Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: 24GbwohzY6ZbLlvMslxwF7FAKmynQ5uihtgJaCgStms=
Subject key identifier: 24:E7:47:4B:96:5D:31:DC:AF:CE:3B:42:A0:31:EF:66:06:C4:B1:D5
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 01A001DD3998D7DB520138E332BA3937043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 05A8
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: g3m092ZE8XBN/ybRcyqm75D9usPUC1ad42w6L4XSc0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:39:98:d7:db:52:01:38:e3:32:ba:39:37:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=24e7474b965d31dcafce3b42a031ef6606c4b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:6f:46:44:05:35:c7:c4:66:4d:41:56:a5:
df:f2:78:77:80:6e:a1:27:ab:97:fb:16:cf:31:ba:
7e:07:fd:c1:05:72:f8:18:1e:db:40:e9:16:d0:41:
3b:10:c2:b4:45:85:f6:a9:d2:2a:70:37:ca:53:1d:
5d:d4:0d:27:c0:47:8c:fc:ed:22:0a:29:63:b3:42:
83:f5:af:b3:1f:28:5c:6f:80:e1:d8:a8:75:88:49:
c1:6d:96:24:6d:9f:c2:fd:0a:8f:f3:12:1b:d7:47:
4e:f1:7f:22:d8:a3:7f:82:9a:9e:e4:f1:03:99:8f:
d5:60:51:78:bc:6f:b8:2f:48:4b:0b:34:17:c8:3c:
4a:d7:c3:79:d3:d1:42:27:84:b0:84:3c:8c:08:39:
e2:48:20:36:eb:c5:1e:92:72:a7:d3:6e:e8:6d:2a:
27:a9:35:f0:dc:51:9b:b2:f0:2f:45:21:7e:91:6c:
33:16:17:bb:ec:dd:ad:d1:10:d6:fc:1f:60:e3:29:
84:5d:84:ca:0b:04:d3:1c:d1:5b:26:e2:ef:7f:8a:
53:fd:66:8b:17:b9:b5:8c:a3:05:e6:91:96:7d:0c:
ba:9b:c9:f1:40:b8:1e:61:42:cc:87:46:c7:76:a3:
2e:ee:62:61:8d:4a:dc:94:95:82:1d:e1:62:d1:f3:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:47:4B:96:5D:31:DC:AF:CE:3B:42:A0:31:EF:66:06:C4:B1:D5
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bb:b1:66:54:62:3e:07:a6:a3:bd:70:1b:da:5f:22:32:48:
a7:f9:e8:8d:34:29:17:32:01:0e:bd:23:b9:4f:6b:de:79:8b:
62:0c:52:32:33:5f:4c:a6:79:db:fc:d3:5f:5a:db:2c:92:fc:
13:46:fc:0e:22:4b:b5:0a:74:fb:e7:3b:cf:9d:61:70:0d:5b:
0a:4b:22:e7:7d:e0:cc:4a:c6:9b:1d:15:18:98:49:36:99:aa:
d9:71:44:61:a5:5d:5e:61:8d:5c:6a:4a:2b:1b:dc:11:aa:de:
e5:a1:8d:aa:dd:92:6c:53:ac:44:ed:71:f6:c0:f3:7f:c4:89:
d4:77:eb:8b:9b:7f:15:ab:ed:3c:92:3d:dd:5c:2c:2e:11:e0:
6d:7d:66:06:72:eb:d4:4b:ea:e0:3a:0d:a1:13:88:30:58:f4:
5d:24:ad:e6:3f:e7:7a:72:01:a9:ca:82:16:e9:ca:8f:62:71:
85:12:b2:63:37:83:99:29:cc:2e:79:ba:94:cd:f7:ed:14:6e:
a9:de:ac:1c:02:30:37:24:e1:df:7a:a4:73:72:a0:70:9b:a2:
56:bb:60:fb:87:f9:1b:fe:77:3f:ba:57:86:69:4e:61:0c:30:
68:1b:3d:cf:5d:bf:ed:e8:2e:fe:8a:7c:f8:da:34:85:36:bf:
d8:8c:b8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3TmY19tSATjjMro5NwQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNTM1MmQ5NDQxYjY1YzIwMTZlZDhlYjdlMmYyMzU5NTQ0
MzRmNWQwHhcNMjYwODE0MjAwMTEwWhcNMjYwODE1MjAwMTEwWjAzMTEwLwYDVQQD
EygyNGU3NDc0Yjk2NWQzMWRjYWZjZTNiNDJhMDMxZWY2NjA2YzRiMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NdvRkQFNcfEZk1BVqXf8nh3gG6h
J6uX+xbPMbp+B/3BBXL4GB7bQOkW0EE7EMK0RYX2qdIqcDfKUx1d1A0nwEeM/O0i
Ciljs0KD9a+zHyhcb4Dh2Kh1iEnBbZYkbZ/C/QqP8xIb10dO8X8i2KN/gpqe5PED
mY/VYFF4vG+4L0hLCzQXyDxK18N509FCJ4SwhDyMCDniSCA268UeknKn027obSon
qTXw3FGbsvAvRSF+kWwzFhe77N2t0RDW/B9g4ymEXYTKCwTTHNFbJuLvf4pT/WaL
F7m1jKMF5pGWfQy6m8nxQLgeYULMh0bHdqMu7mJhjUrclJWCHeFi0fOeIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTnR0uWXTHcr847QqAx72YGxLHVMB8GA1UdIwQY
MBaAFA5TUtlEG2XCAW7Y634vI1lUQ09dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQt
YWRjNTZkNDNlMGM0LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQtYWRjNTZkNDNlMGM0
LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWruxZlRi
Pgemo71wG9pfIjJIp/nojTQpFzIBDr0juU9r3nmLYgxSMjNfTKZ52/zTX1rbLJL8
E0b8DiJLtQp0++c7z51hcA1bCksi533gzErGmx0VGJhJNpmq2XFEYaVdXmGNXGpK
KxvcEare5aGNqt2SbFOsRO1x9sDzf8SJ1Hfri5t/FavtPJI93VwsLhHgbX1mBnLr
1Evq4DoNoROIMFj0XSSt5j/nenIBqcqCFunKj2JxhRKyYzeDmSnMLnm6lM337RRu
qd6sHAIwNyTh33qkc3KgcJuiVrtg+4f5G/53P7pXhmlOYQwwaBs9z12/7egu/op8
+No0hTa/2Iy4nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:38 2026 by rpki-client