Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: hpJjm2R8nY8zEj5lwIDzoLPJQv8DTzrMriGBNC5n0xI=
Subject key identifier: 20:F0:82:20:F8:8D:F2:F9:E8:B4:77:B5:2C:69:34:D4:3C:9B:35:51
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019EBD359917CE46AADEE5BDC9863441566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1960
Signing time: Fri 12 Jun 2026 19:01:06 +0000
Manifest this update: Fri 12 Jun 2026 19:01:06 +0000
Manifest next update: Sat 13 Jun 2026 19:01:06 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: vK3yOtN/A1DBsKfe6FD6guD/K7eGulvuv6FMxdekRzk=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:99:17:ce:46:aa:de:e5:bd:c9:86:34:41:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jun 12 19:01:06 2026 GMT
Not After : Jun 13 19:01:06 2026 GMT
Subject: CN=20f08220f88df2f9e8b477b52c6934d43c9b3551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:f7:8c:34:be:da:10:65:f8:58:0b:9e:4d:
f0:1f:f9:28:21:cb:90:91:86:29:5c:62:18:eb:71:
d7:31:3c:c8:44:9f:56:b0:8e:17:4c:f2:f1:e4:f1:
1c:dc:f5:c3:f3:12:c4:8a:c8:9d:a3:b6:bd:b9:8a:
08:80:3c:c9:be:6c:bc:6b:ac:65:11:3b:e9:38:93:
58:db:54:b1:e6:56:78:7b:95:be:2d:81:c3:20:b9:
97:d0:38:cb:13:3d:dc:d9:3c:fe:74:94:df:7f:b9:
f9:9f:c2:70:6e:55:3b:69:ed:61:ce:26:2e:d6:37:
8f:c0:c0:dc:cd:c3:94:c1:62:af:63:ff:eb:58:b9:
8f:2e:ba:ba:11:5a:71:e8:9f:d7:80:b8:d8:0f:f1:
f9:bf:2e:68:a3:89:c1:e2:ca:c6:74:a3:37:70:39:
f6:89:7e:2e:ea:1d:64:34:a6:40:07:d0:03:f9:71:
f0:84:95:e4:e9:38:2c:0e:bb:38:17:05:0f:f4:56:
05:00:54:f9:df:5c:b7:da:66:a7:82:d1:2d:1c:89:
b6:0a:d1:c8:38:b5:e2:c2:ae:d6:d5:ff:62:34:d5:
35:07:45:4e:1a:24:ca:7d:49:17:83:32:5b:bc:34:
fc:5d:db:f1:ac:3a:26:89:67:92:45:b2:ca:92:46:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:82:20:F8:8D:F2:F9:E8:B4:77:B5:2C:69:34:D4:3C:9B:35:51
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9f:4a:67:a6:40:b2:6e:5d:67:e2:08:36:f5:7a:61:6d:ab:
50:54:d3:25:df:e6:e4:7e:f4:51:4f:c7:41:f6:06:a7:50:06:
1c:6d:6b:5a:4d:6b:52:a7:c3:c4:21:21:50:fb:70:77:35:87:
91:83:70:18:c3:62:a0:1e:57:9b:b2:dd:fb:7e:9c:84:54:52:
92:67:f9:0d:64:02:ad:5e:6d:e4:c8:46:42:5f:f4:a1:2c:2a:
fe:9c:eb:2e:88:5e:d8:36:88:8e:43:93:8b:f7:b8:f1:c4:5f:
2e:0b:ad:85:2b:14:43:e7:b8:b1:8f:e1:6d:33:31:3d:c3:cb:
7a:ca:c7:7d:4d:6a:a6:76:c5:40:2b:62:b3:53:85:c8:1a:b8:
6a:d7:3e:ba:10:ac:ec:af:ed:e4:d1:66:0e:53:ac:53:2a:14:
8f:2b:2c:74:07:fd:17:94:d0:8e:95:d7:6a:01:09:ed:6b:16:
28:27:41:3c:45:35:03:f0:47:b6:18:a1:13:d5:a1:43:84:53:
4a:66:f2:db:00:1a:50:e9:eb:b2:17:8f:c4:84:e8:33:84:0d:
ed:7e:cd:e6:57:19:bc:2e:7f:9d:37:f0:7b:b3:22:92:42:16:
fd:2a:81:7f:2b:76:42:3a:2d:0c:3b:0e:25:87:bc:57:8f:61:
35:f1:24:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69NZkXzkaq3uW9yYY0QVZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ViYTY4NzNjNWI1MDc1YjNjNDM5ZjdmZWViNTRhZjFm
MTBkYTkwHhcNMjYwNjEyMTkwMTA2WhcNMjYwNjEzMTkwMTA2WjAzMTEwLwYDVQQD
EygyMGYwODIyMGY4OGRmMmY5ZThiNDc3YjUyYzY5MzRkNDNjOWIzNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwb3jDS+2hBl+FgLnk3wH/koIcuQ
kYYpXGIY63HXMTzIRJ9WsI4XTPLx5PEc3PXD8xLEisido7a9uYoIgDzJvmy8a6xl
ETvpOJNY21Sx5lZ4e5W+LYHDILmX0DjLEz3c2Tz+dJTff7n5n8JwblU7ae1hziYu
1jePwMDczcOUwWKvY//rWLmPLrq6EVpx6J/XgLjYD/H5vy5oo4nB4srGdKM3cDn2
iX4u6h1kNKZAB9AD+XHwhJXk6TgsDrs4FwUP9FYFAFT531y32mangtEtHIm2CtHI
OLXiwq7W1f9iNNU1B0VOGiTKfUkXgzJbvDT8XdvxrDomiWeSRbLKkkZ4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDwgiD4jfL56LR3tSxpNNQ8mzVRMB8GA1UdIwQY
MBaAFA0+umhzxbUHWzxDn3/utUrx8Q2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUt
Mjc5OThiZjE3NDY1LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUtMjc5OThiZjE3NDY1
LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnp9KZ6ZA
sm5dZ+IINvV6YW2rUFTTJd/m5H70UU/HQfYGp1AGHG1rWk1rUqfDxCEhUPtwdzWH
kYNwGMNioB5Xm7Ld+36chFRSkmf5DWQCrV5t5MhGQl/0oSwq/pzrLohe2DaIjkOT
i/e48cRfLguthSsUQ+e4sY/hbTMxPcPLesrHfU1qpnbFQCtis1OFyBq4atc+uhCs
7K/t5NFmDlOsUyoUjyssdAf9F5TQjpXXagEJ7WsWKCdBPEU1A/BHthihE9WhQ4RT
Smby2wAaUOnrshePxIToM4QN7X7N5lcZvC5/nTfwe7MikkIW/SqBfyt2QjotDDsO
JYe8V49hNfEkCA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:58 2026 by rpki-client