Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: rAnsg37DtHblEVs6QSRQtGZVDd71BV9ZF3GfNanOK28=
Subject key identifier: 34:84:12:84:BF:53:E3:F7:A1:C2:26:93:23:81:CA:85:C4:A7:AC:E1
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019E311784C2F4157A3CECCBA3951813927A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 09E0
Signing time: Sat 16 May 2026 14:01:25 +0000
Manifest this update: Sat 16 May 2026 14:01:25 +0000
Manifest next update: Sun 17 May 2026 14:01:25 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: /s389GPJUgQiXe9pxyIl8OCysEjID+RIXf2Qz79jBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:84:c2:f4:15:7a:3c:ec:cb:a3:95:18:13:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: May 16 14:01:25 2026 GMT
Not After : May 17 14:01:25 2026 GMT
Subject: CN=34841284bf53e3f7a1c226932381ca85c4a7ace1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:04:f6:92:72:be:b8:dd:b4:5e:09:be:34:
36:25:41:65:c0:be:38:49:ec:5a:f8:7f:55:e1:e5:
4f:a9:a6:be:f9:48:6d:d7:1e:d3:d7:3e:45:2d:6e:
ae:b6:c6:29:ac:1a:ae:bf:0d:c5:e6:57:c8:b8:b5:
de:55:5a:10:51:21:35:4c:b4:a6:9c:d0:fa:f6:79:
14:28:00:fc:cb:23:4c:13:03:28:c7:83:be:d7:62:
9c:7e:32:1c:0a:b8:47:e2:56:30:3c:51:66:47:a3:
fc:8b:7a:ae:7b:3b:2b:9b:8c:ef:e4:34:44:73:2b:
36:c3:88:1e:28:5a:b2:8d:85:6c:79:1b:60:11:cd:
05:5e:9a:ee:a6:3e:19:87:fa:d9:33:0f:08:bb:3b:
ba:3d:fb:09:40:eb:0b:c8:57:ab:2d:8d:ba:c5:bd:
71:b3:9c:bf:a6:fa:b9:34:cf:39:ca:f0:fa:c0:e5:
98:d8:10:6e:19:f8:6e:2f:48:d2:c4:78:fb:a0:27:
51:75:3c:86:18:ad:8a:f2:93:c9:6d:b3:5f:1a:cc:
bd:c3:c1:3b:90:d9:09:ce:e0:ea:7d:ae:96:76:e3:
4a:35:ea:8d:19:62:6e:b1:93:63:b1:ad:b6:ed:df:
8d:a2:7e:59:54:61:c7:e7:f6:a2:ac:f3:11:55:ab:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:12:84:BF:53:E3:F7:A1:C2:26:93:23:81:CA:85:C4:A7:AC:E1
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:41:85:bf:df:06:b1:f0:ef:0a:84:8b:a7:f3:de:f9:82:
13:fe:aa:18:9a:d8:91:58:2b:fc:21:9f:24:e6:4b:68:d5:f5:
7d:e9:40:72:13:b5:ea:62:db:d1:ce:c6:c8:61:9d:aa:ee:a8:
7f:d7:84:be:91:8d:dc:12:a7:08:4b:52:8d:1c:35:13:70:a9:
02:5d:85:2e:bb:49:94:d2:45:a2:76:2a:d9:4f:b8:89:bb:3b:
56:35:92:7d:54:0b:18:3a:2b:08:64:8f:15:72:f4:a4:26:71:
63:ea:f6:ef:63:91:83:c3:6c:a6:c8:9f:a5:e4:86:08:41:eb:
3e:e1:a0:2e:b2:94:71:4f:0b:2e:f7:9b:82:3f:f1:00:77:55:
d9:19:7d:25:6d:b1:f2:05:4d:c3:82:04:3b:21:55:68:34:0c:
60:c0:3c:61:fc:07:1f:72:24:63:fc:c4:9f:dd:f0:a5:3d:24:
3b:23:df:1e:03:c3:0b:88:f0:20:67:e8:5c:ee:df:33:92:f5:
e8:1a:ae:8c:84:eb:4a:98:66:b2:f1:8a:8a:10:0a:a9:73:2d:
7c:50:2d:84:ef:48:bd:c9:d5:5b:be:ee:9f:47:8c:a5:fe:f8:
f2:e8:ca:fa:a9:12:96:06:39:cf:ce:99:8e:2e:5c:a4:4d:50:
e8:ee:da:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF4TC9BV6POzLo5UYE5J6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl
OWJmNTAwHhcNMjYwNTE2MTQwMTI1WhcNMjYwNTE3MTQwMTI1WjAzMTEwLwYDVQQD
EygzNDg0MTI4NGJmNTNlM2Y3YTFjMjI2OTMyMzgxY2E4NWM0YTdhY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp08E9pJyvrjdtF4JvjQ2JUFlwL44
Sexa+H9V4eVPqaa++Uht1x7T1z5FLW6utsYprBquvw3F5lfIuLXeVVoQUSE1TLSm
nND69nkUKAD8yyNMEwMox4O+12KcfjIcCrhH4lYwPFFmR6P8i3quezsrm4zv5DRE
cys2w4geKFqyjYVseRtgEc0FXprupj4Zh/rZMw8Iuzu6PfsJQOsLyFerLY26xb1x
s5y/pvq5NM85yvD6wOWY2BBuGfhuL0jSxHj7oCdRdTyGGK2K8pPJbbNfGsy9w8E7
kNkJzuDqfa6WduNKNeqNGWJusZNjsa227d+Non5ZVGHH5/airPMRVavnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSEEoS/U+P3ocImkyOByoXEp6zhMB8GA1UdIwQY
MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt
MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl
LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGBBhb/f
BrHw7wqEi6fz3vmCE/6qGJrYkVgr/CGfJOZLaNX1felAchO16mLb0c7GyGGdqu6o
f9eEvpGN3BKnCEtSjRw1E3CpAl2FLrtJlNJFonYq2U+4ibs7VjWSfVQLGDorCGSP
FXL0pCZxY+r272ORg8NspsifpeSGCEHrPuGgLrKUcU8LLvebgj/xAHdV2Rl9JW2x
8gVNw4IEOyFVaDQMYMA8YfwHH3IkY/zEn93wpT0kOyPfHgPDC4jwIGfoXO7fM5L1
6BqujITrSphmsvGKihAKqXMtfFAthO9IvcnVW77un0eMpf748ujK+qkSlgY5z86Z
ji5cpE1Q6O7aaA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:21 2026 by rpki-client