Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: DM8Xe+QymhgcqNqbQpCF7awSB0bcDJVgcjGSiOqzGhk=
Subject key identifier: C2:49:8C:C2:5A:C9:E6:E5:76:E4:D3:65:EC:02:5E:5F:DD:85:67:24
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 019D9A3E4ADF5BA1FED443E7C3EB99622559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 0AD9
Signing time: Fri 17 Apr 2026 07:01:06 +0000
Manifest this update: Fri 17 Apr 2026 07:01:06 +0000
Manifest next update: Sat 18 Apr 2026 07:01:06 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: rP8HxsGARxs2+VkLkHXy0O84B24eT1xzWbZMfpYi1TE=)
2: MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa (hash: lAuDt32my/LiTnY20vjzp72xOaSWLrQI57qUNwtWtUY=)
3: _TpEXpR390l-2zZdIjknvF0TXis.roa (hash: zzI1yvFkNgMBwF/wH9+ZIjX5kjZLbJeeCbYHypeGMZI=)
4: rjjSoAat_n07PoQnlpP54238J18.roa (hash: 8lMbg8iLAkX/M5jc8c3TgyGl0DahY6oK1llhi2qDKko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4a:df:5b:a1:fe:d4:43:e7:c3:eb:99:62:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Apr 17 07:01:06 2026 GMT
Not After : Apr 18 07:01:06 2026 GMT
Subject: CN=c2498cc25ac9e6e576e4d365ec025e5fdd856724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:21:c4:46:6b:a8:16:d6:29:6d:87:7f:e3:
3d:e8:bc:3f:8a:e0:7e:64:78:f8:8a:1e:e7:ad:6b:
72:9d:20:24:8d:66:6b:ae:9f:00:0c:ba:11:10:62:
32:5c:0f:4c:66:23:8b:d5:44:eb:79:7b:21:97:b6:
55:f7:ef:b3:b7:d8:2c:09:5e:46:ad:e2:86:ba:33:
b6:ce:1d:20:b4:cf:7f:78:19:cc:af:fc:7a:64:70:
33:c7:db:86:3a:7d:d7:6c:78:95:60:a6:b5:70:c9:
13:a8:c6:6a:ca:3a:13:16:79:9b:94:33:7f:89:43:
e9:b3:73:8f:65:fc:07:68:45:e7:9d:10:24:95:2e:
95:6d:9e:c8:fb:49:50:7b:45:0d:de:4e:12:9d:e9:
e6:9a:f3:4a:26:eb:4a:ab:97:99:4b:05:4b:79:2d:
51:d9:ec:17:8c:90:76:77:dd:93:fb:61:9b:9a:f1:
5b:15:3d:40:65:c3:58:4f:4d:bc:f8:1d:57:6b:39:
f2:d4:98:f1:82:0e:71:0b:68:ad:d9:7d:21:4c:4e:
eb:7e:47:b7:64:ec:59:69:16:bb:a7:cb:1b:d6:3f:
09:9b:37:0c:25:9d:83:93:c0:24:82:c0:87:b7:a4:
8b:fa:56:32:d9:ad:b9:df:18:ed:23:2b:f7:4d:18:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:8C:C2:5A:C9:E6:E5:76:E4:D3:65:EC:02:5E:5F:DD:85:67:24
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:24:cb:80:78:02:d8:52:57:be:80:4d:65:a3:af:ba:f4:
87:1b:80:38:c7:e4:99:09:c9:ca:ae:38:eb:ba:6c:ee:21:4d:
e2:dc:48:73:f5:ec:12:45:a8:9c:57:6f:3d:cc:a1:93:37:0e:
3f:bc:89:e2:36:d4:41:2e:d9:bd:e2:e2:f1:3c:f7:90:76:75:
6a:9c:b8:76:62:93:ed:d4:dd:55:16:37:e3:39:83:55:75:84:
e3:3b:24:dc:5e:1f:c2:75:9b:5c:6a:8e:5f:15:69:41:16:4e:
76:6f:5a:a8:1a:23:9d:32:58:ee:5c:24:70:cc:2b:21:a5:1a:
e7:ba:8e:7d:da:68:dc:58:96:5f:b2:bc:44:47:75:a9:df:e5:
3a:65:aa:05:60:c1:8f:ab:ce:fb:b0:ab:31:a2:0b:34:5e:08:
77:c8:e8:14:5f:d0:00:37:b6:1a:07:6f:e5:2a:40:a1:1e:7b:
65:ab:df:35:d9:d7:61:1e:4d:1f:79:ec:da:06:76:d8:4d:51:
c3:68:ae:33:20:c2:ae:c4:c7:43:c2:af:4b:c0:b0:28:4b:72:
6d:a6:73:a8:bf:66:55:46:99:55:4e:70:f0:72:1b:90:43:8c:
b6:b2:77:c6:21:fb:ec:bb:d6:fa:e2:61:5d:6a:53:a3:dd:cb:
f7:e6:0d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkrfW6H+1EPnw+uZYiVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2
MTdmYTEwHhcNMjYwNDE3MDcwMTA2WhcNMjYwNDE4MDcwMTA2WjAzMTEwLwYDVQQD
EyhjMjQ5OGNjMjVhYzllNmU1NzZlNGQzNjVlYzAyNWU1ZmRkODU2NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6QhxEZrqBbWKW2Hf+M96Lw/iuB+
ZHj4ih7nrWtynSAkjWZrrp8ADLoREGIyXA9MZiOL1UTreXshl7ZV9++zt9gsCV5G
reKGujO2zh0gtM9/eBnMr/x6ZHAzx9uGOn3XbHiVYKa1cMkTqMZqyjoTFnmblDN/
iUPps3OPZfwHaEXnnRAklS6VbZ7I+0lQe0UN3k4SnenmmvNKJutKq5eZSwVLeS1R
2ewXjJB2d92T+2GbmvFbFT1AZcNYT028+B1Xazny1Jjxgg5xC2it2X0hTE7rfke3
ZOxZaRa7p8sb1j8JmzcMJZ2Dk8AkgsCHt6SL+lYy2a253xjtIyv3TRhPzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJJjMJayeblduTTZewCXl/dhWckMB8GA1UdIwQY
MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt
YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh
LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATywky4B4
AthSV76ATWWjr7r0hxuAOMfkmQnJyq4467ps7iFN4txIc/XsEkWonFdvPcyhkzcO
P7yJ4jbUQS7ZveLi8Tz3kHZ1apy4dmKT7dTdVRY34zmDVXWE4zsk3F4fwnWbXGqO
XxVpQRZOdm9aqBojnTJY7lwkcMwrIaUa57qOfdpo3FiWX7K8REd1qd/lOmWqBWDB
j6vO+7CrMaILNF4Id8joFF/QADe2Ggdv5SpAoR57ZavfNdnXYR5NH3ns2gZ22E1R
w2iuMyDCrsTHQ8KvS8CwKEtybaZzqL9mVUaZVU5w8HIbkEOMtrJ3xiH77LvW+uJh
XWpTo93L9+YNcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:11 2026 by rpki-client