Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: nByU9sLemnuth0xwuLGy3mAj4ItmyUDg7emxngmAnuM=
Subject key identifier: BD:8F:25:5F:C9:0F:EB:FD:75:D7:F9:D6:8B:78:4C:6F:4F:B7:AD:58
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019F178C41F4094D5B0E33B5ADA0B9F9232B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 10EB
Signing time: Tue 30 Jun 2026 08:01:35 +0000
Manifest this update: Tue 30 Jun 2026 08:01:35 +0000
Manifest next update: Wed 01 Jul 2026 08:01:35 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: tH5LMOTGPhKOiJLc6jUu4+W1qkhptqRpzO/LHnUWBQo=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:41:f4:09:4d:5b:0e:33:b5:ad:a0:b9:f9:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jun 30 08:01:35 2026 GMT
Not After : Jul 1 08:01:35 2026 GMT
Subject: CN=bd8f255fc90febfd75d7f9d68b784c6f4fb7ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:f0:ef:17:10:05:4e:c3:8d:da:81:58:f2:
8e:a1:d5:63:5e:19:ea:c1:99:e2:a7:ef:9f:ef:84:
9c:09:16:71:ab:f3:d3:a7:7e:92:c5:ab:0b:af:df:
5c:fd:2d:0f:4d:3b:6f:08:6e:94:1a:d0:32:52:35:
0f:cf:19:05:6d:63:19:b0:93:f9:4b:e4:54:f5:4c:
5e:b1:5c:a9:bd:1c:37:73:b2:66:b4:19:b3:13:8f:
99:c8:c7:83:95:b1:90:b8:60:7e:44:f1:93:e1:0d:
0b:fc:01:97:a7:3c:ba:78:9d:91:03:dd:34:1c:d6:
8f:5d:ad:61:dd:b9:a7:06:0f:6c:f1:ec:ae:fe:cf:
9b:85:bc:b1:71:7b:1d:ee:b2:43:a6:ab:eb:9c:5e:
d0:5c:42:a2:d4:3e:95:d8:1f:5c:fb:40:f5:dc:0d:
1e:ab:ac:69:5c:8b:a8:44:ee:1b:55:77:8d:5a:e6:
ae:9e:91:88:d3:94:b9:39:bc:63:1b:61:6d:9c:e8:
19:ef:05:6b:cf:3d:f8:1c:49:30:b1:f6:08:9e:6a:
e4:55:3a:05:b6:c8:49:c5:c9:4c:4c:70:2d:c0:fb:
d8:cd:3f:9e:22:96:dc:d2:42:b5:21:10:27:a4:a3:
b0:af:01:8b:4f:1d:3d:9a:20:c3:65:c7:e3:5c:06:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:25:5F:C9:0F:EB:FD:75:D7:F9:D6:8B:78:4C:6F:4F:B7:AD:58
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9c:36:34:89:39:2d:57:19:bd:ff:aa:5d:a0:97:60:e5:2a:
26:e5:8f:d6:cd:c3:8b:a7:f4:90:6a:83:b3:42:cd:24:3e:22:
34:f6:6b:84:39:48:e9:5d:ae:97:0e:e9:d0:7b:9a:53:76:07:
4c:73:63:49:25:f9:69:a5:25:db:18:a1:80:4b:56:05:14:98:
b5:c5:27:2b:fc:16:9c:43:b7:cc:f6:ee:8f:ae:1b:19:d6:4d:
f9:79:e8:db:67:2d:69:3d:51:08:b7:c7:fe:ca:5d:04:3b:57:
77:19:c0:7d:18:28:0d:4f:f2:77:3c:83:31:ff:3d:b9:01:7c:
51:c1:8a:38:21:c2:ca:a5:b8:06:97:70:a3:98:e1:10:6e:0c:
1c:32:61:b6:0d:bb:6b:09:bc:84:f9:cc:89:65:ca:0f:a3:0a:
63:85:4a:43:60:e9:01:1a:60:6b:82:14:33:eb:a7:53:3b:59:
17:69:ee:ab:f6:7f:3f:95:f4:3f:e1:f2:df:f6:85:e9:7a:75:
89:38:5c:1a:10:13:dd:8a:3a:f5:bc:83:9c:71:30:2a:62:25:
4f:8a:33:9e:9b:6b:9e:31:56:19:d2:b1:12:70:4f:72:9a:2c:
0f:a1:a3:a0:d5:32:92:11:cf:1b:7b:34:fc:fd:90:26:0b:40:
5f:35:77:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XjEH0CU1bDjO1raC5+SMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2
N2E4MDIwHhcNMjYwNjMwMDgwMTM1WhcNMjYwNzAxMDgwMTM1WjAzMTEwLwYDVQQD
EyhiZDhmMjU1ZmM5MGZlYmZkNzVkN2Y5ZDY4Yjc4NGM2ZjRmYjdhZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDvw7xcQBU7DjdqBWPKOodVjXhnq
wZnip++f74ScCRZxq/PTp36SxasLr99c/S0PTTtvCG6UGtAyUjUPzxkFbWMZsJP5
S+RU9UxesVypvRw3c7JmtBmzE4+ZyMeDlbGQuGB+RPGT4Q0L/AGXpzy6eJ2RA900
HNaPXa1h3bmnBg9s8eyu/s+bhbyxcXsd7rJDpqvrnF7QXEKi1D6V2B9c+0D13A0e
q6xpXIuoRO4bVXeNWuaunpGI05S5ObxjG2FtnOgZ7wVrzz34HEkwsfYInmrkVToF
tshJxclMTHAtwPvYzT+eIpbc0kK1IRAnpKOwrwGLTx09miDDZcfjXAZ0zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2PJV/JD+v9ddf51ot4TG9Pt61YMB8GA1UdIwQY
MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt
ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl
LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJw2NIk5
LVcZvf+qXaCXYOUqJuWP1s3Di6f0kGqDs0LNJD4iNPZrhDlI6V2ulw7p0HuaU3YH
THNjSSX5aaUl2xihgEtWBRSYtcUnK/wWnEO3zPbuj64bGdZN+Xno22ctaT1RCLfH
/spdBDtXdxnAfRgoDU/ydzyDMf89uQF8UcGKOCHCyqW4Bpdwo5jhEG4MHDJhtg27
awm8hPnMiWXKD6MKY4VKQ2DpARpga4IUM+unUztZF2nuq/Z/P5X0P+Hy3/aF6Xp1
iThcGhAT3Yo69byDnHEwKmIlT4oznptrnjFWGdKxEnBPcposD6GjoNUykhHPG3s0
/P2QJgtAXzV31g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:50 2026 by rpki-client