Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: gLDVToLpEGxFimiyY8ln8QMeMj1/CLZ0I0gS3Dwt2W8=
Subject key identifier: FF:A6:65:40:35:34:52:05:92:BF:5A:63:C4:27:75:E8:CC:5C:3B:6D
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019E2FCDC3DBCFB8A97E9C534F485E4EE5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 1073
Signing time: Sat 16 May 2026 08:01:14 +0000
Manifest this update: Sat 16 May 2026 08:01:14 +0000
Manifest next update: Sun 17 May 2026 08:01:14 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: 57LSKJNQimUjgT/esVAOBHAT6MTcwa0HF5NUWbdCSyU=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:c3:db:cf:b8:a9:7e:9c:53:4f:48:5e:4e:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: May 16 08:01:14 2026 GMT
Not After : May 17 08:01:14 2026 GMT
Subject: CN=ffa665403534520592bf5a63c42775e8cc5c3b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:60:0e:98:b0:8d:46:1d:98:a3:3f:a4:c9:
8c:48:a4:da:c9:07:0d:39:f4:0e:da:3b:8f:fb:a2:
35:bc:9c:1b:22:50:11:82:49:1b:a8:7f:ee:be:f8:
c1:f9:e3:1b:13:49:a2:b8:d7:eb:34:07:7e:88:95:
67:11:6e:7c:25:8f:69:6d:8b:15:2e:49:b0:4a:f6:
0d:1f:0e:64:2b:20:bb:6f:8b:67:4f:7a:ae:d5:5e:
43:74:de:21:24:a1:74:72:8a:e5:5d:46:53:7e:5d:
60:78:1c:25:ea:96:67:cc:66:b7:c1:41:b1:e0:68:
fa:5f:e4:2d:ee:fa:87:52:47:a3:e7:e7:f8:a1:53:
d6:00:81:93:d0:03:6d:2b:ff:bf:87:19:b2:e4:0f:
8f:fa:92:79:8b:f8:8c:cb:d9:82:b6:85:ea:58:96:
1e:79:b7:4d:5f:d5:11:13:76:fc:fc:ad:e5:00:91:
d7:8f:f5:06:b0:52:8f:84:58:56:d3:ab:f7:8c:b4:
b2:cc:35:f3:ea:bb:f3:5d:0c:86:7a:2f:9a:a5:58:
b6:1a:e3:65:81:05:35:85:b6:c7:3a:03:09:8c:cf:
5a:2b:3c:b3:8b:5d:db:5d:f8:f0:1d:8a:21:d9:b2:
55:99:14:71:d6:60:79:7f:50:52:9b:a8:71:57:2d:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:65:40:35:34:52:05:92:BF:5A:63:C4:27:75:E8:CC:5C:3B:6D
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:49:08:78:11:11:d7:6e:21:78:14:25:7a:80:14:dd:95:e6:
cf:55:b6:ae:67:e8:14:80:5b:9d:6a:55:38:9a:df:2a:a7:a5:
b3:22:4b:09:b3:b4:7d:89:a5:86:6e:8d:81:93:0a:8c:97:39:
2b:fb:f2:c4:fb:88:9f:a8:0e:57:04:e8:42:ae:fc:46:fd:6f:
fa:71:28:e7:55:f0:62:8f:35:85:f4:03:84:c6:47:c0:e6:c5:
36:49:1d:b5:95:43:0b:b3:0f:64:0c:2c:f9:4a:20:0b:16:81:
20:3d:9f:82:c8:23:9f:81:a7:56:6d:9b:95:04:20:51:8e:03:
ef:27:c0:07:d4:20:f7:9d:75:ab:e4:47:da:3e:f6:5a:61:e7:
f2:41:db:88:44:b5:f8:02:c5:28:db:ff:5f:d8:0e:fa:c0:0b:
97:9f:0c:c8:60:6b:72:6b:7c:29:b7:5b:00:ba:0c:62:e0:5e:
2c:c1:8a:5a:e9:3e:d1:3e:3e:1b:4d:85:53:bc:cf:30:da:5b:
db:95:86:81:5f:d6:4e:1e:f2:db:22:6a:ce:c2:1d:a1:47:3b:
46:45:89:d1:73:0e:af:c0:e0:35:d0:14:2e:37:66:ac:c4:4f:
54:a0:d0:ba:dd:1b:d9:5d:7e:28:a4:f2:09:03:22:54:ea:29:
36:22:87:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzcPbz7ipfpxTT0heTuX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2
N2E4MDIwHhcNMjYwNTE2MDgwMTE0WhcNMjYwNTE3MDgwMTE0WjAzMTEwLwYDVQQD
EyhmZmE2NjU0MDM1MzQ1MjA1OTJiZjVhNjNjNDI3NzVlOGNjNWMzYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFZgDpiwjUYdmKM/pMmMSKTayQcN
OfQO2juP+6I1vJwbIlARgkkbqH/uvvjB+eMbE0miuNfrNAd+iJVnEW58JY9pbYsV
LkmwSvYNHw5kKyC7b4tnT3qu1V5DdN4hJKF0corlXUZTfl1geBwl6pZnzGa3wUGx
4Gj6X+Qt7vqHUkej5+f4oVPWAIGT0ANtK/+/hxmy5A+P+pJ5i/iMy9mCtoXqWJYe
ebdNX9URE3b8/K3lAJHXj/UGsFKPhFhW06v3jLSyzDXz6rvzXQyGei+apVi2GuNl
gQU1hbbHOgMJjM9aKzyzi13bXfjwHYoh2bJVmRRx1mB5f1BSm6hxVy2P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+mZUA1NFIFkr9aY8QndejMXDttMB8GA1UdIwQY
MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt
ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl
LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUkIeBER
124heBQleoAU3ZXmz1W2rmfoFIBbnWpVOJrfKqelsyJLCbO0fYmlhm6NgZMKjJc5
K/vyxPuIn6gOVwToQq78Rv1v+nEo51XwYo81hfQDhMZHwObFNkkdtZVDC7MPZAws
+UogCxaBID2fgsgjn4GnVm2blQQgUY4D7yfAB9Qg9511q+RH2j72WmHn8kHbiES1
+ALFKNv/X9gO+sALl58MyGBrcmt8KbdbALoMYuBeLMGKWuk+0T4+G02FU7zPMNpb
25WGgV/WTh7y2yJqzsIdoUc7RkWJ0XMOr8DgNdAULjdmrMRPVKDQut0b2V1+KKTy
CQMiVOopNiKHuA==
-----END CERTIFICATE-----
Generated at Sat May 16 10:55:38 2026 by rpki-client