Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: UZj2vA1dad4UySt3pIZNvyiw/Elj2CeWmEvjyf+qAaA=
Subject key identifier: 42:01:01:0E:B9:72:B8:CE:5C:EA:F8:52:EA:6A:E4:A6:32:7A:B7:91
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 01A15D0C4EA6EA999D30B9D41E723F025F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 1293
Signing time: Wed 21 Oct 2026 06:00:49 +0000
Manifest this update: Wed 21 Oct 2026 06:00:49 +0000
Manifest next update: Thu 22 Oct 2026 06:00:49 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: z+smWS1vUDNk1rJk8hbKJUbbV6w5uUZgUxcCGC/b3wA=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:0c:4e:a6:ea:99:9d:30:b9:d4:1e:72:3f:02:5f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Oct 21 06:00:49 2026 GMT
Not After : Oct 22 06:00:49 2026 GMT
Subject: CN=4201010eb972b8ce5ceaf852ea6ae4a6327ab791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:86:1f:18:66:af:45:43:d1:76:fa:59:fe:
9f:8a:72:26:7e:bc:d9:53:b1:ef:93:51:01:f6:16:
47:5d:9f:7c:d6:9f:02:f8:4f:4f:de:1f:0c:4e:eb:
d4:7e:b6:0a:e1:76:1b:d1:be:d4:f7:8e:83:7c:fb:
97:f0:57:66:ce:67:81:37:71:cf:6d:7f:61:5e:91:
04:a8:7e:68:98:6e:dd:19:6b:d0:4a:3d:16:10:02:
6e:0f:45:51:2a:ef:c7:2d:11:51:f4:22:68:c0:87:
02:bd:ac:fc:38:3e:86:48:0f:6a:11:6d:26:a8:d2:
fc:4e:bc:f7:eb:1f:92:9c:51:3c:6b:e2:66:43:d9:
e8:71:f0:d1:45:f3:62:d2:03:62:b8:d8:15:e3:4c:
5e:8c:70:d2:cf:0c:20:a2:bb:68:73:f7:1d:0d:9e:
5c:a6:25:25:6c:81:3e:8c:6d:c1:46:4c:2b:20:60:
e7:59:7c:19:e1:e9:26:e2:2c:77:2f:ba:a7:8a:42:
9f:1e:f0:25:6e:9e:10:1d:44:42:bf:d0:eb:76:72:
3d:ba:4b:f3:63:7e:09:c6:02:8a:8e:7e:db:e4:a7:
d1:52:10:c5:2d:9e:d7:62:2e:9e:b9:a9:69:0c:ac:
02:3d:32:d0:88:7a:63:65:df:36:4a:37:c7:32:cb:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:01:0E:B9:72:B8:CE:5C:EA:F8:52:EA:6A:E4:A6:32:7A:B7:91
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:85:8e:50:e0:99:2e:20:10:cd:a4:93:de:ec:1d:f2:0a:
83:99:2c:b7:6e:f6:d7:fd:d9:c6:99:a0:44:10:de:99:53:eb:
ed:7e:c5:ba:e9:18:b5:95:5c:7f:e3:bf:69:cf:8c:f8:18:56:
96:58:dc:0c:1d:ff:15:2b:e8:2a:78:73:db:88:36:b5:07:86:
cd:c7:14:ea:d6:ee:c0:f4:d9:2d:06:de:1f:41:b8:c8:b4:b0:
ca:8a:f3:14:9e:a3:e9:ab:7f:97:71:b6:9c:64:29:20:25:b0:
36:fe:b4:21:45:9a:96:f5:23:ff:2c:b8:bd:19:b3:b4:ae:eb:
ba:70:9b:0d:65:eb:30:b6:b2:a2:03:02:32:0c:59:ff:3c:03:
be:b8:27:04:65:1b:30:99:13:64:b6:7f:75:fe:21:8d:09:85:
31:50:ef:4b:f4:b9:5d:99:69:a1:6a:d8:9f:a1:78:b9:61:e3:
9a:31:f2:f8:5a:53:d4:de:7f:99:c9:84:d9:3a:38:a6:8b:f8:
a7:23:ce:f3:de:18:25:77:b6:5e:20:c8:08:f4:15:5f:db:3e:
57:ad:3d:83:71:db:52:d1:a5:ac:34:13:b5:80:e5:d9:a4:9c:
83:07:ce:e3:27:f1:22:d6:1a:8d:d8:85:e3:77:bf:06:8b:88:
73:1a:4b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDE6m6pmdMLnUHnI/Al8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2
YTc5MjIwHhcNMjYxMDIxMDYwMDQ5WhcNMjYxMDIyMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg0MjAxMDEwZWI5NzJiOGNlNWNlYWY4NTJlYTZhZTRhNjMyN2FiNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArimGHxhmr0VD0Xb6Wf6finImfrzZ
U7Hvk1EB9hZHXZ981p8C+E9P3h8MTuvUfrYK4XYb0b7U946DfPuX8FdmzmeBN3HP
bX9hXpEEqH5omG7dGWvQSj0WEAJuD0VRKu/HLRFR9CJowIcCvaz8OD6GSA9qEW0m
qNL8Trz36x+SnFE8a+JmQ9nocfDRRfNi0gNiuNgV40xejHDSzwwgortoc/cdDZ5c
piUlbIE+jG3BRkwrIGDnWXwZ4ekm4ix3L7qnikKfHvAlbp4QHURCv9DrdnI9ukvz
Y34JxgKKjn7b5KfRUhDFLZ7XYi6eualpDKwCPTLQiHpjZd82SjfHMsv/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIBAQ65crjOXOr4Uupq5KYyereRMB8GA1UdIwQY
MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt
MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi
LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZOFjlDg
mS4gEM2kk97sHfIKg5kst2721/3ZxpmgRBDemVPr7X7FuukYtZVcf+O/ac+M+BhW
lljcDB3/FSvoKnhz24g2tQeGzccU6tbuwPTZLQbeH0G4yLSwyorzFJ6j6at/l3G2
nGQpICWwNv60IUWalvUj/yy4vRmztK7runCbDWXrMLayogMCMgxZ/zwDvrgnBGUb
MJkTZLZ/df4hjQmFMVDvS/S5XZlpoWrYn6F4uWHjmjHy+FpT1N5/mcmE2To4pov4
pyPO894YJXe2XiDICPQVX9s+V609g3HbUtGlrDQTtYDl2aScgwfO4yfxItYajdiF
43e/BouIcxpLAA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 14:32:38 2026 by rpki-client