6e:51:f7:d2:3e:12:ef:13:79:67:44:eb:e6:0f:60:
2e:8c:05:bf:87:0f:8d:b2:38:b6:f4:87:ff:5b:4b:4f:be:b8:
45:90:87:95:02:e3:d1:75:06:0e:f6:83:c7:e2:7a:54:66:6d:
aa:7e:15:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eFdHuz6FDzpy2PtKOqGJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjBkNjJkZWUzYTE0YTA2ZTUyYjdlZjdhMDgzMDMzOGQ5
ZDc3NTEwHhcNMjYwNzI2MTEwMDU3WhcNMjYwNzI3MTEwMDU3WjAzMTEwLwYDVQQD
EyhlNjMyMTQwZDJjYjc4YTExZTgzMzY4NDg5OTc4NmEyM2MwMWU1NjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW1qQEUB2kiZCsjQMXxLpEKBoKor
9UfegXcoiHXg5vEML5YpYQ64cY0JkobrZQUHbYMwv6NyiQFqt1Sxuoa7/c5nlbEa
BWtfLvTID9Ep2B4uD+0t6KQucxLgHNiWfV9JVGvl5MeEMHuEEBoxyj0ZLwh5/ydZ
Jw/BR2XszYsD+pmEOBpwkORmPz+TgA3bIa0EFbOgEdvp3PilgeaY7QXYMdmHunIR
MTG0Iup82Gjl+iV/sJ0ZFT5OJ6LbF2GFmBuP+StOxQvUo1awaQ61PjE2Mdu7zsLY
vSVmPNIC0s/isY3EvAWRD13ca+L1lRV+8fRYCFHwKuA8kWIKP1lW95dt1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYyFA0st4oR6DNoSJl4aiPAHlZfMB8GA1UdIwQY
MBaAFA3w1i3uOhSgblK373oIMDONnXdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMt
NTE4NGNkNmZjMjEzLzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMtNTE4NGNkNmZjMjEz
LzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7H/dSC7
smSTM938rDHbu/tFfZQ8YHsNcC3w2BJFODPuhUySIVrqZAfSkrA9+u9zuPMmkhoD
qoARO91WoaqSU1H+TCi5JqN111e48nSou0n3joqCcZXKZBH+haqQYDY0lAj5TDSk
N0qiTlTti0K59qDC+TNafl8tWmExU5ukDoft/2kIjNLV9qYkRrmmHICsq2FUubCk
EAA5S3V9ow8Bi/hTKB6i7+gY3AQ9jo8AXDmPS5L5JGwy24t2WkN7PF17oKtQ1IQw
rs90blH30j4S7xN5Z0Tr5g9gLowFv4cPjbI4tvSH/1tLT764RZCHlQLj0XUGDvaD
x+J6VGZtqn4VQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 19:21:21 2026 by rpki-client