Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: On/ungw7HH+pXgEyDZGYdSAyI6UX0jJ0J5eqFFbAEF0=
Subject key identifier: 21:E8:7B:FE:88:6E:5A:51:ED:A8:5D:09:24:3B:DE:83:24:F7:19:D4
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 01A00281AAE5C30E3160EE81103A74C0E2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0AD1
Signing time: Fri 14 Aug 2026 23:00:47 +0000
Manifest this update: Fri 14 Aug 2026 23:00:47 +0000
Manifest next update: Sat 15 Aug 2026 23:00:47 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: 3TAMzktQRH6m5X7ZoJbuwvAQvAz4e6St5EIBPHnIS6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:aa:e5:c3:0e:31:60:ee:81:10:3a:74:c0:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Aug 14 23:00:47 2026 GMT
Not After : Aug 15 23:00:47 2026 GMT
Subject: CN=21e87bfe886e5a51eda85d09243bde8324f719d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:c4:73:04:4f:da:58:e8:dd:63:0b:34:fa:
b2:08:1f:30:f8:86:49:df:eb:75:42:02:79:cd:d8:
1d:e0:e7:90:f6:3d:ce:da:13:ba:a5:85:46:23:cc:
e4:ce:a7:45:8e:11:77:d7:27:6f:c8:fd:cd:74:82:
39:8a:06:bd:7f:16:e1:58:7b:97:90:48:2f:10:7c:
6e:17:b6:97:41:1e:05:2a:2d:9e:f1:a1:4d:89:26:
cd:3b:95:64:bb:20:55:95:a8:15:ea:c9:5b:dd:ca:
b7:ed:c2:51:1f:c0:17:2a:35:d3:20:2f:ba:20:22:
c3:19:80:63:ca:72:0c:31:5f:9a:2d:7c:4d:0a:05:
a8:da:5b:7c:d1:19:0f:b7:2e:c7:49:d9:ac:21:2f:
9d:35:b4:c1:94:7d:f8:52:d2:54:4c:33:a4:ab:f5:
75:cc:6e:28:97:4f:f8:22:cb:fc:07:57:9a:19:41:
e5:eb:37:94:6e:2c:47:6c:04:78:58:ff:75:79:38:
32:ba:8f:77:57:a7:c0:e6:c0:35:f1:94:a3:9d:d7:
db:fc:6b:36:07:99:3f:95:79:81:c4:47:97:94:52:
eb:10:16:0a:3f:15:b2:87:ec:d9:7c:05:47:1f:1d:
25:2b:83:47:ab:62:0d:18:e1:15:54:e5:ce:78:be:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:7B:FE:88:6E:5A:51:ED:A8:5D:09:24:3B:DE:83:24:F7:19:D4
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:00:ef:29:40:89:32:5d:61:fb:4a:7e:da:62:54:6b:32:f1:
cd:7e:32:ff:b1:9a:8e:f4:31:d7:23:03:20:1a:c6:a3:6f:c2:
25:f8:d2:07:c7:21:22:cb:f0:5d:3e:15:68:d6:d3:28:39:d6:
4b:13:a8:a1:ca:00:d1:0b:c4:c8:38:b4:b1:76:16:dd:e1:9d:
76:8f:0e:a4:34:31:37:82:30:2f:f0:15:03:b6:70:af:45:4b:
06:5c:d1:59:3a:59:2f:ef:23:af:75:23:da:23:03:df:df:da:
29:dc:67:dd:92:1a:9d:90:04:2a:bc:a2:1f:aa:07:19:f0:75:
0c:e9:0b:b7:ae:52:ec:77:f2:c2:df:ee:c1:2e:63:5d:9a:ea:
dd:ac:dd:a4:6c:00:09:ab:f7:9e:d1:54:05:70:ae:2a:e5:f1:
16:c1:f8:98:15:df:07:97:3a:61:66:78:5b:71:34:41:8d:f1:
8d:3e:b9:42:a1:23:c2:21:af:e1:4d:b5:77:35:05:a6:f4:8f:
4d:bf:b9:99:3d:fb:c3:d2:76:83:b4:e5:b6:10:50:ea:c0:2b:
08:89:44:eb:f4:1b:60:37:a9:c7:08:4e:c7:90:72:c4:00:b3:
ee:73:eb:a7:8a:ff:4e:41:29:e6:4f:8b:65:5d:38:3d:6a:85:
ae:68:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:16 2026 by rpki-client