
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: vbwtwqMyIFdPwOkq1Meha8tJymna0AQh47WCexxQvoI=
Subject key identifier: A3:44:74:E3:E6:A4:47:7D:6E:37:71:E7:71:57:D3:1E:6A:57:3D:27
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 01A18E668CE65C5FB5F68E53192465CE703A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 0320
Signing time: Fri 30 Oct 2026 20:00:47 +0000
Manifest this update: Fri 30 Oct 2026 20:00:47 +0000
Manifest next update: Sat 31 Oct 2026 20:00:47 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: XAPxaBgDlSBGGdO12WCLRe1k6LbncnBx5/bi7qPVQaw=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:8c:e6:5c:5f:b5:f6:8e:53:19:24:65:ce:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Oct 30 20:00:47 2026 GMT
Not After : Oct 31 20:00:47 2026 GMT
Subject: CN=a34474e3e6a4477d6e3771e77157d31e6a573d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:ab:aa:fe:31:47:fb:05:54:c5:ec:4a:fe:
98:2f:ce:0a:67:8c:c2:ad:31:78:70:f4:56:51:74:
e3:e1:66:d9:76:84:cd:72:96:08:61:0c:f8:8e:e1:
0d:12:c5:85:dc:04:d3:de:15:bc:d8:44:ca:39:f9:
2d:10:da:74:00:08:87:8e:b5:de:f4:c2:e3:26:c2:
43:25:45:24:9a:a5:ab:0e:3f:f1:98:13:55:98:16:
b9:64:4f:79:c1:5b:c2:20:65:41:dc:62:a7:6c:e8:
c2:c8:76:4d:5d:e4:85:06:89:79:ca:13:e8:72:64:
e1:5f:c0:18:84:49:66:36:a8:13:d6:7f:18:e5:81:
7f:07:08:de:5e:74:61:e4:48:af:0d:3d:10:19:00:
13:3b:de:f3:97:5f:02:f3:be:26:18:5d:12:de:9e:
78:94:74:d4:e1:3a:d6:15:e0:f7:54:31:44:36:a2:
49:e9:d8:f1:b3:cf:cc:46:b5:d0:e9:cf:1a:a5:ac:
80:9c:57:37:a4:5d:6b:ac:f6:62:c8:97:4e:37:45:
53:69:3a:e9:60:25:71:e8:d4:6c:b1:47:07:2c:67:
6b:4e:c0:31:2a:50:b4:c9:4d:57:d0:76:ce:30:f4:
3c:ff:23:70:bd:8a:ae:f0:de:ed:5c:8b:e3:39:7c:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:74:E3:E6:A4:47:7D:6E:37:71:E7:71:57:D3:1E:6A:57:3D:27
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:a6:82:37:4c:2f:32:c2:ca:95:50:91:20:64:1a:b8:1c:
ff:9b:2e:38:3c:da:9b:8a:0f:fb:ef:20:bb:bf:21:80:2f:00:
bf:77:5b:07:f2:83:0a:bc:3f:f3:58:7f:36:17:b4:f1:59:73:
f5:f5:13:2b:fb:bb:ca:12:e7:ff:3e:4b:f8:ca:b6:e7:30:08:
e9:c1:df:49:5c:4f:d8:7c:bb:c8:ae:a9:bc:eb:d9:de:99:f0:
cc:d8:3e:35:fd:da:2b:91:22:ba:8d:70:f1:06:e2:96:e1:8e:
ec:31:a1:00:4a:5b:2c:59:28:ad:6b:73:3c:8c:33:9b:05:b9:
55:e1:ac:6a:10:ee:71:5d:91:99:c1:3b:fe:26:64:5d:ba:09:
9f:78:92:30:08:9c:04:d9:fa:86:ac:bb:cb:bc:5c:22:ee:29:
53:7d:d3:bb:59:1b:18:d5:a3:dd:90:ce:5b:e0:86:33:9e:8e:
ec:e6:d5:c3:b3:37:25:67:0f:80:fb:88:e6:9a:ed:c9:72:80:
67:28:b5:82:e4:a2:07:3f:70:2b:4b:17:2b:7a:24:25:63:e3:
db:9e:26:7a:1a:83:1b:38:e9:50:38:cb:12:31:bf:31:3c:f3:
c8:bf:77:25:9d:b7:ed:0f:95:f9:1c:dd:39:3b:8a:c3:67:1e:
9f:55:e3:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOZozmXF+19o5TGSRlznA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz
MjBmMTYwHhcNMjYxMDMwMjAwMDQ3WhcNMjYxMDMxMjAwMDQ3WjAzMTEwLwYDVQQD
EyhhMzQ0NzRlM2U2YTQ0NzdkNmUzNzcxZTc3MTU3ZDMxZTZhNTczZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LGrqv4xR/sFVMXsSv6YL84KZ4zC
rTF4cPRWUXTj4WbZdoTNcpYIYQz4juENEsWF3ATT3hW82ETKOfktENp0AAiHjrXe
9MLjJsJDJUUkmqWrDj/xmBNVmBa5ZE95wVvCIGVB3GKnbOjCyHZNXeSFBol5yhPo
cmThX8AYhElmNqgT1n8Y5YF/BwjeXnRh5EivDT0QGQATO97zl18C874mGF0S3p54
lHTU4TrWFeD3VDFENqJJ6djxs8/MRrXQ6c8apayAnFc3pF1rrPZiyJdON0VTaTrp
YCVx6NRssUcHLGdrTsAxKlC0yU1X0HbOMPQ8/yNwvYqu8N7tXIvjOXwbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNEdOPmpEd9bjdx53FX0x5qVz0nMB8GA1UdIwQY
MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct
MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm
LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/emgjdM
LzLCypVQkSBkGrgc/5suODzam4oP++8gu78hgC8Av3dbB/KDCrw/81h/Nhe08Vlz
9fUTK/u7yhLn/z5L+Mq25zAI6cHfSVxP2Hy7yK6pvOvZ3pnwzNg+Nf3aK5Eiuo1w
8QbiluGO7DGhAEpbLFkorWtzPIwzmwW5VeGsahDucV2RmcE7/iZkXboJn3iSMAic
BNn6hqy7y7xcIu4pU33Tu1kbGNWj3ZDOW+CGM56O7ObVw7M3JWcPgPuI5prtyXKA
Zyi1guSiBz9wK0sXK3okJWPj254mehqDGzjpUDjLEjG/MTzzyL93JZ237Q+V+Rzd
OTuKw2cen1Xj5w==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:16:33 2026 by rpki-client