Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: iuBsJAFoDqzZX/JxooKPHp3MmulrggwMWRwVrotg3NQ=
Subject key identifier: 2F:69:40:5A:90:BF:21:00:F1:F3:EE:EA:4F:6B:9B:50:43:58:87:43
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 01A001A600E414D5C29899425F4D90F80298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0FFD
Signing time: Fri 14 Aug 2026 19:00:51 +0000
Manifest this update: Fri 14 Aug 2026 19:00:51 +0000
Manifest next update: Sat 15 Aug 2026 19:00:51 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: xvzBiv8j3O5zodL1DYHqYiZUTNci2cvWLSFDUTzq9qY=)
2: IPwYbvOTgoroOnniZoWHqRWH1iM.asa (hash: rXi2zhCnM8yGSXi4cShVP8m8rzQdqSA1LoHID9h8Pxo=)
3: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:00:e4:14:d5:c2:98:99:42:5f:4d:90:f8:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Aug 14 19:00:51 2026 GMT
Not After : Aug 15 19:00:51 2026 GMT
Subject: CN=2f69405a90bf2100f1f3eeea4f6b9b5043588743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:e1:40:57:e8:e1:63:75:38:0b:5c:df:08:
10:93:2e:da:f1:22:81:26:9b:82:32:ac:60:74:ed:
b4:5d:c5:c1:c9:8f:a8:ec:16:60:7b:6e:5d:26:4d:
01:0b:a5:74:47:fb:ae:f8:78:ca:c4:3b:68:f6:a9:
09:ce:5c:96:c7:47:a9:c7:35:ca:15:46:02:88:3b:
23:f9:c5:1f:2c:ea:5d:50:7a:d2:8f:6f:78:9f:ab:
18:43:25:b8:93:a4:27:ef:5b:fd:3a:d0:ec:da:93:
f0:32:db:0d:99:4c:01:03:be:59:da:4c:53:e7:fa:
cb:7d:b3:1a:a7:07:96:b9:27:6e:26:f5:ae:9b:e5:
e3:93:e4:75:ed:54:0e:d0:78:af:36:71:86:b3:00:
a0:67:6c:a7:ea:93:a2:45:7b:d0:27:42:4c:e9:70:
b1:69:d4:06:ad:a9:fe:a1:4e:fa:31:62:fc:55:f6:
2c:fd:cf:e1:0c:fe:39:05:81:01:b1:20:77:01:f2:
69:98:74:28:d3:33:9f:ec:22:63:14:20:4a:ad:63:
af:d3:20:b5:00:6a:e7:eb:6c:9c:75:a1:c0:27:1f:
82:0c:5a:27:82:09:61:e5:85:30:85:c8:70:b0:dc:
b1:cc:70:15:e3:ab:a5:a0:9f:a6:5d:7c:be:e4:49:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:40:5A:90:BF:21:00:F1:F3:EE:EA:4F:6B:9B:50:43:58:87:43
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2d:06:a0:0c:be:b2:43:28:00:a5:bd:2f:68:02:b0:9f:65:
88:1a:01:bb:78:ee:99:89:ad:b5:a0:60:d3:82:f1:01:4d:d9:
2f:3c:32:d6:30:75:6e:0c:8e:2e:cf:d5:f3:e0:76:78:74:e6:
93:ad:a4:ac:12:24:1e:71:f2:79:3f:5f:2d:97:19:23:85:5e:
96:f8:9b:f3:ff:75:be:d0:5b:c1:df:cc:75:40:bf:a7:bf:61:
b0:c3:38:98:69:5f:98:6f:df:8c:8b:9b:4e:14:eb:03:98:c0:
ba:a4:4e:14:9c:57:eb:99:b8:e8:42:94:9d:ab:34:f6:4b:c7:
22:ac:b6:b9:3f:bb:3a:b2:1e:7e:8c:41:9b:c2:ef:69:17:f0:
d3:50:14:a6:28:31:14:91:38:f6:c4:a2:f8:ce:d5:73:4c:76:
67:0a:84:b5:c1:02:d1:31:1c:20:de:e5:b7:77:4c:15:b8:26:
b0:ed:00:d9:ff:b5:39:eb:2c:60:ff:b3:e0:42:08:41:e9:57:
42:aa:74:fd:8f:11:3d:7e:55:5d:bb:81:d2:c3:fa:4b:7c:7c:
90:de:11:66:a6:37:9a:48:5d:cd:e8:f1:c9:e0:de:22:ae:d7:
8e:81:09:fd:5c:eb:5b:a4:4c:a4:c8:51:44:19:c3:d4:8e:e7:
3f:94:67:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpgDkFNXCmJlCX02Q+AKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0
YjliNzEwHhcNMjYwODE0MTkwMDUxWhcNMjYwODE1MTkwMDUxWjAzMTEwLwYDVQQD
EygyZjY5NDA1YTkwYmYyMTAwZjFmM2VlZWE0ZjZiOWI1MDQzNTg4NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI7hQFfo4WN1OAtc3wgQky7a8SKB
JpuCMqxgdO20XcXByY+o7BZge25dJk0BC6V0R/uu+HjKxDto9qkJzlyWx0epxzXK
FUYCiDsj+cUfLOpdUHrSj294n6sYQyW4k6Qn71v9OtDs2pPwMtsNmUwBA75Z2kxT
5/rLfbMapweWuSduJvWum+Xjk+R17VQO0HivNnGGswCgZ2yn6pOiRXvQJ0JM6XCx
adQGran+oU76MWL8VfYs/c/hDP45BYEBsSB3AfJpmHQo0zOf7CJjFCBKrWOv0yC1
AGrn62ycdaHAJx+CDFongglh5YUwhchwsNyxzHAV46uloJ+mXXy+5EkT1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9pQFqQvyEA8fPu6k9rm1BDWIdDMB8GA1UdIwQY
MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt
M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3
LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC0GoAy+
skMoAKW9L2gCsJ9liBoBu3jumYmttaBg04LxAU3ZLzwy1jB1bgyOLs/V8+B2eHTm
k62krBIkHnHyeT9fLZcZI4Velvib8/91vtBbwd/MdUC/p79hsMM4mGlfmG/fjIub
ThTrA5jAuqROFJxX65m46EKUnas09kvHIqy2uT+7OrIefoxBm8LvaRfw01AUpigx
FJE49sSi+M7Vc0x2ZwqEtcEC0TEcIN7lt3dMFbgmsO0A2f+1OessYP+z4EIIQelX
Qqp0/Y8RPX5VXbuB0sP6S3x8kN4RZqY3mkhdzejxyeDeIq7XjoEJ/VzrW6RMpMhR
RBnD1I7nP5RnQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:46:12 2026 by rpki-client