Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: ALz48K00fR5cznPIbLhr41I7TCpkhGr9WviUIoSgnuI=
Subject key identifier: 32:49:0F:33:AE:07:81:C9:86:C7:1B:B3:3E:5E:2A:2F:8F:AE:83:01
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019D38D3157AE95D859A504E7C9037A97533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 106E
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: AyBgeK8/qEMAF26YYrGlX7a1Jf/wM/MIjmIOmcvLzRQ=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:7a:e9:5d:85:9a:50:4e:7c:90:37:a9:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=32490f33ae0781c986c71bb33e5e2a2f8fae8301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:df:1a:3d:c3:eb:7e:35:41:58:14:6a:a6:
a1:f5:12:04:2f:a5:b1:46:9d:12:14:40:2c:cf:03:
0d:e3:a2:72:cc:ca:8c:72:79:91:6b:93:53:fd:2f:
6f:eb:1b:2c:55:81:65:4e:3f:02:11:8a:f0:8b:dd:
f2:80:32:fe:21:78:6e:e0:7f:88:06:22:c3:68:a5:
02:be:fa:66:1d:8c:98:15:16:59:f3:33:b9:a2:d5:
4e:7c:97:a0:9a:c1:ab:83:e9:b8:6a:e1:31:a1:81:
af:a1:d8:3c:6e:d0:40:ad:07:b8:2b:16:79:95:0d:
88:99:6e:e2:b3:c7:46:25:71:2d:d0:a8:38:ba:4d:
cd:a6:4d:23:14:05:a6:dc:a2:31:2d:6c:ad:8a:cc:
35:a8:bd:e5:6c:53:0a:7f:5d:a0:1f:ab:00:2c:91:
1d:85:78:87:ad:b1:84:48:3b:37:a6:79:7c:d8:21:
7a:b1:a8:22:76:a9:ac:80:76:11:69:6d:c6:36:92:
7f:ad:54:ab:2d:35:7a:fa:db:fc:ba:f0:b2:9d:0b:
b7:37:df:77:3c:9f:bc:76:41:d6:89:5b:ec:7f:64:
ed:88:95:2e:00:e3:9c:82:44:1f:bb:46:73:3a:ed:
ca:41:00:44:d3:7c:89:63:48:cf:37:ea:f0:51:f4:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:0F:33:AE:07:81:C9:86:C7:1B:B3:3E:5E:2A:2F:8F:AE:83:01
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:02:87:7c:13:cf:49:a7:5d:75:b7:36:53:93:00:7b:6f:
f2:57:44:e6:9a:d5:52:48:2b:6c:e2:fb:6e:af:61:2f:24:15:
7f:b4:f4:3d:f9:54:d8:71:b3:81:9e:b5:59:1e:8c:c8:81:06:
8c:c7:d7:31:f8:9f:0a:89:06:31:d2:75:f6:46:d8:e7:d5:81:
4b:52:b8:81:76:71:28:a8:ae:fd:60:63:64:23:4b:8b:87:f7:
93:f2:78:c1:19:88:86:69:1b:1a:df:7c:5a:74:25:b8:9c:e0:
17:a9:d8:b0:9b:36:5e:d0:d7:8d:f9:57:11:98:ae:93:f4:89:
45:3e:81:cd:24:cb:e6:e3:96:9e:43:f6:95:51:70:81:81:ef:
05:0e:d1:39:30:8b:ca:0f:0f:cf:bb:d3:f0:4f:3d:b2:8b:9d:
b5:6c:53:5c:0a:82:3b:79:78:3d:6d:98:eb:d8:76:17:a8:78:
58:e0:43:00:42:a3:1a:7a:b3:78:35:8b:13:f9:ba:df:7a:4a:
08:79:1a:35:bf:41:e4:42:04:8f:10:44:76:6a:59:05:29:40:
9b:21:af:79:6e:c7:a3:14:03:fc:0a:0e:c2:42:a8:3b:0e:b2:
73:09:9b:bc:03:91:46:05:55:9b:4f:b2:7e:01:e4:af:b3:1f:
51:3e:78:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xV66V2FmlBOfJA3qXUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2
YTc5MjIwHhcNMjYwMzI5MDkwMDUwWhcNMjYwMzMwMDkwMDUwWjAzMTEwLwYDVQQD
EygzMjQ5MGYzM2FlMDc4MWM5ODZjNzFiYjMzZTVlMmEyZjhmYWU4MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzfGj3D6341QVgUaqah9RIEL6Wx
Rp0SFEAszwMN46JyzMqMcnmRa5NT/S9v6xssVYFlTj8CEYrwi93ygDL+IXhu4H+I
BiLDaKUCvvpmHYyYFRZZ8zO5otVOfJegmsGrg+m4auExoYGvodg8btBArQe4KxZ5
lQ2ImW7is8dGJXEt0Kg4uk3Npk0jFAWm3KIxLWytisw1qL3lbFMKf12gH6sALJEd
hXiHrbGESDs3pnl82CF6sagidqmsgHYRaW3GNpJ/rVSrLTV6+tv8uvCynQu3N993
PJ+8dkHWiVvsf2TtiJUuAOOcgkQfu0ZzOu3KQQBE03yJY0jPN+rwUfTEnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJJDzOuB4HJhscbsz5eKi+ProMBMB8GA1UdIwQY
MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt
MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi
LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRQCh3wT
z0mnXXW3NlOTAHtv8ldE5prVUkgrbOL7bq9hLyQVf7T0PflU2HGzgZ61WR6MyIEG
jMfXMfifCokGMdJ19kbY59WBS1K4gXZxKKiu/WBjZCNLi4f3k/J4wRmIhmkbGt98
WnQluJzgF6nYsJs2XtDXjflXEZiuk/SJRT6BzSTL5uOWnkP2lVFwgYHvBQ7ROTCL
yg8Pz7vT8E89soudtWxTXAqCO3l4PW2Y69h2F6h4WOBDAEKjGnqzeDWLE/m633pK
CHkaNb9B5EIEjxBEdmpZBSlAmyGveW7HoxQD/AoOwkKoOw6ycwmbvAORRgVVm0+y
fgHkr7MfUT54/Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:52 2026 by rpki-client