Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: MYeVRsz6HLcxd/y658WilteoJKU6a5I2cPGrC5tqEcc=
Subject key identifier: 71:CC:B4:03:23:1F:08:B3:64:8F:B9:19:D6:0E:BC:27:A7:0D:93:2F
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019F7218D412C2E9EE851E5555E0950B769A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0A1E
Signing time: Fri 17 Jul 2026 22:00:57 +0000
Manifest this update: Fri 17 Jul 2026 22:00:57 +0000
Manifest next update: Sat 18 Jul 2026 22:00:57 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: nI3O32Q4Is7KKDVz4HATbgoj7g+p8dvW3bfanC2nwag=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:d4:12:c2:e9:ee:85:1e:55:55:e0:95:0b:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jul 17 22:00:57 2026 GMT
Not After : Jul 18 22:00:57 2026 GMT
Subject: CN=71ccb403231f08b3648fb919d60ebc27a70d932f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:0f:06:b7:b6:e7:f5:4f:ef:a6:f7:68:86:
8e:b6:df:ab:fa:29:40:10:23:5e:a8:2e:e1:24:7a:
a5:71:ad:54:81:16:e1:94:cf:5f:e5:b0:50:c9:f2:
05:73:30:f7:33:2e:a0:87:da:0f:69:81:47:6c:c1:
77:ae:4d:c9:f9:a1:0b:a2:b6:cf:15:c0:80:f6:11:
ed:74:7f:fa:02:14:1f:ff:01:f1:04:86:47:3b:8d:
c8:48:b0:61:ed:45:b6:8e:50:99:18:13:e1:b2:55:
92:8b:9b:cd:e0:51:e0:1d:04:62:c6:08:fa:20:03:
75:46:cf:1b:79:2c:be:d4:69:df:4c:4c:5d:30:cf:
e9:31:fd:23:dc:6d:a0:27:c9:38:cc:92:d4:c1:9a:
23:5c:b7:f8:3e:ec:84:c6:ab:4f:47:89:64:52:4f:
f5:ac:5a:6c:71:14:10:2e:e9:66:93:2f:28:f3:41:
41:cb:4f:4b:3e:04:43:1b:a3:7d:3a:22:cc:1f:49:
4e:39:5d:10:25:53:d4:1d:96:50:21:ed:2c:0c:ba:
c8:2c:4a:c9:1f:58:64:3f:55:4e:16:65:51:de:05:
f9:59:41:1c:0f:ed:86:a7:1c:85:68:f1:90:5c:c7:
03:3e:ba:6b:82:4a:f2:0b:e4:99:d6:ce:4c:ff:62:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:B4:03:23:1F:08:B3:64:8F:B9:19:D6:0E:BC:27:A7:0D:93:2F
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:05:ea:e3:70:af:57:d2:0e:00:cd:4b:d8:a5:38:41:54:57:
5b:dd:59:ba:84:c8:2f:9a:81:04:e4:9f:7f:b1:a8:7f:f3:cd:
12:09:ab:db:c0:9d:a5:4d:1d:22:f9:25:3e:86:5f:b7:a1:b3:
3e:f8:57:ca:e5:f1:be:d4:7c:7f:a7:13:06:b9:00:00:43:89:
a6:db:e4:ad:52:ba:c0:7a:bf:31:fe:ff:d5:bd:2a:88:02:e4:
bc:4c:c8:80:8e:e7:39:24:53:a4:fa:90:a4:50:f0:a2:b8:27:
c5:7e:6c:91:b7:6f:ab:c3:27:aa:93:29:29:72:fe:f2:55:25:
d9:7d:a2:46:9d:15:25:4b:f1:e2:52:4d:9d:57:64:5d:c4:ad:
8e:1e:f4:2e:91:9a:35:0c:31:4e:9b:0c:a6:04:c5:2d:bb:22:
82:74:41:01:97:ff:2f:b4:22:4d:50:95:62:ae:42:52:07:a3:
22:b0:15:20:4d:9d:20:c5:2d:df:b8:41:17:8d:16:51:3f:31:
7d:99:41:d4:c9:99:49:52:52:56:6d:39:97:2c:81:8e:14:3c:
37:2b:c9:02:f1:17:1e:98:ce:d5:80:4b:8e:e7:ef:75:df:3e:
07:71:01:4e:83:2f:30:ea:30:e2:90:80:e2:d8:03:6e:ab:8a:
8f:0d:9a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9yGNQSwunuhR5VVeCVC3aaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjYwNzE3MjIwMDU3WhcNMjYwNzE4MjIwMDU3WjAzMTEwLwYDVQQD
Eyg3MWNjYjQwMzIzMWYwOGIzNjQ4ZmI5MTlkNjBlYmMyN2E3MGQ5MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IsPBre25/VP76b3aIaOtt+r+ilA
ECNeqC7hJHqlca1UgRbhlM9f5bBQyfIFczD3My6gh9oPaYFHbMF3rk3J+aELorbP
FcCA9hHtdH/6AhQf/wHxBIZHO43ISLBh7UW2jlCZGBPhslWSi5vN4FHgHQRixgj6
IAN1Rs8beSy+1GnfTExdMM/pMf0j3G2gJ8k4zJLUwZojXLf4PuyExqtPR4lkUk/1
rFpscRQQLulmky8o80FBy09LPgRDG6N9OiLMH0lOOV0QJVPUHZZQIe0sDLrILErJ
H1hkP1VOFmVR3gX5WUEcD+2GpxyFaPGQXMcDPrprgkryC+SZ1s5M/2LEpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHMtAMjHwizZI+5GdYOvCenDZMvMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwXq43Cv
V9IOAM1L2KU4QVRXW91ZuoTIL5qBBOSff7Gof/PNEgmr28CdpU0dIvklPoZft6Gz
PvhXyuXxvtR8f6cTBrkAAEOJptvkrVK6wHq/Mf7/1b0qiALkvEzIgI7nOSRTpPqQ
pFDworgnxX5skbdvq8MnqpMpKXL+8lUl2X2iRp0VJUvx4lJNnVdkXcStjh70LpGa
NQwxTpsMpgTFLbsignRBAZf/L7QiTVCVYq5CUgejIrAVIE2dIMUt37hBF40WUT8x
fZlB1MmZSVJSVm05lyyBjhQ8NyvJAvEXHpjO1YBLjufvdd8+B3EBToMvMOow4pCA
4tgDbquKjw2ajA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:15 2026 by rpki-client