
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: pNkdGBvmBA/TTdr5zOGY4aKLLH8vANmWi0rfWQ82hfk=
Subject key identifier: E0:1F:85:10:81:E1:5D:0E:E7:B6:31:52:45:CA:D5:25:F3:16:9E:45
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019F1566AAE2C2C67417AAEC370470187BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 15FE
Signing time: Mon 29 Jun 2026 22:01:17 +0000
Manifest this update: Mon 29 Jun 2026 22:01:17 +0000
Manifest next update: Tue 30 Jun 2026 22:01:17 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: AKC9u9x9MSyZ0opwY2d5yu0j0YA504SkozAxqeNyxBI=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:66:aa:e2:c2:c6:74:17:aa:ec:37:04:70:18:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jun 29 22:01:17 2026 GMT
Not After : Jun 30 22:01:17 2026 GMT
Subject: CN=e01f851081e15d0ee7b6315245cad525f3169e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:83:59:ef:3a:86:af:00:66:8c:e0:91:79:
9b:f6:ed:dd:51:50:78:1a:ac:65:d1:41:cf:b4:3c:
e0:25:49:69:91:55:b0:08:cd:1f:31:2c:38:18:32:
79:a6:2a:8b:4f:80:6f:01:92:4a:d6:6a:58:ec:9f:
33:ed:b7:96:03:86:4d:70:2c:bb:0a:43:84:72:94:
8c:da:65:37:d1:62:e5:c8:3a:b0:92:df:06:e9:31:
18:96:9c:52:8f:29:0e:72:f1:b0:02:13:b2:93:68:
fb:e7:a4:52:0f:87:c3:a5:7f:5b:20:6d:b5:e2:e5:
6a:1b:b7:28:8e:74:f6:d6:dc:75:b0:e7:57:be:9e:
48:76:f9:14:f0:14:bc:7d:c0:66:c6:ac:c2:ff:18:
1f:0f:83:84:b9:a8:32:2a:c6:a8:b7:8d:43:14:13:
ce:88:8d:84:74:c4:d2:25:74:10:3a:20:ce:ca:b8:
c0:e6:90:ef:51:c6:0f:df:c1:35:74:66:63:36:35:
4b:51:34:4d:2f:68:24:27:b6:86:f2:bd:93:6c:a3:
1d:df:67:66:5f:a7:0a:4c:82:1f:52:67:50:3d:a3:
1c:e5:f4:f9:a0:a4:01:54:94:45:39:cf:ef:b2:cf:
8c:96:07:17:56:b4:cc:5f:de:33:6b:dc:82:08:99:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:85:10:81:E1:5D:0E:E7:B6:31:52:45:CA:D5:25:F3:16:9E:45
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a0:b8:05:2b:cc:f9:c6:43:68:a9:69:b8:08:63:5b:0a:5e:
8a:e1:d1:a0:1c:fc:63:d2:4b:57:2b:88:21:e7:94:bb:23:38:
06:d0:6d:68:c0:64:f2:4b:58:70:e8:c9:c2:6a:0e:ec:05:60:
41:df:3b:37:7e:86:94:cd:7a:1c:72:86:41:e6:bd:77:c1:4d:
0e:5a:5d:f3:01:06:bf:96:46:73:cf:7d:49:70:e2:3b:d6:3a:
91:95:cf:bb:a2:89:e1:20:7e:cc:17:20:06:9d:47:6b:f9:6f:
d6:42:9a:f3:94:e7:45:52:a7:27:c9:ab:9e:75:9c:fa:59:f5:
87:ca:d2:40:d8:e5:db:e6:29:32:31:0c:03:37:82:42:e3:16:
07:f0:14:63:ab:5d:e8:0c:91:03:82:4a:58:24:6d:31:dd:1e:
15:e4:59:e2:c5:20:c1:bd:bc:67:b7:9f:9d:ed:eb:fa:67:4b:
82:78:fe:c9:f0:5f:cf:ff:56:d8:9e:25:d5:cc:d6:75:f6:46:
02:ae:11:1a:22:20:65:3a:35:73:56:be:dc:fa:b1:86:ce:2c:
f5:6d:ac:ad:77:24:7b:b0:7d:b2:81:9c:41:25:60:96:4c:69:
36:44:35:b7:e6:63:06:4d:36:e5:66:ed:bb:ef:f9:7a:0c:d0:
e1:9b:37:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8VZqriwsZ0F6rsNwRwGHvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjYwNjI5MjIwMTE3WhcNMjYwNjMwMjIwMTE3WjAzMTEwLwYDVQQD
EyhlMDFmODUxMDgxZTE1ZDBlZTdiNjMxNTI0NWNhZDUyNWYzMTY5ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw+DWe86hq8AZozgkXmb9u3dUVB4
Gqxl0UHPtDzgJUlpkVWwCM0fMSw4GDJ5piqLT4BvAZJK1mpY7J8z7beWA4ZNcCy7
CkOEcpSM2mU30WLlyDqwkt8G6TEYlpxSjykOcvGwAhOyk2j756RSD4fDpX9bIG21
4uVqG7cojnT21tx1sOdXvp5IdvkU8BS8fcBmxqzC/xgfD4OEuagyKsaot41DFBPO
iI2EdMTSJXQQOiDOyrjA5pDvUcYP38E1dGZjNjVLUTRNL2gkJ7aG8r2TbKMd32dm
X6cKTIIfUmdQPaMc5fT5oKQBVJRFOc/vss+MlgcXVrTMX94za9yCCJn5iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAfhRCB4V0O57YxUkXK1SXzFp5FMB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqC4BSvM
+cZDaKlpuAhjWwpeiuHRoBz8Y9JLVyuIIeeUuyM4BtBtaMBk8ktYcOjJwmoO7AVg
Qd87N36GlM16HHKGQea9d8FNDlpd8wEGv5ZGc899SXDiO9Y6kZXPu6KJ4SB+zBcg
Bp1Ha/lv1kKa85TnRVKnJ8mrnnWc+ln1h8rSQNjl2+YpMjEMAzeCQuMWB/AUY6td
6AyRA4JKWCRtMd0eFeRZ4sUgwb28Z7efne3r+mdLgnj+yfBfz/9W2J4l1czWdfZG
Aq4RGiIgZTo1c1a+3Pqxhs4s9W2srXcke7B9soGcQSVglkxpNkQ1t+ZjBk025Wbt
u+/5egzQ4Zs3Pg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 02:26:16 2026 by rpki-client