
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 6wRTeIkNsWPAHuyX/FeXbstTVJpxwzYBI2P45QXfuhQ=
Subject key identifier: E6:C2:0C:96:31:B2:46:84:48:63:92:8F:B7:52:EC:0E:23:FF:5B:E5
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 01A13DB8BAA31193A0F64A65111C7D957840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 171C
Signing time: Thu 15 Oct 2026 04:01:18 +0000
Manifest this update: Thu 15 Oct 2026 04:01:18 +0000
Manifest next update: Fri 16 Oct 2026 04:01:18 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: CH3KfNZbFw0E+cPVwtHnwZKdXlOrvYDL0wvU1y37sZw=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:ba:a3:11:93:a0:f6:4a:65:11:1c:7d:95:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Oct 15 04:01:18 2026 GMT
Not After : Oct 16 04:01:18 2026 GMT
Subject: CN=e6c20c9631b246844863928fb752ec0e23ff5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:30:ee:fb:4b:be:74:58:10:ec:7d:b1:50:
2b:91:b9:5b:39:0a:d5:28:8b:19:f1:4a:79:b5:bd:
45:23:bc:91:25:77:c8:7e:6d:8c:d8:ad:99:4c:51:
d2:ab:1a:08:4f:8f:01:9f:a0:0f:6e:42:3a:61:66:
ac:9d:01:3b:67:f9:1c:d9:95:6b:35:6e:94:e4:0a:
2f:0a:f9:11:7f:15:bf:c8:48:d5:36:b0:af:00:f1:
2f:18:4e:e9:0d:93:a3:cb:f7:02:cf:ea:a1:47:1e:
b0:47:e3:ed:8e:92:1e:31:6a:29:a2:26:54:18:87:
25:ff:69:c1:ef:cc:c0:b0:cf:8e:f5:53:96:51:6a:
cc:76:ee:9b:8f:f4:a2:4d:1a:eb:60:3b:91:90:f4:
60:43:dd:56:71:4d:80:80:e8:8b:ea:f9:b6:12:e5:
9d:b2:68:7e:45:5c:aa:47:0b:26:34:0e:f7:fc:66:
ee:35:a8:b1:79:af:47:42:ac:80:94:21:aa:af:50:
9e:1f:73:75:51:4b:c7:8e:cd:09:65:7f:05:b2:76:
37:91:5f:3d:da:b2:1d:56:bf:05:a4:09:0c:2c:c0:
b8:a4:63:ff:f7:74:09:42:19:d5:8d:1c:a4:be:50:
85:2c:23:56:dd:bb:2e:14:d6:d6:58:18:39:bd:64:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:0C:96:31:B2:46:84:48:63:92:8F:B7:52:EC:0E:23:FF:5B:E5
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6c:ae:72:83:c5:20:7f:03:5c:28:fb:53:a6:d6:60:97:f6:
a5:d2:b8:83:a2:ae:4f:08:22:9d:9b:b8:6a:74:fc:79:00:8f:
4c:9f:39:ae:93:8f:c6:27:62:b5:90:71:d8:2d:f7:fd:ea:b4:
01:89:a0:cd:ce:bd:42:74:1b:ef:e0:fe:63:ef:1c:11:c9:21:
d5:ad:53:2b:ed:68:a3:2b:9d:4b:51:f5:fd:c4:e5:88:b8:14:
3e:83:3a:3f:bd:ec:17:0a:be:e6:ef:25:e4:88:e6:ec:55:22:
99:b6:39:d8:8d:48:74:31:d2:9d:b9:02:c8:4c:8e:b8:0d:de:
1e:80:d6:d1:8e:97:80:a0:b1:be:c7:48:30:0d:b0:49:57:4a:
54:5c:30:d2:c4:c7:cc:67:15:e2:15:d8:04:2e:f7:09:9c:c4:
d2:2a:48:3b:d3:07:e2:dd:85:c4:55:c3:9b:1e:ce:8b:ee:0c:
b3:ff:4e:9d:bc:ce:b2:f6:f8:43:8c:1b:98:38:c2:49:d2:e9:
f7:27:8c:4f:ee:8e:eb:0d:b8:ff:a3:d9:98:ff:3c:96:37:ab:
9b:db:fd:b8:4b:45:d6:29:86:51:88:28:37:d0:f5:47:c0:2f:
61:ec:83:c9:43:f2:a2:91:27:fa:5c:bd:e4:47:26:ab:c0:54:
4f:c6:a7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uLqjEZOg9kplERx9lXhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjYxMDE1MDQwMTE4WhcNMjYxMDE2MDQwMTE4WjAzMTEwLwYDVQQD
EyhlNmMyMGM5NjMxYjI0Njg0NDg2MzkyOGZiNzUyZWMwZTIzZmY1YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ww7vtLvnRYEOx9sVArkblbOQrV
KIsZ8Up5tb1FI7yRJXfIfm2M2K2ZTFHSqxoIT48Bn6APbkI6YWasnQE7Z/kc2ZVr
NW6U5AovCvkRfxW/yEjVNrCvAPEvGE7pDZOjy/cCz+qhRx6wR+PtjpIeMWopoiZU
GIcl/2nB78zAsM+O9VOWUWrMdu6bj/SiTRrrYDuRkPRgQ91WcU2AgOiL6vm2EuWd
smh+RVyqRwsmNA73/GbuNaixea9HQqyAlCGqr1CeH3N1UUvHjs0JZX8FsnY3kV89
2rIdVr8FpAkMLMC4pGP/93QJQhnVjRykvlCFLCNW3bsuFNbWWBg5vWRrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObCDJYxskaESGOSj7dS7A4j/1vlMB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGyucoPF
IH8DXCj7U6bWYJf2pdK4g6KuTwginZu4anT8eQCPTJ85rpOPxiditZBx2C33/eq0
AYmgzc69QnQb7+D+Y+8cEckh1a1TK+1ooyudS1H1/cTliLgUPoM6P73sFwq+5u8l
5Ijm7FUimbY52I1IdDHSnbkCyEyOuA3eHoDW0Y6XgKCxvsdIMA2wSVdKVFww0sTH
zGcV4hXYBC73CZzE0ipIO9MH4t2FxFXDmx7Oi+4Ms/9OnbzOsvb4Q4wbmDjCSdLp
9yeMT+6O6w24/6PZmP88ljerm9v9uEtF1imGUYgoN9D1R8AvYeyDyUPyopEn+ly9
5Ecmq8BUT8anag==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:44 2026 by rpki-client