Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: DxAQ128raW7+mXYQXkkkTlp7dyul/EQSJo0eP6ikK0Q=
Subject key identifier: 14:77:93:EE:ED:32:FD:54:49:1A:70:D6:A9:2C:41:FF:9D:22:C4:CF
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 01A00137FD34BD4FAFA6060A7CEFCA6BF2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 1164
Signing time: Fri 14 Aug 2026 17:00:41 +0000
Manifest this update: Fri 14 Aug 2026 17:00:41 +0000
Manifest next update: Sat 15 Aug 2026 17:00:41 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: TgLJLSD9OENKOCeyDADt0aS15l1FJ1j+GykHAiAI5Fk=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:fd:34:bd:4f:af:a6:06:0a:7c:ef:ca:6b:f2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Aug 14 17:00:41 2026 GMT
Not After : Aug 15 17:00:41 2026 GMT
Subject: CN=147793eeed32fd54491a70d6a92c41ff9d22c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:ee:89:fc:52:c2:c4:49:80:77:11:fc:84:
ee:d1:1e:ed:f2:42:1c:03:c1:1a:26:1e:92:08:0e:
ee:e0:32:8b:a6:d9:ce:08:eb:f4:6f:ba:de:5d:1d:
dd:89:49:f7:8f:bb:80:ef:df:20:ee:76:f9:e3:71:
2f:bc:e3:1d:00:1c:2b:f7:b8:7c:b7:9c:09:00:6a:
81:6c:a7:77:f1:ea:3d:7c:ff:87:34:8d:0b:dc:96:
a7:5a:c3:a1:c9:e7:05:13:de:2e:a0:11:6c:f6:14:
6e:b3:35:f8:5f:d5:fa:59:e7:19:a1:bf:0c:14:16:
99:53:b7:95:54:cc:d2:8f:f4:f3:c4:06:49:ec:02:
69:f4:ea:28:99:f8:ee:fe:69:c6:b3:d4:b8:ab:97:
09:84:73:87:d7:89:7e:63:c4:35:f8:78:9f:a1:41:
27:ae:5c:66:b4:96:9a:ad:72:56:35:d4:28:82:d7:
8c:a5:dc:49:46:ac:48:23:e5:b1:56:39:e3:a2:a7:
c7:92:39:34:7f:64:c5:f1:fa:d8:79:29:6c:9d:0c:
66:0b:26:be:75:08:f1:29:67:a3:ce:3a:1e:e4:cb:
b3:9e:3c:1c:8e:6a:f9:11:1e:c4:9a:67:e0:0c:58:
6a:4c:4a:37:23:26:29:d2:4b:93:9c:80:60:45:d1:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:93:EE:ED:32:FD:54:49:1A:70:D6:A9:2C:41:FF:9D:22:C4:CF
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:84:84:cf:05:de:e6:d1:34:cf:fa:85:fe:eb:91:af:41:84:
15:87:34:25:4c:49:8c:ae:83:e6:8e:66:1e:ee:99:52:6f:87:
18:57:1d:2c:47:3a:e9:68:62:52:05:02:9d:c9:74:b6:b9:ca:
ac:8e:e0:2f:d8:7d:13:ac:8f:d6:f2:62:27:85:f7:8f:c9:9e:
c1:c6:4f:68:89:6a:82:76:5d:f9:39:73:ca:4b:f8:19:c2:1f:
b8:2f:d6:52:5b:3a:1b:f5:3a:73:2c:8d:da:6d:f0:4c:41:a3:
d4:ec:1e:c2:f9:5f:e9:42:94:1d:27:51:3a:14:d9:c4:60:b6:
1b:8d:08:1f:23:31:b6:e2:ec:98:68:72:0e:f7:80:a4:b3:d1:
32:26:9f:73:9b:35:cb:94:89:00:4b:db:35:71:29:11:73:06:
2d:99:b1:c1:9e:d7:5c:98:38:cc:d9:a6:49:97:cb:c5:a7:e8:
b5:59:e7:a2:5f:06:21:40:70:cb:b7:64:60:d2:c5:88:ce:fa:
ca:f0:83:c3:7f:c0:46:b2:90:74:ba:af:78:75:a3:ed:96:f7:
7a:06:92:60:24:3c:a8:3c:f5:c4:f0:bb:75:7f:55:c2:f5:0b:
71:62:c6:a5:d9:e5:ac:8f:11:9d:19:e7:11:a5:5d:eb:12:14:
fd:33:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:08 2026 by rpki-client