Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: AEgYwmeZXFoihHr5axwtOXmLVP8V9go5Fc3y4blePlA=
Subject key identifier: 5E:C6:1A:82:E5:22:00:B7:BE:35:FD:FF:E5:36:99:9B:5C:7F:EC:2A
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019F190D1F0D40EFF769720F9B67D997A56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:57 +0000
Manifest this update: Tue 30 Jun 2026 15:01:57 +0000
Manifest next update: Wed 01 Jul 2026 15:01:57 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: 1qr03CC2mbzD/z44Qy+KsDQfwLxB03kEOulAuQcEwVU=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:1f:0d:40:ef:f7:69:72:0f:9b:67:d9:97:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Jun 30 15:01:57 2026 GMT
Not After : Jul 1 15:01:57 2026 GMT
Subject: CN=5ec61a82e52200b7be35fdffe536999b5c7fec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:c1:5f:99:96:a0:8c:df:dd:15:39:9c:ab:
4b:94:09:80:76:cc:30:fa:6f:9d:d1:de:cd:10:99:
90:a9:f3:89:6a:46:36:52:63:14:79:75:5e:a1:c9:
a8:f8:00:5d:bb:0b:cd:3c:22:93:66:71:51:92:84:
18:35:b5:e7:16:c0:39:13:91:7c:11:22:e7:84:f3:
13:b9:d1:29:6e:ce:1a:d7:4d:f6:1c:f7:98:a5:98:
44:e1:21:97:83:61:77:99:8a:f0:11:ca:10:3e:fd:
2f:8d:d8:7e:b6:f6:6f:50:e4:6f:a0:78:57:ae:66:
eb:e5:5c:02:00:30:f6:92:75:6c:35:ff:12:49:aa:
1f:dc:1a:3a:0f:3f:24:c1:ee:a1:7e:12:5f:66:89:
59:98:b9:82:96:8a:95:65:f6:82:cd:73:25:ec:30:
ed:46:ca:93:69:dc:9d:a0:ef:4e:c3:e1:c9:e0:2b:
ed:cf:c0:89:6c:98:ef:69:66:13:75:d1:b1:0b:c7:
aa:78:08:b4:51:06:e2:2e:a2:08:6a:0b:96:a5:be:
2a:e2:08:3e:61:f9:ea:6e:97:fa:16:cb:c8:e5:b0:
bf:34:5d:c7:ce:21:62:a0:e5:2d:c2:a7:cd:30:9d:
f7:ca:19:e2:fc:f8:1f:b5:86:f0:2b:d2:df:39:8f:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:1A:82:E5:22:00:B7:BE:35:FD:FF:E5:36:99:9B:5C:7F:EC:2A
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e2:39:52:1f:44:04:9d:97:50:2e:25:c5:c8:a4:4b:11:0a:
fb:33:26:b0:09:3a:d5:e2:66:2a:d3:0e:ec:48:cc:b5:71:af:
f6:9f:d5:2f:9f:6c:64:a5:20:de:47:2b:9e:03:40:ae:f2:c2:
39:50:69:4a:33:5b:36:a8:31:7e:88:f8:27:ba:58:a8:be:48:
57:e2:d3:11:e4:43:89:4b:de:e2:f8:a7:f3:ff:08:3b:d6:7f:
17:40:5b:37:cb:9b:af:65:95:53:08:47:24:a4:7b:5c:12:57:
9b:6c:f5:a5:af:bc:c7:e7:1f:5e:ca:16:02:7e:fa:f5:bd:bd:
45:98:34:7c:1a:20:19:8e:fe:e1:ca:7d:18:90:37:a0:b2:db:
6b:dc:8b:33:39:77:11:7a:d4:87:0b:bd:a8:8b:21:f0:cf:0b:
d1:f5:ed:0c:45:92:4d:04:3d:e3:33:da:0e:4a:80:7d:53:ac:
f9:73:5b:fd:e7:b9:9d:ad:51:46:07:e0:c9:6c:e8:05:4b:53:
00:40:61:68:09:dd:64:db:0d:b6:96:27:94:0c:53:11:ae:7b:
0b:2b:3b:bf:2b:52:b6:91:ff:c6:77:6a:4f:5c:e1:55:39:a9:
8a:84:2f:13:ac:e7:d1:99:60:4a:44:5a:fa:6d:ea:ed:b2:9b:
6e:27:40:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDR8NQO/3aXIPm2fZl6VsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx
OGUzYzAwHhcNMjYwNjMwMTUwMTU3WhcNMjYwNzAxMTUwMTU3WjAzMTEwLwYDVQQD
Eyg1ZWM2MWE4MmU1MjIwMGI3YmUzNWZkZmZlNTM2OTk5YjVjN2ZlYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5nBX5mWoIzf3RU5nKtLlAmAdsww
+m+d0d7NEJmQqfOJakY2UmMUeXVeocmo+ABduwvNPCKTZnFRkoQYNbXnFsA5E5F8
ESLnhPMTudEpbs4a1032HPeYpZhE4SGXg2F3mYrwEcoQPv0vjdh+tvZvUORvoHhX
rmbr5VwCADD2knVsNf8SSaof3Bo6Dz8kwe6hfhJfZolZmLmCloqVZfaCzXMl7DDt
RsqTadydoO9Ow+HJ4Cvtz8CJbJjvaWYTddGxC8eqeAi0UQbiLqIIaguWpb4q4gg+
Yfnqbpf6FsvI5bC/NF3HziFioOUtwqfNMJ33yhni/PgftYbwK9LfOY/uTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7GGoLlIgC3vjX9/+U2mZtcf+wqMB8GA1UdIwQY
MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt
YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1
LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+I5Uh9E
BJ2XUC4lxcikSxEK+zMmsAk61eJmKtMO7EjMtXGv9p/VL59sZKUg3kcrngNArvLC
OVBpSjNbNqgxfoj4J7pYqL5IV+LTEeRDiUve4vin8/8IO9Z/F0BbN8ubr2WVUwhH
JKR7XBJXm2z1pa+8x+cfXsoWAn769b29RZg0fBogGY7+4cp9GJA3oLLba9yLMzl3
EXrUhwu9qIsh8M8L0fXtDEWSTQQ94zPaDkqAfVOs+XNb/ee5na1RRgfgyWzoBUtT
AEBhaAndZNsNtpYnlAxTEa57Cys7vytStpH/xndqT1zhVTmpioQvE6zn0ZlgSkRa
+m3q7bKbbidA6g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:20 2026 by rpki-client