Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: 34vtyZqUUpwHSpgf92mBZDKgep5eRDHQGIhft3wgOUE=
Subject key identifier: 0B:D7:88:BF:05:22:0B:B6:8E:C1:17:62:1D:1D:C0:60:D2:96:28:3F
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019FDACFA7691A2074E231E9A6A0EA0EE4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 01E7
Signing time: Fri 07 Aug 2026 06:01:09 +0000
Manifest this update: Fri 07 Aug 2026 06:01:09 +0000
Manifest next update: Sat 08 Aug 2026 06:01:09 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: 0MY/Gj1m9P9pgiTwno31KCDNM37Nc9QPYXO3sC9wTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:cf:a7:69:1a:20:74:e2:31:e9:a6:a0:ea:0e:e4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Aug 7 06:01:09 2026 GMT
Not After : Aug 8 06:01:09 2026 GMT
Subject: CN=0bd788bf05220bb68ec117621d1dc060d296283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:e0:8e:c8:99:2a:e8:e1:d2:63:ac:a1:92:
c3:4c:dd:72:9e:aa:14:4d:fb:1a:0c:72:e0:15:3e:
50:25:73:94:4f:79:18:9d:01:52:6f:f6:68:72:a0:
f3:30:91:fc:1a:31:11:6c:87:e7:4c:21:73:d6:15:
19:b0:1e:d0:da:e4:c3:9e:28:c7:91:08:5d:50:0d:
c9:8b:3e:4a:74:25:de:ef:05:a6:4e:e6:54:d4:93:
35:1e:c4:5e:73:21:98:cd:53:88:6f:7d:96:2e:85:
e3:da:66:a7:57:15:12:b6:43:c1:29:b2:1b:a5:c2:
e6:5c:d9:67:3f:01:19:e1:26:b2:df:d2:4e:2c:35:
48:aa:06:fb:02:61:27:fb:c7:d4:a3:08:a4:29:29:
48:73:79:e3:7f:05:50:46:4f:2d:8e:62:f6:01:5d:
7f:83:a7:02:e6:06:47:55:24:bf:3a:a8:24:8e:ba:
91:ab:0f:e1:9c:d2:e3:4f:82:22:44:84:15:50:f1:
d7:65:06:37:2a:c3:91:60:35:4e:f3:a6:2f:f1:2e:
36:f0:d3:85:6b:48:02:d7:53:ac:e0:f3:74:23:d9:
58:b2:a6:d3:b8:bf:00:a7:3a:f2:1d:23:61:5e:7b:
c5:45:bc:74:14:a1:f5:f9:17:58:3d:f5:ba:09:ba:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:88:BF:05:22:0B:B6:8E:C1:17:62:1D:1D:C0:60:D2:96:28:3F
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:e0:ef:a1:cc:a9:28:88:81:99:43:f7:9c:d3:2e:d0:3b:
7c:e5:9e:b9:73:a8:6b:5e:02:7b:97:87:d2:31:e3:f6:1e:10:
32:a6:b1:a0:ff:cf:7e:bf:5e:58:8f:36:4b:33:40:c8:66:d2:
f5:93:d5:34:16:71:14:36:4f:c8:9b:30:54:d2:66:8c:e3:87:
1b:ae:a3:d4:12:b2:20:2c:4f:97:b3:4c:4c:31:7a:ea:87:2b:
7e:45:69:10:c9:cf:a7:65:54:16:93:45:8b:de:3a:70:1d:8f:
8a:8d:58:d3:a5:ca:25:cc:0a:e2:38:65:9c:4d:8f:47:6f:0b:
73:e9:20:15:77:fd:66:a3:20:4c:31:aa:8c:8c:46:56:90:14:
a3:41:7e:0f:ab:c7:bd:a6:02:51:d4:00:23:ac:68:f4:3d:9a:
ad:ab:f1:f0:cf:d7:52:8c:d2:7c:51:04:0b:01:15:d4:4f:47:
62:47:08:95:59:80:cd:30:21:a5:7f:d9:7a:44:bf:7b:c5:af:
dc:21:7d:b8:b6:a3:73:30:81:bb:11:77:5b:d0:dd:0a:cb:db:
4a:d3:54:95:3e:b1:3b:8c:5d:ca:4a:36:a9:60:23:a3:39:10:
c2:6d:99:5b:9e:64:95:4c:be:5d:83:3d:f6:e6:a7:da:67:fe:
ae:c5:d5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/az6dpGiB04jHppqDqDuTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNmYjQyNWJjMWMzNTI1NzdlMGE5YWRlNWJmZjU5YzBi
NGM1ODIwHhcNMjYwODA3MDYwMTA5WhcNMjYwODA4MDYwMTA5WjAzMTEwLwYDVQQD
EygwYmQ3ODhiZjA1MjIwYmI2OGVjMTE3NjIxZDFkYzA2MGQyOTYyODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz3gjsiZKujh0mOsoZLDTN1ynqoU
TfsaDHLgFT5QJXOUT3kYnQFSb/ZocqDzMJH8GjERbIfnTCFz1hUZsB7Q2uTDnijH
kQhdUA3Jiz5KdCXe7wWmTuZU1JM1HsRecyGYzVOIb32WLoXj2manVxUStkPBKbIb
pcLmXNlnPwEZ4Say39JOLDVIqgb7AmEn+8fUowikKSlIc3njfwVQRk8tjmL2AV1/
g6cC5gZHVSS/OqgkjrqRqw/hnNLjT4IiRIQVUPHXZQY3KsORYDVO86Yv8S428NOF
a0gC11Os4PN0I9lYsqbTuL8ApzryHSNhXnvFRbx0FKH1+RdYPfW6CbpNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvXiL8FIgu2jsEXYh0dwGDSlig/MB8GA1UdIwQY
MBaAFA5D+0JbwcNSV34Kmt5b/1nAtMWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWIt
OTExZjFkZGRkNjZiLzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWItOTExZjFkZGRkNjZi
LzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2Tg76HM
qSiIgZlD95zTLtA7fOWeuXOoa14Ce5eH0jHj9h4QMqaxoP/Pfr9eWI82SzNAyGbS
9ZPVNBZxFDZPyJswVNJmjOOHG66j1BKyICxPl7NMTDF66ocrfkVpEMnPp2VUFpNF
i946cB2Pio1Y06XKJcwK4jhlnE2PR28Lc+kgFXf9ZqMgTDGqjIxGVpAUo0F+D6vH
vaYCUdQAI6xo9D2aravx8M/XUozSfFEECwEV1E9HYkcIlVmAzTAhpX/ZekS/e8Wv
3CF9uLajczCBuxF3W9DdCsvbStNUlT6xO4xdyko2qWAjozkQwm2ZW55klUy+XYM9
9uan2mf+rsXVLA==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:34 2026 by rpki-client