Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
File: DwQeIIaCRVpnlCzipkhYygcEfos.mft (raw, json)
Hash identifier: BbxBsneMhVmDfkOOcg6gzTJZgigpkPKh9a2BHIGfbAA=
Subject key identifier: 27:33:70:AF:D5:8A:CA:EF:6E:F8:39:36:F2:01:8F:C5:E6:F4:02:68
Authority key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
Certificate issuer: /CN=0f041e208682455a67942ce2a64858ca07047e8b
Certificate serial: 01A0005CDDD807F9640DBB01EADDAF185138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 13:01:21 +0000
Manifest this update: Fri 14 Aug 2026 13:01:21 +0000
Manifest next update: Sat 15 Aug 2026 13:01:21 +0000
Files and hashes: 1: DwQeIIaCRVpnlCzipkhYygcEfos.crl (hash: zcy4QS37l5ybE2PWC/nUFVkZfClHkxX5WC++XRK2Nkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:dd:d8:07:f9:64:0d:bb:01:ea:dd:af:18:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f041e208682455a67942ce2a64858ca07047e8b
Validity
Not Before: Aug 14 13:01:21 2026 GMT
Not After : Aug 15 13:01:21 2026 GMT
Subject: CN=273370afd58acaef6ef83936f2018fc5e6f40268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:5a:ab:76:d8:b1:cc:a7:f3:10:d8:d0:45:
e8:48:02:c3:b3:62:42:56:83:15:93:08:60:be:bb:
bc:9f:ce:cd:33:e4:74:24:76:15:09:d7:a5:ab:c7:
b7:ca:33:b7:ce:1f:a3:35:f4:58:f2:d1:39:c2:b7:
4e:52:34:c0:cc:f9:f0:28:7f:bd:f2:40:d6:dd:ee:
90:7b:b0:a1:3f:32:c8:b1:2c:37:58:51:e4:94:74:
b3:2c:18:9d:45:37:3f:7a:5f:b8:e7:f2:7a:9b:39:
a9:bd:ae:92:69:b4:a7:a4:82:3e:b9:36:49:6e:48:
5b:fa:5d:d3:d3:49:a4:79:ec:02:74:16:7e:30:90:
45:84:e8:6f:ac:ba:02:58:11:2a:55:71:26:bd:25:
b1:d0:3f:3b:86:f1:60:ff:27:95:21:7d:23:4f:c5:
41:c5:10:6e:96:8e:34:78:2d:3c:b3:62:9d:57:95:
fa:b9:ea:b8:2c:2e:4b:39:c7:25:7b:7a:59:81:ff:
0a:3b:d9:d4:d0:da:36:b7:7c:b7:bd:cc:2c:fb:35:
15:a7:c3:e6:4c:24:50:f1:8f:0b:de:14:61:bd:40:
91:ad:0e:03:a3:cb:86:21:69:d4:18:9b:b7:6d:05:
64:3f:44:c3:db:ff:77:31:e9:e8:b9:89:ff:df:5a:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:70:AF:D5:8A:CA:EF:6E:F8:39:36:F2:01:8F:C5:E6:F4:02:68
X509v3 Authority Key Identifier:
keyid:0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1f:1b:b9:40:f7:2b:2c:b6:e6:e0:98:76:66:7f:3c:3b:79:
a2:47:04:4c:90:c3:59:2c:9a:3b:e1:14:7c:57:3f:fc:af:1b:
e4:c9:f9:65:29:22:e4:00:00:68:59:16:8c:e9:c2:07:a3:1f:
1b:fc:f7:7e:da:14:ea:1e:a2:b9:02:a9:1c:6f:c5:3e:e4:68:
32:35:f2:b4:76:93:64:88:71:b0:25:55:ad:29:3f:ad:c8:f0:
b5:25:3c:9a:9b:1a:a5:ed:d4:3a:8b:ba:6f:5a:ee:aa:ea:03:
c9:1c:46:3c:07:99:0c:8f:ed:50:af:85:5e:6e:32:71:1a:9b:
27:37:1d:ab:2f:75:49:e2:23:57:ce:73:76:36:a1:b8:c0:e4:
b8:d6:99:2f:21:a7:3c:f3:85:50:c2:65:fe:e7:01:c4:0a:af:
dc:f1:be:8d:77:79:6e:80:67:8a:72:a2:78:10:67:69:02:c4:
8d:7f:ec:47:ef:28:98:1d:64:15:15:44:af:4a:ef:8a:85:a3:
30:d1:49:6e:85:58:df:01:a2:4b:ff:0d:43:dd:19:10:ae:7b:
a4:e3:b7:e1:54:8c:08:04:69:f1:cb:ae:26:28:4a:bf:fc:a7:
00:6c:3c:1e:64:fc:52:47:71:5b:74:43:03:42:1a:81:87:e0:
1e:7d:dd:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXN3YB/lkDbsB6t2vGFE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDQxZTIwODY4MjQ1NWE2Nzk0MmNlMmE2NDg1OGNhMDcw
NDdlOGIwHhcNMjYwODE0MTMwMTIxWhcNMjYwODE1MTMwMTIxWjAzMTEwLwYDVQQD
EygyNzMzNzBhZmQ1OGFjYWVmNmVmODM5MzZmMjAxOGZjNWU2ZjQwMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZZaq3bYscyn8xDY0EXoSALDs2JC
VoMVkwhgvru8n87NM+R0JHYVCdelq8e3yjO3zh+jNfRY8tE5wrdOUjTAzPnwKH+9
8kDW3e6Qe7ChPzLIsSw3WFHklHSzLBidRTc/el+45/J6mzmpva6SabSnpII+uTZJ
bkhb+l3T00mkeewCdBZ+MJBFhOhvrLoCWBEqVXEmvSWx0D87hvFg/yeVIX0jT8VB
xRBulo40eC08s2KdV5X6ueq4LC5LOccle3pZgf8KO9nU0No2t3y3vcws+zUVp8Pm
TCRQ8Y8L3hRhvUCRrQ4Do8uGIWnUGJu3bQVkP0TD2/93MenouYn/31rN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCczcK/Visrvbvg5NvIBj8Xm9AJoMB8GA1UdIwQY
MBaAFA8EHiCGgkVaZ5Qs4qZIWMoHBH6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAt
N2ZmZGZlZTU3ZjUyLzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAtN2ZmZGZlZTU3ZjUy
LzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkR8buUD3
Kyy25uCYdmZ/PDt5okcETJDDWSyaO+EUfFc//K8b5Mn5ZSki5AAAaFkWjOnCB6Mf
G/z3ftoU6h6iuQKpHG/FPuRoMjXytHaTZIhxsCVVrSk/rcjwtSU8mpsape3UOou6
b1ruquoDyRxGPAeZDI/tUK+FXm4ycRqbJzcdqy91SeIjV85zdjahuMDkuNaZLyGn
PPOFUMJl/ucBxAqv3PG+jXd5boBninKieBBnaQLEjX/sR+8omB1kFRVEr0rvioWj
MNFJboVY3wGiS/8NQ90ZEK57pOO34VSMCARp8cuuJihKv/ynAGw8HmT8UkdxW3RD
A0IagYfgHn3dVw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:17 2026 by rpki-client