
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: KV4SS8svqUEnUlupUlqkAheR99kvcNwd1HbFEv7dP7c=
Subject key identifier: 27:B3:F4:53:FB:06:06:11:C3:DE:26:92:AA:EE:EF:9B:94:B6:7B:E5
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019E3117B4E83CBDF9DA7AEE28B7EFDC55BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 16D6
Signing time: Sat 16 May 2026 14:01:37 +0000
Manifest this update: Sat 16 May 2026 14:01:37 +0000
Manifest next update: Sun 17 May 2026 14:01:37 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: CkOpdsuLeflTpB4IAk3mnDbCEGwvCgYMvwj91p7OnbY=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:b4:e8:3c:bd:f9:da:7a:ee:28:b7:ef:dc:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: May 16 14:01:37 2026 GMT
Not After : May 17 14:01:37 2026 GMT
Subject: CN=27b3f453fb060611c3de2692aaeeef9b94b67be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:b2:91:64:2a:d4:b9:55:b9:49:56:8b:7f:
5f:47:34:2e:f6:96:d1:39:e4:94:60:dd:bb:e9:c3:
56:28:05:03:ff:70:8a:73:14:90:0c:ef:b3:23:3a:
90:12:db:34:c1:72:7a:bb:e4:fb:46:a9:58:5d:08:
2e:24:4f:5f:8b:b2:75:62:b4:db:79:02:f7:21:55:
4c:68:53:0f:91:66:14:61:ac:53:d2:0a:8f:5a:81:
7d:72:7c:d8:da:18:cc:46:6e:5d:54:0f:39:8c:8c:
54:04:84:ac:1e:fc:51:ee:eb:17:37:3b:bb:40:8a:
24:cb:2c:a5:ee:35:bf:c1:bd:c1:ba:50:d5:7f:ae:
d3:19:72:78:a8:fd:8e:72:75:33:49:3f:c9:35:bd:
ea:a8:c8:eb:af:bb:5c:ee:e0:68:89:85:0d:aa:49:
91:56:4d:69:b3:3e:89:9a:1c:a3:78:7a:45:3e:3e:
73:3b:e7:dc:be:e5:9e:5c:c0:66:a3:e7:6d:42:f4:
ef:11:02:8b:58:c0:03:4b:40:e2:e6:09:58:bc:6a:
7c:4e:ec:ba:27:71:80:dd:6e:00:97:86:33:2c:fb:
f6:4d:74:7b:8d:bb:4d:38:eb:fe:dc:56:af:8b:ad:
b0:6f:c9:29:02:6b:62:1f:f6:3b:46:2b:16:13:8f:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:F4:53:FB:06:06:11:C3:DE:26:92:AA:EE:EF:9B:94:B6:7B:E5
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:45:b5:af:ab:6c:a9:38:c2:95:fe:0e:38:c8:1a:aa:99:
1b:db:0e:cf:2a:23:1a:75:51:e6:04:a9:2c:8d:58:b7:87:af:
20:6a:4b:80:60:1f:29:e4:c6:32:65:a8:11:2a:94:6a:e0:08:
e7:5b:c7:4f:31:ae:84:bc:a3:7e:01:2e:24:c1:dd:ae:08:bf:
29:98:5b:35:76:10:c8:74:84:ae:dd:ac:df:98:94:dd:29:35:
29:ba:3c:49:df:91:20:f1:79:c9:94:7a:93:90:b9:92:2a:46:
64:a7:cc:d3:ea:1e:21:b5:19:c9:20:e1:17:4b:f9:00:f3:d3:
46:ab:ee:ff:15:67:61:70:ef:e6:18:77:d5:70:cc:6a:d0:d5:
90:66:8d:a1:de:79:08:6b:fb:fc:e4:75:8f:67:58:7a:45:38:
98:05:34:8b:12:54:7c:55:b6:12:33:25:0c:fb:c7:b4:39:b3:
3a:1e:cf:90:d2:23:6d:56:da:d0:1a:d1:ae:78:ae:ce:2f:43:
49:72:8c:e7:3f:a5:24:77:7e:76:36:9a:60:97:4e:54:20:05:
95:e2:dd:a2:59:0d:8e:54:31:04:af:69:38:8e:ae:2a:e5:58:
49:2f:ba:c6:f1:dd:52:54:46:0f:02:5b:9f:71:87:29:e5:53:
3a:15:41:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF7ToPL352nruKLfv3FW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw
MzMyMzkwHhcNMjYwNTE2MTQwMTM3WhcNMjYwNTE3MTQwMTM3WjAzMTEwLwYDVQQD
EygyN2IzZjQ1M2ZiMDYwNjExYzNkZTI2OTJhYWVlZWY5Yjk0YjY3YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSCykWQq1LlVuUlWi39fRzQu9pbR
OeSUYN276cNWKAUD/3CKcxSQDO+zIzqQEts0wXJ6u+T7RqlYXQguJE9fi7J1YrTb
eQL3IVVMaFMPkWYUYaxT0gqPWoF9cnzY2hjMRm5dVA85jIxUBISsHvxR7usXNzu7
QIokyyyl7jW/wb3BulDVf67TGXJ4qP2OcnUzST/JNb3qqMjrr7tc7uBoiYUNqkmR
Vk1psz6JmhyjeHpFPj5zO+fcvuWeXMBmo+dtQvTvEQKLWMADS0Di5glYvGp8Tuy6
J3GA3W4Al4YzLPv2TXR7jbtNOOv+3Favi62wb8kpAmtiH/Y7RisWE4/FcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCez9FP7BgYRw94mkqru75uUtnvlMB8GA1UdIwQY
MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt
ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3
LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy5Fta+r
bKk4wpX+DjjIGqqZG9sOzyojGnVR5gSpLI1Yt4evIGpLgGAfKeTGMmWoESqUauAI
51vHTzGuhLyjfgEuJMHdrgi/KZhbNXYQyHSErt2s35iU3Sk1Kbo8Sd+RIPF5yZR6
k5C5kipGZKfM0+oeIbUZySDhF0v5APPTRqvu/xVnYXDv5hh31XDMatDVkGaNod55
CGv7/OR1j2dYekU4mAU0ixJUfFW2EjMlDPvHtDmzOh7PkNIjbVba0BrRrniuzi9D
SXKM5z+lJHd+djaaYJdOVCAFleLdolkNjlQxBK9pOI6uKuVYSS+6xvHdUlRGDwJb
n3GHKeVTOhVBkA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:00 2026 by rpki-client