Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: IU/z+IpioWPXTwmfSegUgHPQJT5labEnm3n1mnj7ZlA=
Subject key identifier: E0:EF:21:07:D0:02:DA:AE:A9:67:82:69:82:BD:63:10:C9:AB:D1:5C
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 01A13E5CE31226EBAA5147657471615AC95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 10A1
Signing time: Thu 15 Oct 2026 07:00:37 +0000
Manifest this update: Thu 15 Oct 2026 07:00:37 +0000
Manifest next update: Fri 16 Oct 2026 07:00:37 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: bSXmdY8ODEXcwA1Y8p11ujHGFMKscfSp1cUeWhrMUw8=)
2: IPwYbvOTgoroOnniZoWHqRWH1iM.asa (hash: rXi2zhCnM8yGSXi4cShVP8m8rzQdqSA1LoHID9h8Pxo=)
3: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:e3:12:26:eb:aa:51:47:65:74:71:61:5a:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Oct 15 07:00:37 2026 GMT
Not After : Oct 16 07:00:37 2026 GMT
Subject: CN=e0ef2107d002daaea967826982bd6310c9abd15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:9d:bd:42:63:88:9e:30:5b:5e:67:59:87:
a0:e3:32:9d:6b:2e:cc:f6:53:4a:35:0d:33:a2:f4:
ca:e4:7d:8d:61:25:ad:a0:d7:b4:79:30:3e:65:ce:
82:03:4a:81:ff:66:b4:e8:66:cb:9d:0a:1e:e3:ed:
20:3d:99:9f:da:24:c9:49:29:ac:58:ca:77:4f:be:
0b:5b:cc:3f:72:cb:d3:64:35:ba:85:f9:cc:b0:5b:
0a:08:8f:83:e7:ce:ab:58:bb:bb:4b:2c:41:08:22:
2d:98:a1:35:6e:a8:ad:19:53:a1:81:75:04:9e:97:
3e:38:47:db:75:09:39:46:85:c7:87:a3:57:51:e5:
30:53:e3:fb:d2:e6:ba:c3:39:d6:e0:39:3c:87:a7:
9a:bd:f8:f1:84:d0:c3:4b:59:1c:8a:fa:71:56:f8:
02:f7:ea:22:e2:6e:03:5d:b3:22:ae:1c:1a:11:0a:
20:65:98:79:90:af:1b:2b:2d:1e:ed:db:f5:81:00:
3f:27:53:77:2c:43:d8:ba:a2:3d:7b:3b:b4:2f:c5:
27:bb:00:70:b4:e3:93:6b:44:9b:5e:e0:3a:1a:89:
d2:61:d2:ae:b7:55:5f:29:18:3a:19:2b:25:d2:5e:
5e:9d:c8:42:6d:4c:ce:5c:13:c0:4e:94:88:df:f8:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:21:07:D0:02:DA:AE:A9:67:82:69:82:BD:63:10:C9:AB:D1:5C
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:12:5d:26:c3:78:22:20:79:62:36:f4:3b:f6:04:9f:ab:
5f:d6:dc:22:d0:47:b0:d8:6c:72:20:b4:1e:2b:c3:e8:9f:93:
9a:35:15:d7:5d:70:8c:a6:82:85:2a:aa:7f:75:1d:9e:81:cf:
2d:60:74:f3:0a:85:34:52:61:26:fd:dc:21:26:7f:9c:25:c6:
6f:4a:24:ab:3d:ca:b0:53:c1:42:53:8a:aa:fc:ac:eb:f9:a5:
e3:be:c2:c9:11:d4:2f:ed:2a:06:6e:5b:bb:bb:51:ae:80:6f:
ab:33:2d:b5:59:68:24:24:06:34:71:b7:ad:11:6e:71:a1:e3:
12:ed:c7:03:e1:5e:c3:01:b0:19:3f:22:ef:15:f2:92:fe:eb:
a5:65:98:67:4b:b1:c8:51:33:5d:de:67:48:1a:95:b7:40:10:
d8:bc:91:22:04:60:65:e8:15:8c:0d:07:34:40:97:ec:07:bb:
7f:38:7e:4f:7f:93:40:07:c6:29:28:72:05:11:ee:c5:1b:64:
30:c8:77:13:a7:da:b8:91:45:6a:26:b6:fb:95:9f:a8:c5:18:
a1:da:95:8c:80:91:44:07:6d:35:2d:02:a4:74:91:33:88:7f:
e0:1d:fe:fe:3f:9b:65:cb:12:9e:90:e1:5e:6c:9a:c6:14:71:
78:34:54:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XOMSJuuqUUdldHFhWsleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0
YjliNzEwHhcNMjYxMDE1MDcwMDM3WhcNMjYxMDE2MDcwMDM3WjAzMTEwLwYDVQQD
EyhlMGVmMjEwN2QwMDJkYWFlYTk2NzgyNjk4MmJkNjMxMGM5YWJkMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgOdvUJjiJ4wW15nWYeg4zKday7M
9lNKNQ0zovTK5H2NYSWtoNe0eTA+Zc6CA0qB/2a06GbLnQoe4+0gPZmf2iTJSSms
WMp3T74LW8w/csvTZDW6hfnMsFsKCI+D586rWLu7SyxBCCItmKE1bqitGVOhgXUE
npc+OEfbdQk5RoXHh6NXUeUwU+P70ua6wznW4Dk8h6eavfjxhNDDS1kcivpxVvgC
9+oi4m4DXbMirhwaEQogZZh5kK8bKy0e7dv1gQA/J1N3LEPYuqI9ezu0L8UnuwBw
tOOTa0SbXuA6GonSYdKut1VfKRg6GSsl0l5enchCbUzOXBPATpSI3/hmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODvIQfQAtquqWeCaYK9YxDJq9FcMB8GA1UdIwQY
MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt
M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3
LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYMSXSbD
eCIgeWI29Dv2BJ+rX9bcItBHsNhsciC0HivD6J+TmjUV111wjKaChSqqf3UdnoHP
LWB08wqFNFJhJv3cISZ/nCXGb0okqz3KsFPBQlOKqvys6/ml477CyRHUL+0qBm5b
u7tRroBvqzMttVloJCQGNHG3rRFucaHjEu3HA+FewwGwGT8i7xXykv7rpWWYZ0ux
yFEzXd5nSBqVt0AQ2LyRIgRgZegVjA0HNECX7Ae7fzh+T3+TQAfGKShyBRHuxRtk
MMh3E6fauJFFaia2+5WfqMUYodqVjICRRAdtNS0CpHSRM4h/4B3+/j+bZcsSnpDh
XmyaxhRxeDRUSg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:37:42 2026 by rpki-client