Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: oIxDSrNXClm+sJ+CluEPUieSq1U+0/pBhfYY1biejsw=
Subject key identifier: 16:11:76:AE:2A:CE:1B:9F:38:03:C4:B4:2F:DB:FA:50:94:8E:04:6E
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 01A001014CEE242647ECFCF3D0180B6534AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 07E1
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: k9Vq09Ti8Kex0AtT5bWXuDEZ9jPb0w3HaHYPiD9Cguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4c:ee:24:26:47:ec:fc:f3:d0:18:0b:65:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=161176ae2ace1b9f3803c4b42fdbfa50948e046e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:04:24:87:79:27:c9:8a:ae:b9:07:cd:2d:
88:fe:f5:b8:6d:bb:47:03:23:44:4e:a8:ea:b3:14:
6a:1a:2b:a3:40:1b:66:9f:63:59:bf:18:09:2e:56:
68:0f:3a:af:ce:7f:eb:d5:2e:8d:e9:84:d6:9e:71:
32:9b:f1:80:27:73:d4:de:85:b8:70:c0:aa:d7:9b:
c2:34:c7:39:30:a5:23:a3:e3:6a:76:8c:c9:6e:fc:
a2:71:7c:92:d1:a4:7e:ad:bb:bb:78:cf:ba:af:88:
cd:b0:df:03:45:d1:d1:1e:cf:ec:97:5e:78:66:b9:
e9:8b:0b:af:5e:d4:0d:39:89:f3:7c:e9:0e:9c:78:
e1:93:78:ce:53:15:c1:bd:0d:a9:7c:ac:92:01:35:
75:79:ef:b2:82:36:dc:0d:ab:75:54:6c:14:36:9f:
58:a6:f8:7e:e0:ff:fc:d8:dc:36:8e:ce:d1:a0:cf:
35:43:4c:24:d7:9b:5a:59:6a:19:e2:35:49:4e:eb:
06:74:6d:9a:e7:34:7f:f1:87:f6:50:28:0d:b1:71:
5f:d6:4d:af:46:2c:5a:06:fe:0d:94:3e:42:26:62:
71:fe:c9:53:bf:f6:41:08:7a:5e:c4:c9:86:a2:6f:
26:42:94:90:32:b1:e6:2f:3a:64:52:47:3a:39:60:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:76:AE:2A:CE:1B:9F:38:03:C4:B4:2F:DB:FA:50:94:8E:04:6E
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:e9:d3:2b:b0:ec:ea:2b:31:eb:32:c0:08:b8:e8:65:46:
11:9d:4f:a8:ed:1d:a3:51:85:dd:61:30:0f:c2:17:09:d9:63:
6f:d1:df:6b:a8:44:4e:5e:73:17:5b:9e:28:c7:3a:98:de:43:
4a:21:0d:84:e0:06:45:a4:10:17:1f:c7:93:b9:9f:15:ea:e0:
c7:b2:3e:db:3d:b3:09:19:11:33:b5:89:5e:37:02:ef:0c:7e:
92:a7:5f:93:a0:90:9b:bb:6e:15:40:30:ae:ab:ca:1b:8f:6f:
81:2e:56:7c:25:36:d6:93:47:82:24:e8:26:1e:5d:20:1c:66:
ba:55:ad:1b:18:70:5b:e3:03:77:8d:68:5a:58:31:f6:ad:2d:
a3:dd:91:71:d8:9f:04:c9:51:56:cf:52:b4:c8:7a:7d:62:6a:
46:93:f8:21:f6:6a:28:7a:21:f8:b9:7c:81:a2:65:8f:00:8e:
3b:71:89:26:1c:78:ae:b1:1e:d3:80:d1:84:39:68:b8:d2:0a:
34:98:e0:6c:44:2a:59:06:a0:af:c4:0b:78:59:34:56:5a:cc:
ff:eb:6c:a0:e0:fd:12:30:47:dd:6f:55:09:50:9a:a5:ec:dc:
ec:f4:2b:88:ab:de:60:01:af:e8:9f:fd:52:8d:61:93:c5:50:
ce:0b:75:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAUzuJCZH7Pzz0BgLZTSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx
M2M3NTIwHhcNMjYwODE0MTYwMDU3WhcNMjYwODE1MTYwMDU3WjAzMTEwLwYDVQQD
EygxNjExNzZhZTJhY2UxYjlmMzgwM2M0YjQyZmRiZmE1MDk0OGUwNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIoEJId5J8mKrrkHzS2I/vW4bbtH
AyNETqjqsxRqGiujQBtmn2NZvxgJLlZoDzqvzn/r1S6N6YTWnnEym/GAJ3PU3oW4
cMCq15vCNMc5MKUjo+NqdozJbvyicXyS0aR+rbu7eM+6r4jNsN8DRdHRHs/sl154
ZrnpiwuvXtQNOYnzfOkOnHjhk3jOUxXBvQ2pfKySATV1ee+ygjbcDat1VGwUNp9Y
pvh+4P/82Nw2js7RoM81Q0wk15taWWoZ4jVJTusGdG2a5zR/8Yf2UCgNsXFf1k2v
RixaBv4NlD5CJmJx/slTv/ZBCHpexMmGom8mQpSQMrHmLzpkUkc6OWC3dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYRdq4qzhufOAPEtC/b+lCUjgRuMB8GA1UdIwQY
MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt
ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw
LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGN3p0yuw
7OorMesywAi46GVGEZ1PqO0do1GF3WEwD8IXCdljb9Hfa6hETl5zF1ueKMc6mN5D
SiENhOAGRaQQFx/Hk7mfFergx7I+2z2zCRkRM7WJXjcC7wx+kqdfk6CQm7tuFUAw
rqvKG49vgS5WfCU21pNHgiToJh5dIBxmulWtGxhwW+MDd41oWlgx9q0to92Rcdif
BMlRVs9StMh6fWJqRpP4IfZqKHoh+Ll8gaJljwCOO3GJJhx4rrEe04DRhDlouNIK
NJjgbEQqWQagr8QLeFk0VlrM/+tsoOD9EjBH3W9VCVCapezc7PQriKveYAGv6J/9
Uo1hk8VQzgt1Tw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:27 2026 by rpki-client