Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: kgP0c+7I7keDaHIEOx/6QByiPysJRzHsykzBBqzgYGc=
Subject key identifier: 50:3B:15:91:BD:E6:89:46:FA:02:44:E5:39:25:57:9C:75:C6:F1:5B
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 019FCB935D5C1A9725420B51E0B0D8E24934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 013C
Signing time: Tue 04 Aug 2026 07:01:00 +0000
Manifest this update: Tue 04 Aug 2026 07:01:00 +0000
Manifest next update: Wed 05 Aug 2026 07:01:00 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: LQKONIXBVX4ef5aEuty8XSvH++l9t4ZY9VEIPp4iuoE=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:93:5d:5c:1a:97:25:42:0b:51:e0:b0:d8:e2:49:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Aug 4 07:01:00 2026 GMT
Not After : Aug 5 07:01:00 2026 GMT
Subject: CN=503b1591bde68946fa0244e53925579c75c6f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:d9:1f:80:0e:b3:4e:f1:f7:54:4a:65:72:
d0:e7:6a:fa:97:7b:0d:a4:e0:a8:d4:42:7e:5b:e6:
7b:92:08:20:f7:df:ff:83:86:06:71:3d:15:9b:dc:
45:dc:30:60:18:10:c0:df:a9:e0:4d:50:2f:32:6a:
4d:a2:e8:92:d1:ce:fc:a6:6e:9c:da:d2:83:d3:91:
40:45:f3:ea:00:12:60:84:93:e1:3e:f6:f4:90:cb:
f8:0a:af:95:e4:b1:35:f4:f7:e5:fc:70:85:96:58:
89:29:15:0c:36:fd:34:1c:0b:4f:d3:51:c1:1e:2e:
e3:72:ef:04:3c:6d:34:fb:a7:32:6d:e1:ad:7e:ae:
4c:e4:c4:b8:4d:ee:6d:45:3a:94:75:53:24:79:fc:
65:e7:04:6d:7a:a6:4b:a5:ac:72:18:fb:d7:4f:d4:
e6:c8:3d:70:45:75:2b:e7:f9:c4:ce:a2:8e:5b:30:
03:02:de:23:82:9f:ac:dc:58:d5:4b:20:73:95:ab:
78:53:c0:83:a1:7b:6e:f5:d1:fb:54:9a:b3:55:f9:
cc:02:f5:5b:19:89:84:7b:e0:55:8a:c4:22:07:0d:
2c:74:86:eb:9a:f5:1b:45:bb:0b:19:fa:ee:43:07:
a8:11:71:4e:8e:23:1a:af:05:bd:31:f4:0b:4c:f6:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:15:91:BD:E6:89:46:FA:02:44:E5:39:25:57:9C:75:C6:F1:5B
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a0:5c:0c:ef:7d:84:ff:26:c2:a8:cd:1b:9f:f5:f8:9f:c5:
81:6d:da:a3:30:94:4b:db:29:3a:1a:7f:0e:63:db:76:66:58:
5d:47:33:35:d4:c2:b1:d3:fb:90:6b:37:80:a0:0e:72:12:d4:
7d:8d:1c:c9:fe:80:4c:d0:53:d4:d6:94:c4:aa:ec:bf:1c:5e:
09:2b:d9:17:b1:2b:62:b1:e3:0e:b3:63:22:f3:7b:09:01:7c:
95:54:36:6d:8b:49:e3:3d:6b:a7:fe:68:93:f9:c0:50:2c:c6:
88:3a:a1:70:99:a1:87:07:8b:cd:c2:6e:e2:9b:bb:9a:fb:b8:
ff:22:10:01:61:1b:31:5b:b8:65:20:99:6d:30:da:6b:82:7c:
33:07:bc:66:e1:59:b0:bd:b3:d8:97:17:19:51:bf:a7:f4:1a:
6d:33:d5:61:c3:f1:3f:b4:4d:d6:df:de:90:fd:1a:29:0d:e0:
0e:15:f0:c3:be:56:dc:0c:6a:8f:3d:e3:a3:bb:23:ab:a1:4e:
c1:72:30:83:11:d6:98:8e:62:9c:7d:db:3b:6a:8b:0d:3a:6c:
99:28:6f:f1:1e:24:a3:92:00:e8:99:44:a2:81:f2:ae:ed:cd:
b9:0a:53:13:c3:98:2e:3c:37:93:a4:6f:ee:f3:d3:1b:6c:cb:
35:fc:d1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Lk11cGpclQgtR4LDY4kk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjk1NjZiNjJkZTg0MDRiODU2YzU2MDA0Y2M0OWJlNjIx
MzU0ZTgwHhcNMjYwODA0MDcwMTAwWhcNMjYwODA1MDcwMTAwWjAzMTEwLwYDVQQD
Eyg1MDNiMTU5MWJkZTY4OTQ2ZmEwMjQ0ZTUzOTI1NTc5Yzc1YzZmMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7ZH4AOs07x91RKZXLQ52r6l3sN
pOCo1EJ+W+Z7kggg99//g4YGcT0Vm9xF3DBgGBDA36ngTVAvMmpNouiS0c78pm6c
2tKD05FARfPqABJghJPhPvb0kMv4Cq+V5LE19Pfl/HCFlliJKRUMNv00HAtP01HB
Hi7jcu8EPG00+6cybeGtfq5M5MS4Te5tRTqUdVMkefxl5wRteqZLpaxyGPvXT9Tm
yD1wRXUr5/nEzqKOWzADAt4jgp+s3FjVSyBzlat4U8CDoXtu9dH7VJqzVfnMAvVb
GYmEe+BVisQiBw0sdIbrmvUbRbsLGfruQweoEXFOjiMarwW9MfQLTPYpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA7FZG95olG+gJE5TklV5x1xvFbMB8GA1UdIwQY
MBaAFA35Vmti3oQEuFbFYATMSb5iE1ToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAt
ODgzZTRjODVlNGVlLzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAtODgzZTRjODVlNGVl
LzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKBcDO99
hP8mwqjNG5/1+J/FgW3aozCUS9spOhp/DmPbdmZYXUczNdTCsdP7kGs3gKAOchLU
fY0cyf6ATNBT1NaUxKrsvxxeCSvZF7ErYrHjDrNjIvN7CQF8lVQ2bYtJ4z1rp/5o
k/nAUCzGiDqhcJmhhweLzcJu4pu7mvu4/yIQAWEbMVu4ZSCZbTDaa4J8Mwe8ZuFZ
sL2z2JcXGVG/p/QabTPVYcPxP7RN1t/ekP0aKQ3gDhXww75W3Axqjz3jo7sjq6FO
wXIwgxHWmI5inH3bO2qLDTpsmShv8R4ko5IA6JlEooHyru3NuQpTE8OYLjw3k6Rv
7vPTG2zLNfzR1w==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:37:15 2026 by rpki-client