Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: du2ngBwCzCZBKSGb90UY79DvgZinhG4HdVNhj63GkDU=
Subject key identifier: 29:45:D5:B3:E3:AB:E0:0B:D6:E8:A7:4E:84:F9:75:33:B0:7A:45:96
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019FAB9A8009DBB06CF1273E5F7E47BBB883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 020C
Signing time: Wed 29 Jul 2026 02:00:56 +0000
Manifest this update: Wed 29 Jul 2026 02:00:56 +0000
Manifest next update: Thu 30 Jul 2026 02:00:56 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: UF9nZegvrZacScw0W8izqy0Is0KVvy6uLMyCCjajpqg=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:80:09:db:b0:6c:f1:27:3e:5f:7e:47:bb:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Jul 29 02:00:56 2026 GMT
Not After : Jul 30 02:00:56 2026 GMT
Subject: CN=2945d5b3e3abe00bd6e8a74e84f97533b07a4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:4e:b7:d8:84:db:02:58:59:ee:cc:f9:b9:
35:ca:c0:fd:24:ad:26:98:d4:52:9b:d7:76:cf:dd:
22:94:ca:b8:29:ff:4a:32:55:7f:bc:ad:d8:76:2c:
9b:50:8c:d7:38:53:a3:08:eb:87:07:47:97:4a:48:
77:96:04:24:39:43:55:d0:73:21:1e:6a:db:e8:5d:
31:58:bd:ef:dd:4f:54:44:2c:62:4a:a0:f7:df:06:
62:dd:08:eb:d3:a0:35:36:63:8d:03:1b:b2:e8:d3:
15:16:40:55:c5:cf:df:47:1b:2f:28:62:bb:fc:7c:
5b:5d:ec:16:eb:54:25:e3:f5:9c:92:d3:d4:19:13:
c0:d6:60:8d:e2:94:f4:d7:ac:db:75:53:e1:00:13:
94:e8:eb:0f:a0:2f:35:59:ff:dd:86:fc:67:c8:f2:
1f:76:77:cd:12:0d:07:b6:a1:db:c5:1e:9a:b0:e7:
f8:6b:43:88:25:ad:ef:15:0e:a1:78:f3:bb:c3:47:
5d:e9:b5:84:22:ee:3e:be:b8:5e:79:2b:91:d5:a9:
88:9f:c6:a4:11:07:95:05:3a:93:9e:a5:55:47:47:
4f:5e:40:ad:5a:11:8f:9a:56:bc:8b:78:56:b4:82:
f9:96:c5:0f:8a:e2:e8:72:3c:31:77:46:b6:b5:4d:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:D5:B3:E3:AB:E0:0B:D6:E8:A7:4E:84:F9:75:33:B0:7A:45:96
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:91:ba:ce:4f:b8:a7:0e:7a:f3:94:19:b8:9f:fd:92:23:42:
ce:ab:36:09:39:eb:e1:78:93:77:f8:b5:c6:e4:6f:34:61:ad:
b0:16:3d:99:cc:4f:0e:36:fb:c3:ab:16:a0:ca:68:99:0b:97:
03:1b:16:df:4f:d7:d5:a1:5f:34:7a:b5:c8:4f:6d:ee:0e:5d:
63:b4:b7:52:13:e6:9c:de:f1:6b:c7:9c:96:1d:fc:5b:66:f0:
71:92:b8:2f:d6:51:a0:f3:b5:0e:00:f9:a9:b5:af:50:52:d2:
c1:f3:93:eb:03:d5:29:84:b3:9a:d5:66:d8:24:35:80:88:1d:
1d:83:01:e0:da:73:8a:6b:a5:b7:9a:b4:e2:53:82:89:ac:2f:
2f:82:49:9f:a4:15:5a:00:b2:68:8d:e7:50:f3:67:15:20:bf:
e0:5c:a6:3c:6e:10:07:40:ef:cf:b0:fd:ec:72:06:1c:de:65:
be:09:b6:da:a7:76:3e:33:42:02:3d:af:35:8e:cb:61:03:35:
03:6b:4d:01:45:42:a9:43:30:48:4a:42:e8:d9:17:56:aa:26:
25:1b:6f:01:02:05:bc:3b:29:47:da:d5:16:d2:aa:8c:96:5a:
ab:b4:54:56:ac:ad:04:3b:8b:7b:26:a5:7a:c0:22:ce:64:ac:
15:81:40:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmoAJ27Bs8Sc+X35Hu7iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjBkNjJkZWUzYTE0YTA2ZTUyYjdlZjdhMDgzMDMzOGQ5
ZDc3NTEwHhcNMjYwNzI5MDIwMDU2WhcNMjYwNzMwMDIwMDU2WjAzMTEwLwYDVQQD
EygyOTQ1ZDViM2UzYWJlMDBiZDZlOGE3NGU4NGY5NzUzM2IwN2E0NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o1Ot9iE2wJYWe7M+bk1ysD9JK0m
mNRSm9d2z90ilMq4Kf9KMlV/vK3YdiybUIzXOFOjCOuHB0eXSkh3lgQkOUNV0HMh
Hmrb6F0xWL3v3U9URCxiSqD33wZi3Qjr06A1NmONAxuy6NMVFkBVxc/fRxsvKGK7
/HxbXewW61Ql4/WcktPUGRPA1mCN4pT016zbdVPhABOU6OsPoC81Wf/dhvxnyPIf
dnfNEg0HtqHbxR6asOf4a0OIJa3vFQ6hePO7w0dd6bWEIu4+vrheeSuR1amIn8ak
EQeVBTqTnqVVR0dPXkCtWhGPmla8i3hWtIL5lsUPiuLocjwxd0a2tU1HawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClF1bPjq+AL1uinToT5dTOwekWWMB8GA1UdIwQY
MBaAFA3w1i3uOhSgblK373oIMDONnXdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMt
NTE4NGNkNmZjMjEzLzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMtNTE4NGNkNmZjMjEz
LzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZG6zk+4
pw5685QZuJ/9kiNCzqs2CTnr4XiTd/i1xuRvNGGtsBY9mcxPDjb7w6sWoMpomQuX
AxsW30/X1aFfNHq1yE9t7g5dY7S3UhPmnN7xa8eclh38W2bwcZK4L9ZRoPO1DgD5
qbWvUFLSwfOT6wPVKYSzmtVm2CQ1gIgdHYMB4Npzimult5q04lOCiawvL4JJn6QV
WgCyaI3nUPNnFSC/4FymPG4QB0Dvz7D97HIGHN5lvgm22qd2PjNCAj2vNY7LYQM1
A2tNAUVCqUMwSEpC6NkXVqomJRtvAQIFvDspR9rVFtKqjJZaq7RUVqytBDuLeyal
esAizmSsFYFApg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:53 2026 by rpki-client