Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: CcOTwtY7v8V8vL4aGmiqecB6keN+EevYMmUSyKnl8Kk=
Subject key identifier: 26:7C:D6:FA:8D:A1:D3:E7:21:17:9A:18:51:9E:CB:0A:14:82:C4:D8
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 01A12BB2A5654116C6876C463C495B1E3589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 1200
Signing time: Sun 11 Oct 2026 16:01:30 +0000
Manifest this update: Sun 11 Oct 2026 16:01:30 +0000
Manifest next update: Mon 12 Oct 2026 16:01:30 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: hE31u9yP4qv+ClmyBupwVZvevkq5SFX5FCB1w4fJgEk=)
2: _Ma0eGZ-z0n1VYqlad5Keq9wR4A.roa (hash: 3N14sFvn0+1bgJyRiEeYpdH6Wj5+13bYO0jZXdPYIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:a5:65:41:16:c6:87:6c:46:3c:49:5b:1e:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Oct 11 16:01:30 2026 GMT
Not After : Oct 12 16:01:30 2026 GMT
Subject: CN=267cd6fa8da1d3e721179a18519ecb0a1482c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:42:63:f7:15:7e:3e:d3:c2:6b:9a:64:c5:
ec:4d:14:a6:6b:1b:c0:b3:aa:a0:69:34:40:ec:fd:
35:5a:0d:19:cb:87:ca:bb:28:d0:e3:dd:53:1b:aa:
f4:65:43:b2:16:89:80:17:c2:5e:d8:09:d1:50:8f:
82:06:61:3d:25:61:53:21:6d:99:ba:9f:2d:ff:a0:
52:ae:17:f5:a7:65:92:88:4a:84:10:8e:09:d2:a2:
74:e5:ed:b3:34:f6:e6:39:f5:fa:9e:bd:e4:0f:81:
f1:86:31:0f:06:c5:2a:b9:02:7f:e0:ff:3d:94:1d:
eb:af:da:75:97:b9:d7:30:c0:89:85:70:7c:e0:00:
b9:e0:d2:d9:4f:bd:7a:68:79:fd:a6:fd:df:51:dd:
74:4f:30:4c:01:01:fa:14:a2:ce:06:ea:e3:cc:36:
c7:2e:e1:71:a6:8d:12:c0:1f:a8:21:be:55:45:56:
d8:fb:fd:a5:77:db:7b:88:8d:fd:4e:bc:f4:c9:06:
12:c9:12:e1:ac:26:af:06:ed:75:1a:03:6b:4e:41:
df:07:1a:a9:c6:25:7a:dc:1d:64:5e:fb:ad:38:d5:
01:dd:dd:e6:d8:90:cd:20:e0:66:79:c4:2f:71:6b:
35:6f:9c:a9:a9:6a:96:af:ae:04:5f:2b:68:19:bd:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:D6:FA:8D:A1:D3:E7:21:17:9A:18:51:9E:CB:0A:14:82:C4:D8
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:66:d0:8d:a3:36:0e:54:7b:67:a5:1b:c5:5c:96:eb:d2:cd:
d1:0d:1b:d5:a0:c2:49:e4:12:f4:61:54:38:cc:20:6f:81:58:
56:78:10:8f:8a:f3:82:1d:10:11:0a:f5:1a:8e:33:3e:9e:09:
00:95:bc:4a:08:45:45:e0:49:17:6e:c7:e4:e7:b4:45:2b:a7:
41:a6:58:bf:4d:c0:88:f4:74:cd:25:4a:58:a7:26:0e:15:a7:
3c:80:93:9c:a6:4b:2a:e7:62:56:bb:3f:83:ee:d8:87:27:1f:
64:46:27:96:57:28:5e:c1:8b:79:5a:dd:df:03:d5:cd:a9:91:
ba:b2:f6:0d:0e:a3:43:72:03:b0:34:e5:04:cd:21:76:af:e4:
5a:19:ee:bc:e1:f3:06:c3:b9:a7:24:14:0f:28:b6:7f:d7:ec:
f8:f8:da:c9:2f:9f:a1:a9:08:39:e2:d6:7e:ef:67:4d:c2:15:
ae:a9:44:a6:05:3e:eb:fc:54:0d:c7:22:36:19:9c:22:15:8a:
07:6c:18:f9:91:2f:48:9a:54:a0:8c:78:36:d6:66:f7:17:1f:
1d:c5:1c:56:d1:b9:17:ad:69:6c:22:5d:a3:09:81:48:50:ac:
01:ab:d1:2f:e3:4a:8a:7f:28:fb:f5:2a:26:66:11:a3:6f:f9:
a9:4d:e5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsqVlQRbGh2xGPElbHjWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2
N2E4MDIwHhcNMjYxMDExMTYwMTMwWhcNMjYxMDEyMTYwMTMwWjAzMTEwLwYDVQQD
EygyNjdjZDZmYThkYTFkM2U3MjExNzlhMTg1MTllY2IwYTE0ODJjNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5tCY/cVfj7TwmuaZMXsTRSmaxvA
s6qgaTRA7P01Wg0Zy4fKuyjQ491TG6r0ZUOyFomAF8Je2AnRUI+CBmE9JWFTIW2Z
up8t/6BSrhf1p2WSiEqEEI4J0qJ05e2zNPbmOfX6nr3kD4HxhjEPBsUquQJ/4P89
lB3rr9p1l7nXMMCJhXB84AC54NLZT716aHn9pv3fUd10TzBMAQH6FKLOBurjzDbH
LuFxpo0SwB+oIb5VRVbY+/2ld9t7iI39Trz0yQYSyRLhrCavBu11GgNrTkHfBxqp
xiV63B1kXvutONUB3d3m2JDNIOBmecQvcWs1b5ypqWqWr64EXytoGb03hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ81vqNodPnIReaGFGeywoUgsTYMB8GA1UdIwQY
MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt
ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl
LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGbQjaM2
DlR7Z6UbxVyW69LN0Q0b1aDCSeQS9GFUOMwgb4FYVngQj4rzgh0QEQr1Go4zPp4J
AJW8SghFReBJF27H5Oe0RSunQaZYv03AiPR0zSVKWKcmDhWnPICTnKZLKudiVrs/
g+7YhycfZEYnllcoXsGLeVrd3wPVzamRurL2DQ6jQ3IDsDTlBM0hdq/kWhnuvOHz
BsO5pyQUDyi2f9fs+PjayS+foakIOeLWfu9nTcIVrqlEpgU+6/xUDcciNhmcIhWK
B2wY+ZEvSJpUoIx4NtZm9xcfHcUcVtG5F61pbCJdowmBSFCsAavRL+NKin8o+/Uq
JmYRo2/5qU3l0g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:40 2026 by rpki-client