Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: 41DAuHk3y8jx/ka0zeCJiOZ/ZLM1mEsiIy01wxOkjLk=
Subject key identifier: 16:88:6F:CB:40:BF:85:29:65:53:46:70:8B:DD:E9:4A:4E:7A:B8:86
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 019D3752995BFE9EB4614517D69283C569A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 1067
Signing time: Sun 29 Mar 2026 02:00:52 +0000
Manifest this update: Sun 29 Mar 2026 02:00:52 +0000
Manifest next update: Mon 30 Mar 2026 02:00:52 +0000
Files and hashes: 1: 7XwuNf8ZI8FggCTIu3xLPPBwACo.roa (hash: W+WJkHmtpXyF1YCQ32I9zdl7SdlSiAPaPn3XEwacVdM=)
2: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: R7nGvYLI/uiPcDJNZ6ottOBPA+WzH2b68fE0HOFCpuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:99:5b:fe:9e:b4:61:45:17:d6:92:83:c5:69:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Mar 29 02:00:52 2026 GMT
Not After : Mar 30 02:00:52 2026 GMT
Subject: CN=16886fcb40bf8529655346708bdde94a4e7ab886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:f4:c4:0e:d6:81:59:97:24:eb:9f:e7:3a:
84:bd:88:c0:c1:f0:b1:b5:ed:bb:9b:17:4b:57:13:
79:d7:a4:5d:9b:d6:39:ba:ef:9a:87:ab:ab:f8:6a:
ab:47:08:f2:41:d4:52:19:16:f3:a5:95:13:9b:ab:
9d:6c:40:8f:ed:0d:80:c2:f1:73:10:54:b8:b4:10:
b8:75:63:4f:7a:73:49:2f:30:70:8f:6c:7c:73:30:
52:d2:7a:89:3b:c0:42:47:05:f2:7b:05:6a:dd:03:
69:f7:ec:b8:ac:a7:a3:2a:d5:01:83:bb:16:67:67:
9f:fd:4d:66:aa:c6:7c:5b:22:7c:ec:b0:09:cd:90:
82:ca:e0:65:0e:1f:e2:16:7d:e2:9c:a6:f7:75:77:
3d:6d:77:0d:f7:bc:f5:a7:3a:57:d6:0b:47:4a:0f:
4e:42:77:14:c1:e9:63:88:86:ed:8d:d4:0f:be:73:
90:97:8b:57:ac:c1:bc:45:0d:63:9f:14:06:46:da:
b6:c4:f6:d9:17:2a:ac:cf:aa:8f:82:4c:12:2d:35:
15:7f:2f:57:c4:99:c5:8e:b0:b4:74:af:b7:23:11:
a1:9c:a3:8a:a5:b8:96:c4:da:47:cb:6e:ee:c3:0a:
42:37:c2:e7:74:72:43:c0:46:f8:5d:d8:ea:be:5c:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:6F:CB:40:BF:85:29:65:53:46:70:8B:DD:E9:4A:4E:7A:B8:86
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:d6:9d:cd:59:6f:63:c0:b7:32:c8:3b:27:96:01:3e:05:
03:77:c2:df:3e:99:06:fa:c2:16:91:bc:90:4a:79:5e:fe:a8:
72:a4:5a:bd:cc:72:58:09:d5:5f:51:f1:2b:f9:f1:f5:81:63:
01:68:5b:fd:38:19:a7:7f:65:ec:a7:22:80:1f:b2:6c:e3:44:
0f:1c:fb:c9:be:96:15:c8:16:15:70:0a:2d:36:89:15:85:7a:
d9:d7:a6:a0:05:bb:86:da:ed:12:4a:8a:51:1f:bf:c1:f6:93:
63:0e:c5:12:23:2d:22:7e:53:1d:af:c8:ca:86:61:fb:e3:e6:
6d:3b:be:39:1e:f0:07:39:10:cb:fb:31:73:5a:ec:78:5a:36:
ea:da:20:dd:d0:b8:c4:c4:0e:84:1b:4d:d7:e5:ab:8a:ff:61:
d4:2e:61:52:b5:a2:93:3d:e5:9e:db:de:b3:24:6a:d3:89:0f:
c0:36:fc:ed:3a:2b:80:e6:d8:0e:46:0c:16:f8:de:56:b0:14:
c1:c4:ed:e1:ec:31:28:67:50:a9:9a:af:aa:05:92:bf:3e:5d:
30:50:2d:fe:60:ad:07:ec:bb:b0:ca:24:40:69:ab:c7:57:c6:
73:03:07:4b:49:ab:69:bf:f9:37:8a:a1:f8:a3:ec:66:8f:e4:
7d:c1:2d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uplb/p60YUUX1pKDxWmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjYwMzI5MDIwMDUyWhcNMjYwMzMwMDIwMDUyWjAzMTEwLwYDVQQD
EygxNjg4NmZjYjQwYmY4NTI5NjU1MzQ2NzA4YmRkZTk0YTRlN2FiODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWv0xA7WgVmXJOuf5zqEvYjAwfCx
te27mxdLVxN516Rdm9Y5uu+ah6ur+GqrRwjyQdRSGRbzpZUTm6udbECP7Q2AwvFz
EFS4tBC4dWNPenNJLzBwj2x8czBS0nqJO8BCRwXyewVq3QNp9+y4rKejKtUBg7sW
Z2ef/U1mqsZ8WyJ87LAJzZCCyuBlDh/iFn3inKb3dXc9bXcN97z1pzpX1gtHSg9O
QncUweljiIbtjdQPvnOQl4tXrMG8RQ1jnxQGRtq2xPbZFyqsz6qPgkwSLTUVfy9X
xJnFjrC0dK+3IxGhnKOKpbiWxNpHy27uwwpCN8LndHJDwEb4XdjqvlwZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaIb8tAv4UpZVNGcIvd6UpOeriGMB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6LWnc1Z
b2PAtzLIOyeWAT4FA3fC3z6ZBvrCFpG8kEp5Xv6ocqRavcxyWAnVX1HxK/nx9YFj
AWhb/TgZp39l7KcigB+ybONEDxz7yb6WFcgWFXAKLTaJFYV62demoAW7htrtEkqK
UR+/wfaTYw7FEiMtIn5THa/IyoZh++PmbTu+OR7wBzkQy/sxc1rseFo26tog3dC4
xMQOhBtN1+Wriv9h1C5hUrWikz3lntvesyRq04kPwDb87TorgObYDkYMFvjeVrAU
wcTt4ewxKGdQqZqvqgWSvz5dMFAt/mCtB+y7sMokQGmrx1fGcwMHS0mrab/5N4qh
+KPsZo/kfcEtCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:59 2026 by rpki-client