Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: MoyJLjov3ZrAbFpRL/oHzZ9VdxRBPxpOfS6OO5NOAKs=
Subject key identifier: FD:0D:73:B1:C5:2B:15:48:76:BC:A0:56:34:1F:E2:4E:05:B2:0C:93
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 01A1DD5DB50911E6623B556F6A479713D087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 14BC
Signing time: Sun 15 Nov 2026 04:01:08 +0000
Manifest this update: Sun 15 Nov 2026 04:01:08 +0000
Manifest next update: Mon 16 Nov 2026 04:01:08 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: eKTFHMwx9VVuCvFqsvXUcrqEr3492kj0Avg/uj5HGhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:b5:09:11:e6:62:3b:55:6f:6a:47:97:13:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Nov 15 04:01:08 2026 GMT
Not After : Nov 16 04:01:08 2026 GMT
Subject: CN=fd0d73b1c52b154876bca056341fe24e05b20c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:fa:0f:54:9c:fb:b1:a9:9e:46:1c:dd:9e:
75:d6:59:67:23:9a:cc:dc:26:72:ef:84:2e:a3:39:
66:64:02:5f:ca:64:dd:5e:e2:3b:cd:b9:8c:32:76:
30:94:2c:e3:e8:63:1f:67:e4:44:8e:f6:40:62:d7:
d2:b0:92:eb:72:ca:78:cd:22:13:a9:03:99:eb:f3:
15:ad:d8:d2:75:63:bf:4c:b2:90:66:97:ae:d1:8c:
cb:fa:b9:96:46:55:77:51:4f:2c:d7:1e:f0:1f:32:
fc:b1:11:29:cc:22:19:67:35:97:53:1b:8b:3b:8d:
df:c3:a4:44:2c:1a:e2:8a:04:83:9d:a3:f5:a6:da:
43:dc:bd:41:65:32:08:1a:41:1f:53:db:c8:d3:a8:
cf:5a:ff:c3:65:9f:17:03:7b:c2:9e:00:75:4d:be:
84:cd:17:50:a6:ce:43:c4:70:c7:79:db:fb:97:be:
d0:bf:de:73:8d:52:27:7c:9d:1c:9a:24:a1:87:c0:
d8:ed:d9:f2:99:2e:d6:07:55:22:7b:a0:dd:3c:5f:
bf:67:e6:d2:d2:05:c0:d9:e9:cb:54:52:b7:ac:c7:
3b:75:4b:42:19:d1:dd:0f:9b:aa:85:9c:12:9f:9a:
ec:59:9d:dc:f1:e9:1c:35:cd:80:06:5e:5b:c0:b0:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:73:B1:C5:2B:15:48:76:BC:A0:56:34:1F:E2:4E:05:B2:0C:93
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:e9:8a:66:1e:29:65:2a:86:f1:ac:9d:5b:94:e8:94:fe:
2e:64:11:9d:df:53:2f:27:76:55:40:79:2f:3b:55:4c:4e:34:
2d:c8:43:9a:09:7f:cd:73:68:c4:6a:fa:50:01:52:39:0d:a8:
da:09:cf:fa:07:d8:58:7b:62:8c:f6:66:54:9a:a8:94:3b:49:
bb:4d:da:6a:d0:99:3f:58:fd:e2:40:e0:23:0b:38:eb:47:b8:
9d:b7:29:52:27:27:91:3f:7a:0c:f6:b4:7f:42:62:52:72:ae:
01:cc:42:95:21:6d:40:d6:d3:ea:73:9d:95:09:23:e6:a2:dd:
6f:90:46:6b:bd:52:ac:be:65:13:ed:75:1b:75:32:78:1f:bf:
90:fd:4c:9f:16:6f:ab:bf:e5:40:b9:05:f2:6d:e4:b1:ef:c2:
71:ad:16:bb:52:75:57:d9:05:b3:a7:4e:09:38:42:41:30:01:
4c:93:a2:af:f8:98:44:04:37:25:83:53:86:13:ef:1d:5d:bf:
1c:52:21:c5:54:5b:1a:da:12:56:b9:b2:57:10:53:f2:e1:bd:
28:5d:21:1e:f1:61:6f:16:df:a4:66:e2:d3:83:41:63:68:5f:
3c:1a:d2:bd:a0:91:c3:b6:b5:8b:40:71:60:e4:55:47:be:00:
ce:73:df:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXbUJEeZiO1VvakeXE9CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzFjY2FhNTg0ZmIzOTE0ZTc5MmZkNTM5MGUzYmEyZDMw
MzMzOGMwHhcNMjYxMTE1MDQwMTA4WhcNMjYxMTE2MDQwMTA4WjAzMTEwLwYDVQQD
EyhmZDBkNzNiMWM1MmIxNTQ4NzZiY2EwNTYzNDFmZTI0ZTA1YjIwYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yj6D1Sc+7GpnkYc3Z511llnI5rM
3CZy74QuozlmZAJfymTdXuI7zbmMMnYwlCzj6GMfZ+REjvZAYtfSsJLrcsp4zSIT
qQOZ6/MVrdjSdWO/TLKQZpeu0YzL+rmWRlV3UU8s1x7wHzL8sREpzCIZZzWXUxuL
O43fw6RELBriigSDnaP1ptpD3L1BZTIIGkEfU9vI06jPWv/DZZ8XA3vCngB1Tb6E
zRdQps5DxHDHedv7l77Qv95zjVInfJ0cmiShh8DY7dnymS7WB1Uie6DdPF+/Z+bS
0gXA2enLVFK3rMc7dUtCGdHdD5uqhZwSn5rsWZ3c8ekcNc2ABl5bwLBPgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0Nc7HFKxVIdrygVjQf4k4FsgyTMB8GA1UdIwQY
MBaAFA3BzKpYT7ORTnkv1TkOO6LTAzOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUt
YmY4NWNkMjU0MjdlLzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUtYmY4NWNkMjU0Mjdl
LzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9fpimYe
KWUqhvGsnVuU6JT+LmQRnd9TLyd2VUB5LztVTE40LchDmgl/zXNoxGr6UAFSOQ2o
2gnP+gfYWHtijPZmVJqolDtJu03aatCZP1j94kDgIws460e4nbcpUicnkT96DPa0
f0JiUnKuAcxClSFtQNbT6nOdlQkj5qLdb5BGa71SrL5lE+11G3UyeB+/kP1MnxZv
q7/lQLkF8m3kse/Cca0Wu1J1V9kFs6dOCThCQTABTJOir/iYRAQ3JYNThhPvHV2/
HFIhxVRbGtoSVrmyVxBT8uG9KF0hHvFhbxbfpGbi04NBY2hfPBrSvaCRw7a1i0Bx
YORVR74AznPfqg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:23 2026 by rpki-client