Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: XyNqOFnRHfNH4pdw9RfUrK2PjcsTKeTJ1I21/OQ4M1k=
Subject key identifier: 39:72:6B:AB:D6:17:6A:A2:76:08:E2:1A:57:7E:8D:C8:C8:38:EA:94
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019FAC75941E19E7304728FC53DEF1902C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 01CF
Signing time: Wed 29 Jul 2026 06:00:14 +0000
Manifest this update: Wed 29 Jul 2026 06:00:14 +0000
Manifest next update: Thu 30 Jul 2026 06:00:14 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: d1nw6Sf18Ri9lUjXJhYLvR7Cu3q5rxth5u+xKlezv8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:94:1e:19:e7:30:47:28:fc:53:de:f1:90:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Jul 29 06:00:14 2026 GMT
Not After : Jul 30 06:00:14 2026 GMT
Subject: CN=39726babd6176aa27608e21a577e8dc8c838ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:dc:92:d0:04:7e:c4:26:9e:a7:0f:1f:15:
4f:00:1c:e9:64:2d:e2:b4:ba:aa:ad:82:ff:32:96:
16:de:fd:58:89:6e:27:30:e6:c0:d4:22:4f:05:fe:
e0:67:0b:4d:79:12:a1:bb:8e:f2:85:a1:2f:28:9a:
7f:20:03:b3:44:b4:f8:42:1c:32:cf:69:ab:4d:d5:
cb:d3:1f:03:fa:af:35:07:0d:48:12:ab:8a:64:4d:
ae:a6:b3:99:6a:0b:70:f8:c9:b8:17:7b:05:84:36:
3e:c9:e1:93:5a:86:d0:55:b7:c1:60:f3:80:6e:a6:
4e:f3:2b:03:cf:5d:ac:be:41:69:ed:15:bd:d8:c7:
6e:b1:12:cd:36:ea:16:b4:fa:c4:71:28:d9:7b:3f:
3a:4c:92:6d:a5:6d:a1:33:c5:2f:85:c1:dd:89:13:
97:25:bd:11:76:43:71:d9:c5:35:0b:a6:3c:1c:79:
ff:ed:fe:7c:73:c4:ee:73:a8:2a:e4:2f:8c:05:54:
b1:de:04:e5:54:e4:ec:7f:ff:8c:9d:56:66:97:be:
36:a4:8c:1b:38:ea:c6:4b:84:ac:0c:92:4f:88:4d:
5e:3e:3f:b8:64:8f:96:88:09:96:8b:6e:92:2f:52:
64:05:90:c9:0c:f6:b8:d4:b1:a9:70:1a:d6:80:5f:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:72:6B:AB:D6:17:6A:A2:76:08:E2:1A:57:7E:8D:C8:C8:38:EA:94
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:8c:87:47:b2:ee:bb:dd:c6:fd:bf:29:63:be:27:09:97:
46:60:a4:2b:1f:f0:71:26:07:69:2a:6c:83:09:ab:cb:e7:e9:
26:e7:b7:10:50:6b:ac:91:0c:05:72:59:dd:33:ce:99:e4:3b:
41:f5:b6:33:91:2c:51:49:92:a9:7a:17:2b:d0:13:54:51:a9:
ba:24:58:f2:92:0d:66:d0:87:3b:5b:b6:01:80:96:a0:e4:e2:
9d:1d:51:80:8f:e2:e1:bc:12:9d:93:c4:e9:e5:70:f7:48:5f:
43:85:0e:9a:03:01:1c:41:13:7f:71:89:1f:db:8c:58:0b:7e:
d1:01:ea:8f:63:e9:9b:c1:90:f1:3f:6a:c8:d3:c8:7a:f8:97:
89:b5:8c:ac:7a:4c:72:fc:bf:cc:55:7f:f0:fe:26:7a:59:3e:
4e:c6:02:31:94:4b:ac:41:3f:f8:94:1a:6a:ae:9b:29:94:71:
40:62:f2:1f:4a:05:a7:b3:e6:7d:9f:15:93:f5:83:6d:a7:bc:
fc:98:90:bd:69:0a:85:c4:b5:f2:59:d0:56:f5:fa:e5:4b:cb:
95:6d:97:30:95:70:da:48:79:50:ed:3a:2a:b8:6b:23:54:b2:
e4:42:01:bd:4f:b2:71:9d:38:84:86:77:e0:d9:a9:4a:1a:36:
7e:0d:16:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZQeGecwRyj8U97xkCwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNmYjQyNWJjMWMzNTI1NzdlMGE5YWRlNWJmZjU5YzBi
NGM1ODIwHhcNMjYwNzI5MDYwMDE0WhcNMjYwNzMwMDYwMDE0WjAzMTEwLwYDVQQD
EygzOTcyNmJhYmQ2MTc2YWEyNzYwOGUyMWE1NzdlOGRjOGM4MzhlYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NHcktAEfsQmnqcPHxVPABzpZC3i
tLqqrYL/MpYW3v1YiW4nMObA1CJPBf7gZwtNeRKhu47yhaEvKJp/IAOzRLT4Qhwy
z2mrTdXL0x8D+q81Bw1IEquKZE2uprOZagtw+Mm4F3sFhDY+yeGTWobQVbfBYPOA
bqZO8ysDz12svkFp7RW92MdusRLNNuoWtPrEcSjZez86TJJtpW2hM8UvhcHdiROX
Jb0RdkNx2cU1C6Y8HHn/7f58c8Tuc6gq5C+MBVSx3gTlVOTsf/+MnVZml742pIwb
OOrGS4SsDJJPiE1ePj+4ZI+WiAmWi26SL1JkBZDJDPa41LGpcBrWgF8CUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlya6vWF2qidgjiGld+jcjIOOqUMB8GA1UdIwQY
MBaAFA5D+0JbwcNSV34Kmt5b/1nAtMWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWIt
OTExZjFkZGRkNjZiLzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWItOTExZjFkZGRkNjZi
LzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNaMh0ey
7rvdxv2/KWO+JwmXRmCkKx/wcSYHaSpsgwmry+fpJue3EFBrrJEMBXJZ3TPOmeQ7
QfW2M5EsUUmSqXoXK9ATVFGpuiRY8pINZtCHO1u2AYCWoOTinR1RgI/i4bwSnZPE
6eVw90hfQ4UOmgMBHEETf3GJH9uMWAt+0QHqj2Ppm8GQ8T9qyNPIeviXibWMrHpM
cvy/zFV/8P4melk+TsYCMZRLrEE/+JQaaq6bKZRxQGLyH0oFp7PmfZ8Vk/WDbae8
/JiQvWkKhcS18lnQVvX65UvLlW2XMJVw2kh5UO06KrhrI1Sy5EIBvU+ycZ04hIZ3
4NmpSho2fg0W1A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:01 2026 by rpki-client