Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: fMV61hbbVoNDjsA8JEXzFF1wqq70Ju0W5KucBkPdy4Y=
Subject key identifier: 24:4C:0B:97:C1:A0:63:2E:41:05:31:B2:F1:61:6C:49:C0:4A:0F:0A
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019E2E16A75E646CE07A73E79D46CB0C119D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 10ED
Signing time: Sat 16 May 2026 00:01:36 +0000
Manifest this update: Sat 16 May 2026 00:01:36 +0000
Manifest next update: Sun 17 May 2026 00:01:36 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: SAOrVN7ObugonZi8KU11z7hEWJ94IIsRHtZnqwV3Szs=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2e:16:a7:5e:64:6c:e0:7a:73:e7:9d:46:cb:0c:11:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: May 16 00:01:36 2026 GMT
Not After : May 17 00:01:36 2026 GMT
Subject: CN=244c0b97c1a0632e410531b2f1616c49c04a0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:a8:65:34:92:c8:7c:09:c1:8e:36:b0:1b:
62:ac:a1:c0:59:ce:f2:08:98:36:ba:ae:a0:77:5c:
7d:36:e9:a9:3d:8d:58:61:8d:66:76:a9:b9:aa:0a:
cd:2d:5b:08:58:a5:61:23:6b:51:b3:21:04:83:73:
e0:34:6c:65:84:8c:31:3a:6f:84:5b:b7:8a:ad:3d:
4b:d1:37:9d:24:77:2c:33:83:57:c0:b9:4a:b8:06:
64:fe:e6:63:af:2d:27:99:c6:35:0d:c9:84:3a:51:
13:e3:5b:7c:3c:f2:80:5d:3a:82:d7:d9:f2:20:ad:
b6:1f:3c:04:5f:cb:06:06:07:55:1d:43:b2:0d:f9:
28:bc:de:82:9c:aa:c8:bb:01:98:94:b6:6d:06:74:
25:63:19:69:2f:25:be:07:d9:ad:5c:db:f4:33:08:
eb:8b:b9:16:6a:94:4e:a7:a7:80:41:85:ee:f6:a9:
13:6d:b9:c7:ef:6f:db:55:53:4a:e8:3b:29:91:74:
0c:c6:04:95:6b:b6:0f:51:af:fe:9c:8d:c1:8d:43:
d2:7b:76:c1:31:3b:c4:3c:7a:e8:fa:93:62:a5:73:
75:a1:3f:a1:04:b9:91:a1:31:14:6c:ad:92:73:b2:
9a:45:e7:30:78:6b:ce:d8:ed:9b:17:43:81:b0:ff:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:0B:97:C1:A0:63:2E:41:05:31:B2:F1:61:6C:49:C0:4A:0F:0A
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ae:d7:03:70:25:75:83:42:95:55:64:bb:86:12:7a:b8:51:
f8:3e:f6:59:e4:0d:51:39:be:05:96:5a:2b:eb:68:09:f5:12:
4b:fe:d1:e7:23:1f:51:d2:d3:02:3f:74:fa:c6:ce:23:89:0a:
16:1e:a9:40:00:22:c2:7e:8d:b0:bd:55:f4:b2:6b:31:4f:fe:
8a:f1:db:dc:5d:df:c2:05:cf:d5:85:f8:98:7a:30:2e:e5:4e:
d3:0f:d6:39:a4:c1:dc:ea:4c:ca:e0:c5:67:7c:d2:82:33:1f:
c4:9a:f8:f8:44:3c:c5:0b:d7:cb:f1:30:c7:62:70:6e:46:ea:
66:28:e3:bd:95:06:72:da:97:45:17:01:fe:26:3a:5b:d9:41:
72:da:cd:a6:a9:71:f9:47:c9:96:ea:76:05:39:41:65:97:59:
fc:1e:47:bc:a3:bb:b8:ad:2b:c6:de:da:1f:1f:cc:68:4f:a8:
ab:28:25:e2:79:68:66:36:40:af:fb:05:ec:7e:83:38:47:df:
8e:06:c6:3f:6a:36:48:9b:ac:0b:53:f0:d0:a3:1c:9c:80:25:
26:af:a3:36:d4:dd:9d:61:cd:52:19:48:11:73:6a:5a:cd:20:
70:14:e9:48:5b:a1:62:21:a6:dd:46:18:d5:11:c3:cd:d1:c2:
a7:56:02:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4uFqdeZGzgenPnnUbLDBGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2
YTc5MjIwHhcNMjYwNTE2MDAwMTM2WhcNMjYwNTE3MDAwMTM2WjAzMTEwLwYDVQQD
EygyNDRjMGI5N2MxYTA2MzJlNDEwNTMxYjJmMTYxNmM0OWMwNGEwZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mOoZTSSyHwJwY42sBtirKHAWc7y
CJg2uq6gd1x9NumpPY1YYY1mdqm5qgrNLVsIWKVhI2tRsyEEg3PgNGxlhIwxOm+E
W7eKrT1L0TedJHcsM4NXwLlKuAZk/uZjry0nmcY1DcmEOlET41t8PPKAXTqC19ny
IK22HzwEX8sGBgdVHUOyDfkovN6CnKrIuwGYlLZtBnQlYxlpLyW+B9mtXNv0Mwjr
i7kWapROp6eAQYXu9qkTbbnH72/bVVNK6DspkXQMxgSVa7YPUa/+nI3BjUPSe3bB
MTvEPHro+pNipXN1oT+hBLmRoTEUbK2Sc7KaRecweGvO2O2bF0OBsP9sKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRMC5fBoGMuQQUxsvFhbEnASg8KMB8GA1UdIwQY
MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt
MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi
LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa7XA3Al
dYNClVVku4YSerhR+D72WeQNUTm+BZZaK+toCfUSS/7R5yMfUdLTAj90+sbOI4kK
Fh6pQAAiwn6NsL1V9LJrMU/+ivHb3F3fwgXP1YX4mHowLuVO0w/WOaTB3OpMyuDF
Z3zSgjMfxJr4+EQ8xQvXy/Ewx2JwbkbqZijjvZUGctqXRRcB/iY6W9lBctrNpqlx
+UfJlup2BTlBZZdZ/B5HvKO7uK0rxt7aHx/MaE+oqygl4nloZjZAr/sF7H6DOEff
jgbGP2o2SJusC1Pw0KMcnIAlJq+jNtTdnWHNUhlIEXNqWs0gcBTpSFuhYiGm3UYY
1RHDzdHCp1YCow==
-----END CERTIFICATE-----
Generated at Sat May 16 02:52:18 2026 by rpki-client