Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: PEKrhm9e+oTT76YqDkDWGXK1dBVznlkQKOJTft7bWdQ=
Subject key identifier: EC:86:27:6D:26:F8:EF:2B:A5:F6:E9:CB:F9:C0:32:EB:A7:01:9B:5A
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 019DDCC384E4D2334D175FA96A1AAB5C691D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 3B
Signing time: Thu 30 Apr 2026 05:01:34 +0000
Manifest this update: Thu 30 Apr 2026 05:01:34 +0000
Manifest next update: Fri 01 May 2026 05:01:34 +0000
Files and hashes: 1: 5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa (hash: qLcSsDup2eDHzjPG2eNkixnT3xnxS5Fkg08aTdj0wws=)
2: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: 97jBlKK3/p6dUmgWSZclsBa2xaIbx6c+1Niu+t1Bxqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:84:e4:d2:33:4d:17:5f:a9:6a:1a:ab:5c:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Apr 30 05:01:34 2026 GMT
Not After : May 1 05:01:34 2026 GMT
Subject: CN=ec86276d26f8ef2ba5f6e9cbf9c032eba7019b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:ed:e8:cd:03:7f:2b:fa:f3:ad:51:5e:d0:
55:7b:11:cb:8c:d3:03:bb:70:de:62:02:db:e1:7e:
7d:b4:0c:f5:d1:cd:df:81:98:eb:dd:fd:6d:53:93:
4f:82:ea:80:5d:72:17:28:51:dd:73:6a:2f:2f:01:
58:6b:92:c7:e3:75:9b:b9:75:38:9b:06:7a:e7:90:
2f:51:06:a6:f9:fa:0b:6b:42:0f:48:11:d2:fc:29:
63:3e:34:41:bd:22:0a:1a:88:b8:15:b3:59:37:b6:
7c:c6:5a:0d:d8:2a:79:b1:0b:2c:ad:79:9f:ca:d2:
9e:fd:e6:7f:b3:0d:7a:d8:c4:1b:30:78:81:ec:76:
12:72:a1:d4:65:d3:54:aa:a6:07:29:58:85:ac:e1:
b1:fa:46:e8:95:5f:a4:15:18:fd:41:d1:22:0a:b2:
56:cd:79:81:a2:67:76:a4:ca:a8:b8:10:8a:75:3b:
7b:15:30:5b:dd:c1:56:39:c9:18:38:92:d7:4a:61:
57:d9:88:a9:93:46:fe:73:74:d3:dd:86:32:e0:a3:
af:d9:ed:55:5f:39:95:f1:4e:e5:c6:33:bd:b6:db:
cd:37:2b:a0:57:51:b9:1c:d4:b3:76:1c:4f:f2:5b:
f5:23:d4:98:bc:71:6b:b1:d3:ea:7d:39:cb:9f:c9:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:27:6D:26:F8:EF:2B:A5:F6:E9:CB:F9:C0:32:EB:A7:01:9B:5A
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f1:24:ea:cd:0f:26:44:d1:c6:63:d4:83:ee:2f:66:0c:03:
49:fb:64:93:6e:67:ae:4c:d4:21:76:b2:58:e9:f5:2f:26:67:
64:7d:aa:95:5f:eb:06:74:1d:12:42:11:39:ce:76:d5:ec:aa:
18:84:4f:bb:dc:2a:71:fa:5b:3c:76:1a:b2:63:18:2e:da:1d:
8d:53:6d:59:51:f3:29:37:c9:84:30:c2:64:d9:56:f2:e0:2e:
cf:46:25:39:dd:74:e9:ac:0e:7e:da:4b:6b:ed:7e:e3:bf:55:
7c:e9:0c:60:9c:66:7e:dc:82:c8:e0:28:69:90:1e:d5:d7:e0:
f7:e4:53:9b:6c:d7:7e:97:d2:01:2e:04:c0:04:dc:58:15:69:
c0:cc:1f:e1:63:b0:82:c5:88:4c:45:3a:de:a1:6a:e9:17:28:
49:cc:f0:e3:39:1f:fd:83:f3:e5:f9:eb:22:db:d9:0a:d9:d6:
c1:b0:7d:a5:e8:27:ba:1c:0f:0d:52:ae:2f:d0:ba:6b:a9:72:
09:17:3b:b4:d5:6b:0e:32:54:fc:03:59:9f:78:98:f7:c5:78:
19:ac:a8:98:1d:7e:b4:66:ca:3b:55:67:eb:e9:af:a5:90:36:
60:70:4c:dd:af:d9:c0:b6:fc:4f:ff:ce:b5:04:a3:93:5b:50:
37:7a:41:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cw4Tk0jNNF1+pahqrXGkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjk1NjZiNjJkZTg0MDRiODU2YzU2MDA0Y2M0OWJlNjIx
MzU0ZTgwHhcNMjYwNDMwMDUwMTM0WhcNMjYwNTAxMDUwMTM0WjAzMTEwLwYDVQQD
EyhlYzg2Mjc2ZDI2ZjhlZjJiYTVmNmU5Y2JmOWMwMzJlYmE3MDE5YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vft6M0Dfyv6861RXtBVexHLjNMD
u3DeYgLb4X59tAz10c3fgZjr3f1tU5NPguqAXXIXKFHdc2ovLwFYa5LH43WbuXU4
mwZ655AvUQam+foLa0IPSBHS/CljPjRBvSIKGoi4FbNZN7Z8xloN2Cp5sQssrXmf
ytKe/eZ/sw162MQbMHiB7HYScqHUZdNUqqYHKViFrOGx+kbolV+kFRj9QdEiCrJW
zXmBomd2pMqouBCKdTt7FTBb3cFWOckYOJLXSmFX2Yipk0b+c3TT3YYy4KOv2e1V
XzmV8U7lxjO9ttvNNyugV1G5HNSzdhxP8lv1I9SYvHFrsdPqfTnLn8kL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyGJ20m+O8rpfbpy/nAMuunAZtaMB8GA1UdIwQY
MBaAFA35Vmti3oQEuFbFYATMSb5iE1ToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAt
ODgzZTRjODVlNGVlLzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAtODgzZTRjODVlNGVl
LzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvEk6s0P
JkTRxmPUg+4vZgwDSftkk25nrkzUIXayWOn1LyZnZH2qlV/rBnQdEkIROc521eyq
GIRPu9wqcfpbPHYasmMYLtodjVNtWVHzKTfJhDDCZNlW8uAuz0YlOd106awOftpL
a+1+479VfOkMYJxmftyCyOAoaZAe1dfg9+RTm2zXfpfSAS4EwATcWBVpwMwf4WOw
gsWITEU63qFq6RcoSczw4zkf/YPz5fnrItvZCtnWwbB9pegnuhwPDVKuL9C6a6ly
CRc7tNVrDjJU/ANZn3iY98V4GayomB1+tGbKO1Vn6+mvpZA2YHBM3a/ZwLb8T//O
tQSjk1tQN3pBig==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:46 2026 by rpki-client