Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: JmROt/eNrWivLrfXZ82lUoPE2MbJtTwtopLroQwkjM8=
Subject key identifier: 50:C6:E1:A5:DB:89:EC:07:CF:F5:CD:FE:8E:49:8D:1F:70:22:09:D0
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019FFDC98E144CA0A21F805F982B21F5FF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 18F0
Signing time: Fri 14 Aug 2026 01:01:12 +0000
Manifest this update: Fri 14 Aug 2026 01:01:12 +0000
Manifest next update: Sat 15 Aug 2026 01:01:12 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: ExklS/mr9pxeU2rY9W3PqVftHoc7eFW8qe5FbIiELik=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:c9:8e:14:4c:a0:a2:1f:80:5f:98:2b:21:f5:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Aug 14 01:01:12 2026 GMT
Not After : Aug 15 01:01:12 2026 GMT
Subject: CN=50c6e1a5db89ec07cff5cdfe8e498d1f702209d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:fd:41:61:50:b8:7d:49:0f:5c:3e:95:67:
5f:4f:f9:b4:cd:ba:b2:db:0d:8c:69:61:14:e6:a7:
2d:1e:a6:f7:bf:38:23:58:63:06:ac:9f:4b:33:bb:
97:ff:02:54:5d:e9:9f:42:ff:8d:20:fe:d8:ae:0c:
bc:23:89:94:a3:16:79:e9:05:ed:0b:1a:d6:aa:a3:
28:3c:cb:bb:34:f2:bf:56:b4:88:71:5c:c7:5b:43:
23:c2:a1:33:32:ce:d8:0b:a1:2a:0d:c1:47:2e:38:
31:9d:f6:be:e2:fe:a4:55:cf:76:45:ae:7c:e3:d2:
f5:1e:c6:61:77:cd:7b:96:24:95:a6:19:9b:ed:7d:
ae:99:79:3e:7d:71:47:1a:e9:99:62:92:d8:b5:71:
09:85:30:34:2e:06:54:88:46:e2:9d:4f:ee:2f:ff:
b4:a4:b6:c4:82:2b:09:e9:a7:da:42:b6:80:ed:b4:
5e:86:43:3f:9a:ee:fb:c0:92:5f:e3:55:9a:30:d8:
59:4e:4c:53:6b:58:26:a2:a0:c8:38:e8:30:0a:3a:
98:ac:c2:d2:4c:97:e9:3a:a2:3a:fa:41:2c:0a:d1:
c7:86:4a:f1:fd:3d:20:48:ef:fa:0d:0d:c8:b4:a7:
55:26:b8:e0:99:86:99:a6:dd:85:36:64:b0:10:72:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:E1:A5:DB:89:EC:07:CF:F5:CD:FE:8E:49:8D:1F:70:22:09:D0
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:14:aa:d5:a1:1d:1f:d7:00:42:e4:2f:c0:c0:85:64:3b:
e9:9d:27:de:5a:64:8c:f4:4d:0a:38:8f:f5:d9:55:c4:0d:66:
b5:b9:21:8a:d4:c4:0e:a3:a3:00:80:aa:57:f6:12:b6:e9:28:
f2:3b:3b:2e:bf:09:43:c5:ef:ca:fc:58:ef:11:de:d4:e1:25:
ec:23:7e:53:47:5e:d3:50:e1:b5:68:a1:70:cb:05:ce:b9:00:
d8:f8:cd:f6:f9:38:5b:4b:df:51:76:79:3a:37:de:a7:fe:56:
b5:64:82:f0:c2:b0:5a:ff:fb:f3:fa:91:70:f2:59:02:20:b5:
8a:20:63:fd:1f:60:03:20:f4:f1:c9:a7:21:99:2b:90:2a:db:
2d:a8:e3:6d:ad:89:a8:1f:59:bf:60:3d:8a:9d:15:a9:37:92:
41:36:63:02:c1:27:c7:02:4d:7f:ae:26:e0:b1:c4:f9:35:6f:
83:38:1f:6e:d3:81:16:39:5b:30:fb:a6:f2:94:16:52:a7:12:
5d:06:a7:b5:79:3a:02:94:8d:9b:d2:bc:a8:6c:e0:2c:c1:14:
13:ea:1d:d3:27:34:ee:63:81:1b:dd:c8:5f:0d:9a:1e:ae:4e:
15:0a:14:c1:e1:be:f0:e9:8d:bb:6c:71:22:2c:25:4f:ae:9f:
ee:88:49:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9yY4UTKCiH4BfmCsh9f9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjYwODE0MDEwMTEyWhcNMjYwODE1MDEwMTEyWjAzMTEwLwYDVQQD
Eyg1MGM2ZTFhNWRiODllYzA3Y2ZmNWNkZmU4ZTQ5OGQxZjcwMjIwOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3P9QWFQuH1JD1w+lWdfT/m0zbqy
2w2MaWEU5qctHqb3vzgjWGMGrJ9LM7uX/wJUXemfQv+NIP7Yrgy8I4mUoxZ56QXt
CxrWqqMoPMu7NPK/VrSIcVzHW0MjwqEzMs7YC6EqDcFHLjgxnfa+4v6kVc92Ra58
49L1HsZhd817liSVphmb7X2umXk+fXFHGumZYpLYtXEJhTA0LgZUiEbinU/uL/+0
pLbEgisJ6afaQraA7bRehkM/mu77wJJf41WaMNhZTkxTa1gmoqDIOOgwCjqYrMLS
TJfpOqI6+kEsCtHHhkrx/T0gSO/6DQ3ItKdVJrjgmYaZpt2FNmSwEHKarwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDG4aXbiewHz/XN/o5JjR9wIgnQMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhEUqtWh
HR/XAELkL8DAhWQ76Z0n3lpkjPRNCjiP9dlVxA1mtbkhitTEDqOjAICqV/YStuko
8js7Lr8JQ8XvyvxY7xHe1OEl7CN+U0de01DhtWihcMsFzrkA2PjN9vk4W0vfUXZ5
Ojfep/5WtWSC8MKwWv/78/qRcPJZAiC1iiBj/R9gAyD08cmnIZkrkCrbLajjba2J
qB9Zv2A9ip0VqTeSQTZjAsEnxwJNf64m4LHE+TVvgzgfbtOBFjlbMPum8pQWUqcS
XQantXk6ApSNm9K8qGzgLMEUE+od0yc07mOBG93IXw2aHq5OFQoUweG+8OmNu2xx
IiwlT66f7ohJVg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 03:17:42 2026 by rpki-client