Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: A481UCH0XvyPYO0m7vbdBDgQin6la6QCfckn44IKA1A=
Subject key identifier: 27:5F:DE:1A:61:70:25:34:CF:87:85:EE:3C:50:2D:02:FE:B2:70:AA
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01A001A6585B748C81E4559A84603BD7F16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0984
Signing time: Fri 14 Aug 2026 19:01:13 +0000
Manifest this update: Fri 14 Aug 2026 19:01:13 +0000
Manifest next update: Sat 15 Aug 2026 19:01:13 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: S/v2y9mZZaN+xO1UJut2ZNBGO7rrlg0uvwWMHS1LYp4=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:58:5b:74:8c:81:e4:55:9a:84:60:3b:d7:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Aug 14 19:01:13 2026 GMT
Not After : Aug 15 19:01:13 2026 GMT
Subject: CN=275fde1a61702534cf8785ee3c502d02feb270aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:ea:53:54:ca:d9:7a:a2:89:c4:b6:11:c3:
6a:d7:15:b0:97:91:25:47:1b:7c:8c:7a:9c:75:06:
11:09:35:b8:a1:36:80:70:88:96:92:bd:ba:6d:2e:
2d:c7:90:7f:b1:0c:e2:65:5a:4c:72:5b:0b:3c:0d:
fa:ea:a3:46:c1:fc:e3:fd:af:67:a9:f9:0e:87:67:
aa:6c:4f:40:4e:bb:bc:78:ff:9a:d9:95:50:c2:5a:
6f:be:60:71:3d:02:8e:23:2b:a2:5b:b9:6e:e6:c1:
b2:95:98:d8:e2:4d:b8:34:15:34:73:42:c0:8b:99:
f2:dd:a3:85:9d:b3:2e:d4:5a:2e:2f:cb:2e:66:05:
52:72:69:a9:6f:9f:de:29:5c:41:7e:1f:e1:23:b4:
81:f1:45:c2:3a:78:23:e9:1f:16:ea:72:0f:7c:fe:
18:21:a7:43:ea:03:42:21:ca:d8:a7:f9:57:4f:6e:
66:00:49:a0:53:1f:35:98:d4:49:47:ed:23:fe:b4:
33:2c:c7:a8:6a:31:2d:dc:c8:6c:d7:28:37:9a:0e:
17:47:c4:5c:46:d3:9c:a2:04:5f:f6:e3:cd:6a:42:
fe:76:b4:f8:bc:df:a2:11:96:b0:51:27:04:4d:f3:
8c:db:fd:07:46:ca:8f:5f:45:7d:9b:af:f8:c8:11:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:DE:1A:61:70:25:34:CF:87:85:EE:3C:50:2D:02:FE:B2:70:AA
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e3:82:84:c5:68:b2:c0:df:37:62:1b:56:55:68:2d:ab:3c:
e6:07:b8:51:67:aa:d7:03:b7:10:18:f0:73:cf:3a:8c:50:b7:
03:55:f3:0d:32:66:48:55:b9:78:99:ec:01:4b:95:2b:4d:a9:
a6:5f:4d:b4:8f:e4:88:18:d0:cd:ac:80:48:5a:42:d5:fe:7e:
c3:9a:fd:65:41:a8:21:eb:0a:96:d0:33:1b:44:4c:5a:80:6b:
8a:d2:21:f6:14:b6:e0:f9:31:00:5e:da:c5:c3:a1:7c:f4:6d:
d4:c2:e4:5c:94:6b:84:4b:6a:1c:b4:c8:5c:df:d9:73:93:ea:
4e:62:59:87:9e:74:70:05:e4:88:b7:57:ed:35:fb:61:6a:74:
85:c9:82:ea:c7:c0:a2:df:f8:5c:2d:30:6d:dc:73:26:86:2b:
56:10:89:fc:c8:05:a5:5f:9e:bd:30:8d:ba:1d:58:24:cf:1f:
fc:43:ab:ee:35:e0:b3:ce:7d:77:4b:5b:e2:01:e6:d7:82:e8:
e8:d9:82:ff:64:9c:60:fa:33:ba:bf:8c:7b:96:a2:ed:a9:be:
e0:07:e9:23:3b:31:54:89:99:1f:8f:30:be:0f:25:a6:e3:cc:
c6:55:58:7a:92:80:fe:6d:a9:49:fd:be:72:18:3b:fa:7e:7e:
7a:b0:bb:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABplhbdIyB5FWahGA71/FuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWRkNTM5NTI1YTM5ZDg0NzAxNGU4ZmVhM2M2NDFkOTcz
Y2M4NjYwHhcNMjYwODE0MTkwMTEzWhcNMjYwODE1MTkwMTEzWjAzMTEwLwYDVQQD
EygyNzVmZGUxYTYxNzAyNTM0Y2Y4Nzg1ZWUzYzUwMmQwMmZlYjI3MGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3qU1TK2XqiicS2EcNq1xWwl5El
Rxt8jHqcdQYRCTW4oTaAcIiWkr26bS4tx5B/sQziZVpMclsLPA366qNGwfzj/a9n
qfkOh2eqbE9ATru8eP+a2ZVQwlpvvmBxPQKOIyuiW7lu5sGylZjY4k24NBU0c0LA
i5ny3aOFnbMu1FouL8suZgVScmmpb5/eKVxBfh/hI7SB8UXCOngj6R8W6nIPfP4Y
IadD6gNCIcrYp/lXT25mAEmgUx81mNRJR+0j/rQzLMeoajEt3Mhs1yg3mg4XR8Rc
RtOcogRf9uPNakL+drT4vN+iEZawUScETfOM2/0HRsqPX0V9m6/4yBFUqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdf3hphcCU0z4eF7jxQLQL+snCqMB8GA1UdIwQY
MBaAFA4d1TlSWjnYRwFOj+o8ZB2XPMhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAt
OTI5ODkzMDgxODY2LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAtOTI5ODkzMDgxODY2
LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOOChMVo
ssDfN2IbVlVoLas85ge4UWeq1wO3EBjwc886jFC3A1XzDTJmSFW5eJnsAUuVK02p
pl9NtI/kiBjQzayASFpC1f5+w5r9ZUGoIesKltAzG0RMWoBritIh9hS24PkxAF7a
xcOhfPRt1MLkXJRrhEtqHLTIXN/Zc5PqTmJZh550cAXkiLdX7TX7YWp0hcmC6sfA
ot/4XC0wbdxzJoYrVhCJ/MgFpV+evTCNuh1YJM8f/EOr7jXgs859d0tb4gHm14Lo
6NmC/2ScYPozur+Me5ai7am+4AfpIzsxVImZH48wvg8lpuPMxlVYepKA/m2pSf2+
chg7+n5+erC7Gg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:12 2026 by rpki-client