Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: J8hh3bKYvDYkkpSb7cAJo8YeLJb4hlDDThrldbONoAs=
Subject key identifier: 95:0C:CF:D8:D9:EC:42:44:2D:9B:5B:B6:F5:EC:06:8D:C2:B6:93:F2
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 01A001DDA3FF88B9A58B95AF53C0048B343B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0A44
Signing time: Fri 14 Aug 2026 20:01:37 +0000
Manifest this update: Fri 14 Aug 2026 20:01:37 +0000
Manifest next update: Sat 15 Aug 2026 20:01:37 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: Z7rX4Ij9OApWFjVs1A/lWcNbh+1lJ9KiZddKs8nc1k8=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a3:ff:88:b9:a5:8b:95:af:53:c0:04:8b:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Aug 14 20:01:37 2026 GMT
Not After : Aug 15 20:01:37 2026 GMT
Subject: CN=950ccfd8d9ec42442d9b5bb6f5ec068dc2b693f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:cf:9c:24:05:ea:d3:97:31:75:00:8a:a4:
78:6f:98:c3:bf:d9:6d:a0:29:fd:eb:13:a5:b6:03:
bf:dc:64:3b:e4:29:e9:ed:f1:69:0d:32:45:2a:23:
47:82:cc:a3:c1:99:87:c3:60:17:36:0e:69:56:be:
2f:34:da:13:36:75:5c:a9:9a:ea:a6:f6:64:23:67:
4e:48:47:16:85:75:2a:8a:04:63:97:4c:ca:90:95:
e7:b6:39:b2:58:40:c4:a5:2e:55:ca:f2:9d:ff:f4:
71:c0:66:3e:25:fd:62:4b:69:36:3c:d8:fa:45:83:
27:c0:b9:dd:b2:1e:8f:16:e3:60:34:2a:34:5e:6c:
35:08:32:90:c7:67:b7:15:3a:8f:ce:e7:35:c7:c9:
4a:41:4b:7e:ff:d1:38:2c:db:ba:a0:53:97:c9:95:
10:c2:63:3d:7f:20:f0:b3:72:8e:8d:fa:51:9e:92:
06:2d:be:a3:d4:0e:b8:3c:96:d7:7b:06:8e:ba:0d:
27:b8:c0:62:71:be:ef:80:ee:b2:9c:af:b8:14:9e:
95:4b:bc:7c:e9:4c:4f:a6:02:b7:ca:c6:20:cc:c2:
98:5f:0b:16:29:fb:fe:8c:6a:b0:ab:c6:7e:9a:51:
1f:d5:76:ac:8c:f4:80:55:3f:cb:67:3f:9e:5a:40:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:CF:D8:D9:EC:42:44:2D:9B:5B:B6:F5:EC:06:8D:C2:B6:93:F2
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:a7:1f:00:42:92:0a:15:9e:82:d6:67:07:84:b6:58:b9:
5b:3d:57:8e:2e:21:29:e2:fd:18:fb:0f:9c:8e:1f:3f:f5:73:
07:29:d1:df:0e:06:fa:1a:67:9d:c6:f6:31:94:a2:89:10:f9:
9c:62:41:50:35:79:1d:b6:f1:df:b7:dd:03:41:c9:c8:d1:22:
19:aa:28:08:d9:0f:a0:d3:29:16:31:2a:8f:86:0f:0a:73:79:
ec:3d:a1:d4:15:95:18:dc:f6:2e:ab:9c:37:8d:71:35:ee:9e:
f5:71:7e:f6:bc:9f:d2:5b:1e:da:2a:d7:96:e9:af:79:07:3e:
12:44:26:4b:c5:1f:a5:54:cf:36:83:b7:08:d1:ce:59:c3:15:
04:ca:df:28:ef:a2:70:23:02:a0:72:53:db:f1:88:72:d9:3a:
b2:7f:0b:3b:11:1b:32:68:97:b1:42:0a:1b:59:4b:1b:a4:36:
13:4d:ab:e8:dd:47:12:0f:d8:03:d1:e5:19:39:34:ed:30:ef:
82:45:42:8a:be:db:bc:72:6a:3b:8c:8e:ad:8e:f2:a6:b2:53:
90:20:2c:f9:28:d0:c5:10:85:25:73:25:c9:8e:b9:ed:6b:00:
ad:5b:bf:6f:e8:0b:66:56:1f:f8:ac:14:a2:dd:86:a2:65:1d:
c8:25:fa:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3aP/iLmli5WvU8AEizQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNzBjZTdhNGU2ZTRhYjNhNGVhOWYwODFmNTkyZWE1ZjZk
MmI5YWEwHhcNMjYwODE0MjAwMTM3WhcNMjYwODE1MjAwMTM3WjAzMTEwLwYDVQQD
Eyg5NTBjY2ZkOGQ5ZWM0MjQ0MmQ5YjViYjZmNWVjMDY4ZGMyYjY5M2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22fPnCQF6tOXMXUAiqR4b5jDv9lt
oCn96xOltgO/3GQ75Cnp7fFpDTJFKiNHgsyjwZmHw2AXNg5pVr4vNNoTNnVcqZrq
pvZkI2dOSEcWhXUqigRjl0zKkJXntjmyWEDEpS5VyvKd//RxwGY+Jf1iS2k2PNj6
RYMnwLndsh6PFuNgNCo0Xmw1CDKQx2e3FTqPzuc1x8lKQUt+/9E4LNu6oFOXyZUQ
wmM9fyDws3KOjfpRnpIGLb6j1A64PJbXewaOug0nuMBicb7vgO6ynK+4FJ6VS7x8
6UxPpgK3ysYgzMKYXwsWKfv+jGqwq8Z+mlEf1XasjPSAVT/LZz+eWkCfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUMz9jZ7EJELZtbtvXsBo3CtpPyMB8GA1UdIwQY
MBaAFNtwznpObkqzpOqfCB9ZLqX20rmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYt
MmNiMTdiN2JjNjE4LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ZGE2MDEtNjM1ZS00ZDA3LTgwOTYtMmNiMTdiN2JjNjE4
LzEvMjNET2VrNXVTck9rNnA4SUgxa3VwZmJTdWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpinHwBC
kgoVnoLWZweEtli5Wz1Xji4hKeL9GPsPnI4fP/VzBynR3w4G+hpnncb2MZSiiRD5
nGJBUDV5Hbbx37fdA0HJyNEiGaooCNkPoNMpFjEqj4YPCnN57D2h1BWVGNz2Lquc
N41xNe6e9XF+9ryf0lse2irXlumveQc+EkQmS8UfpVTPNoO3CNHOWcMVBMrfKO+i
cCMCoHJT2/GIctk6sn8LOxEbMmiXsUIKG1lLG6Q2E02r6N1HEg/YA9HlGTk07TDv
gkVCir7bvHJqO4yOrY7yprJTkCAs+SjQxRCFJXMlyY657WsArVu/b+gLZlYf+KwU
ot2GomUdyCX6Mw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:24 2026 by rpki-client