Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
File: DUlCfYpEd823aAhhqexQ3HMhaYI.mft (raw, json)
Hash identifier: oRmaJa1g2RC+mrVqgFkS3fo/cFjvqiZA4uoKeyt3gNc=
Subject key identifier: 22:33:16:6D:BC:7C:DB:C8:C6:8C:63:B5:DD:FF:26:95:FA:E6:EC:76
Authority key identifier: 0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
Certificate issuer: /CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Certificate serial: 01A147609C4DB47CAF564F5F514188E81A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
Manifest number: 0B35
Signing time: Sat 17 Oct 2026 01:01:16 +0000
Manifest this update: Sat 17 Oct 2026 01:01:16 +0000
Manifest next update: Sun 18 Oct 2026 01:01:16 +0000
Files and hashes: 1: DUlCfYpEd823aAhhqexQ3HMhaYI.crl (hash: PtIrhQvOs+79EXrvVGzJSIaLpouUEpINpgdy2FIAUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:9c:4d:b4:7c:af:56:4f:5f:51:41:88:e8:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Validity
Not Before: Oct 17 01:01:16 2026 GMT
Not After : Oct 18 01:01:16 2026 GMT
Subject: CN=2233166dbc7cdbc8c68c63b5ddff2695fae6ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:65:57:9d:0b:ec:44:c3:dd:a3:6a:d5:83:
60:5f:23:29:03:fb:f6:3d:bd:8a:79:ff:2b:13:29:
21:1f:67:be:de:ae:f6:ad:4e:1a:ca:5b:3e:bb:c8:
31:91:73:d0:34:da:36:d3:47:c7:df:48:5f:2d:68:
f6:12:ae:20:85:2d:42:b2:46:f2:2b:88:1d:7a:b2:
df:0e:41:47:7d:30:e6:09:25:71:0d:45:44:4b:f4:
82:b8:47:e6:bd:47:92:c3:46:bf:33:a3:cf:e0:6b:
8b:ce:45:c1:76:be:f5:87:54:7f:4c:c8:4a:a7:d3:
46:d5:f6:87:04:31:96:c3:3f:56:c0:53:8d:5c:da:
df:21:9c:65:8e:54:9b:e4:94:fb:54:e8:a4:75:d3:
8b:37:02:39:b5:d2:84:eb:33:7b:02:df:cb:4f:61:
38:35:ed:25:ca:7d:4c:48:69:ef:85:49:c6:04:8c:
25:a2:01:4e:42:b5:fe:53:f6:f9:32:c7:1a:04:7b:
ac:f7:a7:6f:97:d1:a6:a8:94:77:fc:fb:39:2a:8f:
3c:95:7e:75:85:c2:a8:45:ef:75:d2:ab:1e:bc:02:
a6:9b:a3:fd:7a:12:6b:f5:11:ab:f2:49:6d:f9:46:
61:70:a1:a2:8e:18:84:e7:ee:2c:23:44:22:bc:2c:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:16:6D:BC:7C:DB:C8:C6:8C:63:B5:DD:FF:26:95:FA:E6:EC:76
X509v3 Authority Key Identifier:
keyid:0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:3f:aa:2d:72:e8:e1:2f:3c:c6:63:90:4e:3a:72:5b:99:
38:de:bd:1a:79:11:7a:a6:03:dc:7b:41:1b:98:2a:e5:d9:c4:
5e:ec:49:5f:74:41:08:cd:b1:91:64:27:98:48:98:0d:76:3c:
4b:6e:d6:58:2e:2a:c9:89:0a:aa:dc:13:83:be:90:7b:4b:ef:
80:35:0b:b2:5e:a0:d3:e6:3c:38:ab:02:79:30:c5:75:df:d2:
f8:de:b5:c6:77:4c:20:9e:00:63:6a:09:ec:87:dc:09:ff:ec:
fb:95:44:4f:9e:20:0d:99:88:46:7a:6d:19:d0:f0:34:5f:6e:
2e:14:e8:3d:0f:7e:a6:bc:c8:42:85:16:8c:c2:01:24:2f:aa:
96:55:66:35:15:db:b4:5f:0c:21:43:bc:2f:d8:35:e1:7b:c6:
3e:57:24:9d:d9:33:c5:2d:3c:3c:48:b5:e8:f2:a3:90:a0:f1:
2a:80:e7:4f:c7:93:9b:08:68:a7:7a:e6:8b:a5:85:fd:2b:71:
c0:aa:2b:30:f1:40:79:27:ea:9c:ef:c7:94:9f:9e:30:ef:46:
4e:cb:95:2a:34:3f:03:b8:e4:3c:7e:a6:5b:f7:41:dc:44:7b:
80:5b:df:ef:3d:43:15:4e:f4:85:48:25:5f:57:50:96:e9:2e:
eb:37:11:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHYJxNtHyvVk9fUUGI6Bp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDk0MjdkOGE0NDc3Y2RiNzY4MDg2MWE5ZWM1MGRjNzMy
MTY5ODIwHhcNMjYxMDE3MDEwMTE2WhcNMjYxMDE4MDEwMTE2WjAzMTEwLwYDVQQD
EygyMjMzMTY2ZGJjN2NkYmM4YzY4YzYzYjVkZGZmMjY5NWZhZTZlYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/hlV50L7ETD3aNq1YNgXyMpA/v2
Pb2Kef8rEykhH2e+3q72rU4ayls+u8gxkXPQNNo200fH30hfLWj2Eq4ghS1Cskby
K4gderLfDkFHfTDmCSVxDUVES/SCuEfmvUeSw0a/M6PP4GuLzkXBdr71h1R/TMhK
p9NG1faHBDGWwz9WwFONXNrfIZxljlSb5JT7VOikddOLNwI5tdKE6zN7At/LT2E4
Ne0lyn1MSGnvhUnGBIwlogFOQrX+U/b5MscaBHus96dvl9GmqJR3/Ps5Ko88lX51
hcKoRe910qsevAKmm6P9ehJr9RGr8klt+UZhcKGijhiE5+4sI0QivCz4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIzFm28fNvIxoxjtd3/JpX65ux2MB8GA1UdIwQY
MBaAFA1JQn2KRHfNt2gIYansUNxzIWmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVsQ2ZZcEVkODIzYUFoaHFleFEzSE1oYVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84OWRkMjUtNTQ2Yy00ZjE4LWFjYzQt
N2E0MDU3MzE0MTY3LzEvRFVsQ2ZZcEVkODIzYUFoaHFleFEzSE1oYVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84OWRkMjUtNTQ2Yy00ZjE4LWFjYzQtN2E0MDU3MzE0MTY3
LzEvRFVsQ2ZZcEVkODIzYUFoaHFleFEzSE1oYVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsY/qi1y
6OEvPMZjkE46cluZON69GnkReqYD3HtBG5gq5dnEXuxJX3RBCM2xkWQnmEiYDXY8
S27WWC4qyYkKqtwTg76Qe0vvgDULsl6g0+Y8OKsCeTDFdd/S+N61xndMIJ4AY2oJ
7IfcCf/s+5VET54gDZmIRnptGdDwNF9uLhToPQ9+przIQoUWjMIBJC+qllVmNRXb
tF8MIUO8L9g14XvGPlckndkzxS08PEi16PKjkKDxKoDnT8eTmwhop3rmi6WF/Stx
wKorMPFAeSfqnO/HlJ+eMO9GTsuVKjQ/A7jkPH6mW/dB3ER7gFvf7z1DFU70hUgl
X1dQluku6zcRag==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:29 2026 by rpki-client