Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: 4tKsN1Ji3jJwSMJzkMAasmtcM/PaoOCF3/mKC8irS7g=
Subject key identifier: E8:32:23:3C:32:1F:50:1C:73:DA:0B:60:B5:E9:D1:E7:0C:43:92:65
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019EC06E46908845EA8EF206E5F54D4C0CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 1155
Signing time: Sat 13 Jun 2026 10:01:52 +0000
Manifest this update: Sat 13 Jun 2026 10:01:52 +0000
Manifest next update: Sun 14 Jun 2026 10:01:52 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: SZ8ReCQRTcsoxH3i/uq8i27ASoLTsIJUZ4uRUL7ySJ0=)
2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:46:90:88:45:ea:8e:f2:06:e5:f5:4d:4c:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jun 13 10:01:52 2026 GMT
Not After : Jun 14 10:01:52 2026 GMT
Subject: CN=e832233c321f501c73da0b60b5e9d1e70c439265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:ba:e2:bd:a7:6e:3f:4a:1b:54:11:69:ef:
b1:9c:19:9e:ba:b2:67:be:32:43:4c:4b:15:21:90:
9a:0f:a7:08:59:ff:3d:3d:01:49:44:91:fd:04:f8:
63:de:3b:e0:9c:eb:c3:7b:2d:d4:18:43:71:e0:91:
72:8a:dc:f1:6c:c6:5d:ee:7b:98:b5:8b:b6:26:48:
67:ea:37:cd:68:35:7d:d6:23:d8:4a:7f:49:18:e5:
9a:6b:ca:5b:2e:de:e7:51:ae:4a:df:67:3a:7e:c1:
29:a8:36:d3:77:d9:98:8f:11:81:f7:84:88:22:26:
fc:e0:c5:7b:df:75:9f:cb:82:b9:b6:87:f4:32:b7:
78:76:a9:db:d9:b9:b7:a6:6e:2a:82:d9:96:65:c7:
e1:55:6d:5c:e6:7c:4a:80:6b:be:74:83:ed:e9:af:
2f:1a:b7:ec:8a:b7:e2:0c:93:b8:36:80:7c:8f:4d:
c1:9f:8c:da:fc:11:d6:2c:bb:14:2f:91:39:f7:ae:
dc:76:a1:d7:95:f7:52:19:fa:c2:9c:d4:bf:6b:89:
cc:a5:db:bd:14:d3:63:85:88:0f:45:8a:cd:77:29:
a1:70:ce:22:2a:2a:71:86:63:c3:1c:d0:22:ab:5c:
d2:6e:79:a1:06:73:fa:eb:9a:87:b1:cf:4f:da:81:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:23:3C:32:1F:50:1C:73:DA:0B:60:B5:E9:D1:E7:0C:43:92:65
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:64:ef:d9:43:4d:77:47:3f:c8:cd:b6:46:8e:f6:54:37:b0:
81:41:03:19:43:69:15:ee:14:dd:68:3e:85:22:a9:dd:e5:53:
0a:a3:c9:b8:19:e8:b2:4b:35:06:4e:69:e1:45:5a:47:17:34:
3e:17:fc:fc:7c:e3:9a:60:ce:f6:a7:34:85:47:7c:30:76:ba:
09:9e:45:15:ba:32:44:6b:df:f1:32:39:54:58:a2:15:cd:5e:
8f:2b:f3:06:44:ca:52:ea:37:87:a7:0d:b6:82:61:cb:9f:03:
a3:23:47:fe:49:13:9e:7f:dd:19:d9:f2:81:c6:50:47:a9:e9:
06:d9:74:38:69:ec:19:a3:be:0f:c8:56:af:c8:0d:89:11:ed:
c4:8c:bf:5d:e9:c7:b0:58:f5:81:4b:08:8b:fc:7b:4c:19:1f:
d0:df:ec:a3:8d:ff:b1:74:fe:a9:36:0d:7f:2e:fa:bc:c1:33:
9e:d5:b8:1c:e5:34:aa:79:84:9d:8e:a2:a0:62:d7:3d:05:42:
a1:ad:46:49:0a:47:64:dc:61:b2:d6:2a:0d:7a:c0:c9:4e:1e:
64:97:ae:17:ad:29:2d:07:af:bd:ed:40:41:ff:99:d4:9d:c5:
50:9c:1e:69:e2:e7:24:a1:2f:b4:52:25:2a:29:5f:82:6e:df:
71:03:cc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbkaQiEXqjvIG5fVNTAzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh
MDNhYjkwHhcNMjYwNjEzMTAwMTUyWhcNMjYwNjE0MTAwMTUyWjAzMTEwLwYDVQQD
EyhlODMyMjMzYzMyMWY1MDFjNzNkYTBiNjBiNWU5ZDFlNzBjNDM5MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/i64r2nbj9KG1QRae+xnBmeurJn
vjJDTEsVIZCaD6cIWf89PQFJRJH9BPhj3jvgnOvDey3UGENx4JFyitzxbMZd7nuY
tYu2Jkhn6jfNaDV91iPYSn9JGOWaa8pbLt7nUa5K32c6fsEpqDbTd9mYjxGB94SI
Iib84MV733Wfy4K5tof0Mrd4dqnb2bm3pm4qgtmWZcfhVW1c5nxKgGu+dIPt6a8v
GrfsirfiDJO4NoB8j03Bn4za/BHWLLsUL5E5967cdqHXlfdSGfrCnNS/a4nMpdu9
FNNjhYgPRYrNdymhcM4iKipxhmPDHNAiq1zSbnmhBnP665qHsc9P2oHK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgyIzwyH1Acc9oLYLXp0ecMQ5JlMB8GA1UdIwQY
MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt
MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh
LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWTv2UNN
d0c/yM22Ro72VDewgUEDGUNpFe4U3Wg+hSKp3eVTCqPJuBnosks1Bk5p4UVaRxc0
Phf8/HzjmmDO9qc0hUd8MHa6CZ5FFboyRGvf8TI5VFiiFc1ejyvzBkTKUuo3h6cN
toJhy58DoyNH/kkTnn/dGdnygcZQR6npBtl0OGnsGaO+D8hWr8gNiRHtxIy/XenH
sFj1gUsIi/x7TBkf0N/so43/sXT+qTYNfy76vMEzntW4HOU0qnmEnY6ioGLXPQVC
oa1GSQpHZNxhstYqDXrAyU4eZJeuF60pLQevve1AQf+Z1J3FUJweaeLnJKEvtFIl
Kilfgm7fcQPMUw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:25 2026 by rpki-client