Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: pKyvLSvYcXb0nBd7EPtKW/tLUEy9L2Mba15tACiCqsI=
Subject key identifier: 1B:41:1F:06:FC:B0:D1:BD:1C:4B:B1:48:FE:CA:E9:6C:21:A3:16:32
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 019E303BC434D0ED7A0A6546C4E34F855CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0893
Signing time: Sat 16 May 2026 10:01:23 +0000
Manifest this update: Sat 16 May 2026 10:01:23 +0000
Manifest next update: Sun 17 May 2026 10:01:23 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: 63uzVd1X8AcFWW1gouLm8G3IX5cSqrbXAQEc+AB0h3U=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:c4:34:d0:ed:7a:0a:65:46:c4:e3:4f:85:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: May 16 10:01:23 2026 GMT
Not After : May 17 10:01:23 2026 GMT
Subject: CN=1b411f06fcb0d1bd1c4bb148fecae96c21a31632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:ad:64:f6:04:dc:47:57:d7:24:8e:5f:2f:
29:84:a9:e2:79:4f:a2:ba:01:a0:16:da:01:5e:45:
d7:20:e5:bd:8f:4d:7b:bf:0c:1a:89:9f:16:70:3d:
9c:19:4f:53:93:03:5e:fe:2a:20:1d:64:14:59:87:
95:a6:d3:bc:c8:66:d4:3f:ea:31:06:2d:fd:b9:6e:
c2:63:25:e4:21:ab:fa:cd:5b:20:5f:84:94:ac:bc:
87:93:31:de:74:00:85:98:ca:17:26:5f:fe:b4:c4:
9a:49:b9:87:08:80:42:1a:f2:7d:ae:de:da:85:64:
6b:d9:e2:3b:f2:85:77:fa:eb:ab:61:ba:d6:bf:f7:
31:3c:7b:01:a2:8e:40:5a:ca:34:f6:d8:d5:5f:54:
78:34:95:30:5a:98:f7:d9:45:88:21:c5:bb:d6:ad:
05:f6:1f:c9:87:00:59:09:7a:91:7f:03:52:91:70:
a6:33:be:cf:a0:84:ae:03:92:44:28:5b:43:bb:da:
4e:a1:06:60:3c:85:8c:8f:1d:9a:7b:5d:aa:fe:af:
2e:f6:21:ff:66:5e:78:f1:fb:11:5f:06:3c:21:66:
59:72:b1:c5:fb:e2:71:19:ae:bf:bd:b2:66:07:ce:
41:77:1d:1c:b0:c9:02:29:8e:b2:77:09:77:e7:af:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:1F:06:FC:B0:D1:BD:1C:4B:B1:48:FE:CA:E9:6C:21:A3:16:32
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:33:11:12:90:7f:6f:06:09:5e:7c:0e:89:54:03:8d:1f:f8:
96:5c:cc:05:d1:a9:e5:e4:07:66:c9:93:2f:6e:4b:f8:fb:2b:
3d:57:ec:42:a7:cd:79:28:93:10:23:ed:ac:cd:da:59:52:6a:
6d:30:b3:28:8f:f3:4e:54:7e:b4:86:fa:bd:83:91:65:17:a2:
66:3b:a1:c9:f4:29:e8:d5:6a:4d:99:9c:fd:05:f9:3c:b5:b4:
21:27:a4:78:88:6f:74:d7:ab:9f:c7:5e:38:c2:40:b8:ff:b3:
f8:7d:af:64:42:41:64:c3:87:b8:5a:e6:fc:dd:38:3d:c4:b9:
e1:47:c8:b2:38:d7:84:0e:ae:02:47:a0:5e:d8:3b:8c:55:6a:
85:92:0a:dc:b4:b2:01:9d:d7:9a:9b:61:68:23:1a:f1:3c:f7:
fa:f0:b1:87:d8:6e:e8:8c:89:97:3c:c1:01:1f:a6:2e:e3:98:
54:d0:2e:cd:a1:24:af:88:79:65:66:89:0d:81:64:31:7d:e8:
8b:26:9a:a5:10:c1:ff:10:fe:1e:7e:51:a0:1c:55:cd:f3:91:
d1:79:5a:3f:82:f1:e9:de:ee:b3:ed:cc:ce:89:71:ed:66:0d:
0a:4a:aa:2f:31:84:9c:d3:fa:63:ea:f4:8e:37:60:94:05:f9:
3b:4d:c4:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO8Q00O16CmVGxONPhVzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWRkNTM5NTI1YTM5ZDg0NzAxNGU4ZmVhM2M2NDFkOTcz
Y2M4NjYwHhcNMjYwNTE2MTAwMTIzWhcNMjYwNTE3MTAwMTIzWjAzMTEwLwYDVQQD
EygxYjQxMWYwNmZjYjBkMWJkMWM0YmIxNDhmZWNhZTk2YzIxYTMxNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8ytZPYE3EdX1ySOXy8phKnieU+i
ugGgFtoBXkXXIOW9j017vwwaiZ8WcD2cGU9TkwNe/iogHWQUWYeVptO8yGbUP+ox
Bi39uW7CYyXkIav6zVsgX4SUrLyHkzHedACFmMoXJl/+tMSaSbmHCIBCGvJ9rt7a
hWRr2eI78oV3+uurYbrWv/cxPHsBoo5AWso09tjVX1R4NJUwWpj32UWIIcW71q0F
9h/JhwBZCXqRfwNSkXCmM77PoISuA5JEKFtDu9pOoQZgPIWMjx2ae12q/q8u9iH/
Zl548fsRXwY8IWZZcrHF++JxGa6/vbJmB85Bdx0csMkCKY6ydwl356/SFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtBHwb8sNG9HEuxSP7K6WwhoxYyMB8GA1UdIwQY
MBaAFA4d1TlSWjnYRwFOj+o8ZB2XPMhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAt
OTI5ODkzMDgxODY2LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAtOTI5ODkzMDgxODY2
LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzMREpB/
bwYJXnwOiVQDjR/4llzMBdGp5eQHZsmTL25L+PsrPVfsQqfNeSiTECPtrM3aWVJq
bTCzKI/zTlR+tIb6vYORZReiZjuhyfQp6NVqTZmc/QX5PLW0ISekeIhvdNern8de
OMJAuP+z+H2vZEJBZMOHuFrm/N04PcS54UfIsjjXhA6uAkegXtg7jFVqhZIK3LSy
AZ3XmpthaCMa8Tz3+vCxh9hu6IyJlzzBAR+mLuOYVNAuzaEkr4h5ZWaJDYFkMX3o
iyaapRDB/xD+Hn5RoBxVzfOR0XlaP4Lx6d7us+3Mzolx7WYNCkqqLzGEnNP6Y+r0
jjdglAX5O03E7w==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:02 2026 by rpki-client