Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: oHW4ZnZnQpA2G7mJvh9Ryig0zoG1+ecNPmK0aCYqBJ8=
Subject key identifier: 5F:24:57:3F:64:31:8E:83:C6:BE:9E:C2:26:93:72:DB:4A:C8:F5:18
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019F1943F7C836533DD19730D8C13C9F467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0B19
Signing time: Tue 30 Jun 2026 16:01:52 +0000
Manifest this update: Tue 30 Jun 2026 16:01:52 +0000
Manifest next update: Wed 01 Jul 2026 16:01:52 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: gwggiuW2YoSz8+jVeGCZjhvfH6g7JOliTQ++IQi0aqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f7:c8:36:53:3d:d1:97:30:d8:c1:3c:9f:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Jun 30 16:01:52 2026 GMT
Not After : Jul 1 16:01:52 2026 GMT
Subject: CN=5f24573f64318e83c6be9ec2269372db4ac8f518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:9d:b2:b9:65:c1:d5:2d:c3:d4:62:d9:ec:
a8:6d:09:bc:d0:b0:4f:91:0b:ae:04:61:bf:d0:c6:
af:f5:ed:4a:f6:bb:14:06:2d:99:49:bc:cc:c1:11:
fc:62:b3:80:db:17:59:ee:9b:ad:ca:9f:d4:c9:38:
14:0c:5b:8e:85:e7:a2:4b:1b:81:a1:85:e3:3a:0d:
b0:54:35:b4:a6:3b:98:28:7d:2d:68:90:20:cd:01:
39:88:7b:ba:5e:05:6f:f0:e1:00:3a:8a:bd:c6:7c:
b8:2f:bf:72:49:8f:fc:cf:b9:b3:6c:fd:41:52:b4:
9e:94:aa:63:f2:7a:14:7b:89:bc:90:5a:a6:19:3d:
2e:28:2c:ef:b8:d4:8e:9c:96:e3:71:19:1b:70:0a:
d1:18:2f:d7:a8:22:91:f0:5a:0a:6b:c5:08:9b:9e:
31:13:4f:9b:ca:d9:aa:11:3f:99:14:4e:e1:57:7b:
e4:9f:78:16:dc:7e:eb:34:fe:a0:25:06:6b:88:57:
49:d7:98:ab:1d:0e:92:e7:04:b8:fd:b4:9c:b0:cd:
57:5f:d3:84:8d:28:90:bb:bf:52:f0:31:cc:e1:26:
d7:ac:c8:b6:d8:f9:af:38:2a:2a:ec:af:1b:0c:eb:
8e:df:9d:a9:0f:9e:4a:ba:46:47:1d:7d:ac:44:3f:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:57:3F:64:31:8E:83:C6:BE:9E:C2:26:93:72:DB:4A:C8:F5:18
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:b0:a0:f9:e6:1d:1d:9b:83:3b:d8:4c:14:ea:a8:f3:86:
3f:ae:c3:e5:6a:4e:a0:6a:d0:ec:2e:63:23:4e:4e:2e:f5:ef:
ba:7f:f7:df:ff:68:47:2d:95:40:c1:59:d1:cc:36:b3:20:36:
f6:0f:b5:62:84:16:5c:93:f7:f2:57:74:53:77:54:4c:fe:dc:
10:d6:29:a5:57:c7:09:9a:7e:ef:55:95:38:b3:6a:c9:a0:9b:
ac:44:51:9b:7b:02:66:f0:23:77:b7:54:7a:f3:fa:e9:99:e2:
10:c2:4d:c1:bb:fc:05:27:88:d4:2d:1e:a1:91:9f:b7:f4:29:
08:09:81:a5:de:9c:2e:91:8a:f2:bc:51:6a:74:7b:ed:34:72:
9f:93:74:e3:5f:43:79:32:b0:90:f6:ba:f8:8a:6e:ec:da:d6:
8c:61:2d:3e:fb:ce:2a:aa:67:d9:11:b0:08:85:0e:aa:e1:91:
d3:09:db:b1:47:e5:38:39:26:f0:c2:3e:13:4e:d1:2d:48:fc:
04:d6:f9:3f:32:d8:9c:47:28:6e:5c:30:1b:47:19:1c:ef:c7:
88:bb:59:7d:08:f0:4e:8a:35:56:42:1f:1a:1a:07:1b:56:52:
7c:48:ba:a2:d1:e3:56:93:2b:9a:a3:33:1f:a0:5e:eb:0a:65:
35:dc:1d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ/fINlM90Zcw2ME8n0Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWM1NmExOGM5ODdhMmQxYTJlNzA0NGI3ZTMxYjMyMWJm
N2FjMTYwHhcNMjYwNjMwMTYwMTUyWhcNMjYwNzAxMTYwMTUyWjAzMTEwLwYDVQQD
Eyg1ZjI0NTczZjY0MzE4ZTgzYzZiZTllYzIyNjkzNzJkYjRhYzhmNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JudsrllwdUtw9Ri2eyobQm80LBP
kQuuBGG/0Mav9e1K9rsUBi2ZSbzMwRH8YrOA2xdZ7putyp/UyTgUDFuOheeiSxuB
oYXjOg2wVDW0pjuYKH0taJAgzQE5iHu6XgVv8OEAOoq9xny4L79ySY/8z7mzbP1B
UrSelKpj8noUe4m8kFqmGT0uKCzvuNSOnJbjcRkbcArRGC/XqCKR8FoKa8UIm54x
E0+bytmqET+ZFE7hV3vkn3gW3H7rNP6gJQZriFdJ15irHQ6S5wS4/bScsM1XX9OE
jSiQu79S8DHM4SbXrMi22PmvOCoq7K8bDOuO352pD55KukZHHX2sRD8asQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8kVz9kMY6Dxr6ewiaTcttKyPUYMB8GA1UdIwQY
MBaAFA2cVqGMmHotGi5wRLfjGzIb96wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYt
NDVhYjNmNTIwZjAwLzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYtNDVhYjNmNTIwZjAw
LzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQGwoPnm
HR2bgzvYTBTqqPOGP67D5WpOoGrQ7C5jI05OLvXvun/33/9oRy2VQMFZ0cw2syA2
9g+1YoQWXJP38ld0U3dUTP7cENYppVfHCZp+71WVOLNqyaCbrERRm3sCZvAjd7dU
evP66ZniEMJNwbv8BSeI1C0eoZGft/QpCAmBpd6cLpGK8rxRanR77TRyn5N0419D
eTKwkPa6+Ipu7NrWjGEtPvvOKqpn2RGwCIUOquGR0wnbsUflODkm8MI+E07RLUj8
BNb5PzLYnEcoblwwG0cZHO/HiLtZfQjwToo1VkIfGhoHG1ZSfEi6otHjVpMrmqMz
H6Be6wplNdwdOA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client