Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: VTaFchyEoYhVD9QV7wAjjZmAngpx/q+ShoMoYEXj9K0=
Subject key identifier: D5:E6:71:2A:EB:66:B9:47:E4:1C:82:AF:F4:1F:27:0A:A7:11:DB:4C
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 01A001A5A4ED661CB311876056EC003AF383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 19:00:27 +0000
Manifest this update: Fri 14 Aug 2026 19:00:27 +0000
Manifest next update: Sat 15 Aug 2026 19:00:27 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: ErsHIjpS7itPeterCFgJrq9CWnmmJnThbL8lhSJrhfo=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:a4:ed:66:1c:b3:11:87:60:56:ec:00:3a:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Aug 14 19:00:27 2026 GMT
Not After : Aug 15 19:00:27 2026 GMT
Subject: CN=d5e6712aeb66b947e41c82aff41f270aa711db4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:d3:4c:93:f0:70:8e:ca:68:31:e3:c6:6f:
88:02:27:56:60:26:e1:b1:cf:41:e1:fa:b0:e9:57:
ff:b6:c5:d5:5b:76:ef:6c:a4:a4:f0:5b:fc:68:a4:
4c:27:1f:19:d1:39:0a:7f:82:fa:ea:43:16:0d:60:
b3:e4:e0:11:3f:d6:dc:ad:df:fc:5c:fc:23:14:c3:
ca:c9:7a:a9:f7:02:78:49:76:f7:4f:58:c2:39:e9:
b6:0c:cc:32:83:5f:39:db:3c:81:59:19:b4:e5:e4:
c7:11:64:b2:9f:37:b3:12:32:cd:88:1e:5c:5e:ef:
79:24:e5:f5:3a:8a:7e:df:20:1a:34:95:d0:c6:28:
f5:3c:a6:6e:8b:69:10:c3:ff:79:46:64:d7:d0:5b:
d3:1f:dd:15:60:be:83:0a:ad:9f:52:24:92:f0:18:
55:13:29:bf:e0:7d:71:e7:79:bb:94:15:2f:b9:dd:
89:3a:24:50:14:90:36:90:f3:27:47:5e:ee:45:d3:
35:8f:fd:99:8c:3d:e8:c5:ea:ef:73:93:d7:fd:75:
db:95:27:2a:c4:f6:26:a8:d4:2f:e7:e8:5a:09:c2:
c3:fb:b9:10:b0:0f:54:35:79:24:fc:9a:3f:14:6a:
bd:be:5a:a4:89:06:49:85:5f:f4:a1:91:1c:c0:47:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:71:2A:EB:66:B9:47:E4:1C:82:AF:F4:1F:27:0A:A7:11:DB:4C
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:34:4b:7c:e9:19:20:51:5e:d7:d6:54:78:49:06:3c:ea:
64:c8:b7:ca:49:53:36:f8:1d:42:2b:60:a7:ba:25:17:64:32:
11:74:25:55:75:a0:ab:0b:c1:c1:39:2e:04:e0:79:24:5a:6f:
5b:0a:d4:cd:53:25:56:d5:46:89:f2:79:d8:d4:f8:0d:91:f5:
2b:d6:7a:f8:a4:29:98:20:0f:2f:4a:fa:c6:43:cb:4f:05:27:
8a:33:b2:19:28:09:d7:27:a3:26:e3:37:82:45:e7:1d:4f:0c:
75:43:50:12:86:9b:70:63:67:f1:50:55:c2:44:1e:44:03:f6:
b7:0e:e9:34:1b:aa:b2:82:82:28:5a:44:9e:93:20:03:bf:ed:
33:eb:28:dd:3e:ce:34:31:2a:0c:4e:d2:1b:52:d4:90:bb:ea:
a6:ec:d4:39:07:20:b8:2e:27:d1:3b:79:87:94:8d:be:eb:2a:
54:b6:a4:44:6e:5f:ce:a6:e7:c3:df:d5:c2:4a:a9:50:b7:57:
6b:7b:1f:1d:f2:cd:07:58:6d:ad:23:cd:e0:98:d8:58:19:1a:
29:fe:6d:96:f6:53:cd:46:40:0c:b5:b8:0b:c2:ad:41:01:d0:
a5:8b:40:53:5e:90:48:78:85:fb:f4:18:c5:9b:b4:37:9a:ad:
79:72:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:11 2026 by rpki-client