Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier: k1PRHQuS3DLBazGtuh19xyXGioc6rCTLG0u6uEpgE7w=
Subject key identifier: E9:8E:99:6D:E1:1C:5E:82:47:CF:66:25:8E:C7:9B:5B:45:9B:C5:7A
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 019D9AE2F1E365133F22F8F3B48B862512D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number: 139E
Signing time: Fri 17 Apr 2026 10:00:57 +0000
Manifest this update: Fri 17 Apr 2026 10:00:57 +0000
Manifest next update: Sat 18 Apr 2026 10:00:57 +0000
Files and hashes: 1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: i7yptY5AO9lxDPNys4lPa4mtjccnWJV9cWivje0w04o=)
6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f1:e3:65:13:3f:22:f8:f3:b4:8b:86:25:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Apr 17 10:00:57 2026 GMT
Not After : Apr 18 10:00:57 2026 GMT
Subject: CN=e98e996de11c5e8247cf66258ec79b5b459bc57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:65:d1:d1:ed:f0:6d:8d:9c:9c:d0:c4:b3:
56:ad:4d:df:d3:b1:42:fe:59:df:e9:b6:bf:c4:a0:
54:d5:13:84:2a:b5:54:c3:a9:4b:85:aa:8e:8c:61:
32:37:e7:68:9a:f9:e5:86:b4:33:d1:eb:57:ca:d5:
ab:4a:e4:53:c5:c5:ec:dd:2a:0f:cc:58:d1:69:48:
27:5c:ba:a3:59:1d:cb:3f:0b:05:1f:a7:9f:4e:ef:
63:49:aa:35:06:4b:15:46:fe:c7:74:c6:34:bc:b4:
22:bd:dd:64:a8:e0:c9:d4:9f:b1:26:d9:91:94:af:
da:9d:75:cb:9e:dc:e2:8e:b5:57:87:c9:a2:f2:26:
9d:28:35:12:f5:44:41:07:58:32:e8:c5:8f:35:78:
a4:2f:a1:f4:b7:7e:6f:60:0f:26:51:e5:37:c5:cf:
4c:ad:3a:b0:a3:f5:4c:99:dd:10:56:ef:e4:c4:4a:
67:b3:28:17:f6:dc:45:0b:92:60:27:51:41:6f:b8:
1e:fc:48:9d:e5:df:4c:b0:1b:30:25:30:59:f9:e1:
53:95:ec:81:78:95:43:65:6f:86:bd:0b:51:87:36:
ea:1a:ca:2e:04:18:09:c4:a7:2c:b6:43:8d:05:98:
7f:f2:cd:6b:f9:a4:8d:05:85:8a:3b:57:28:bc:9b:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:99:6D:E1:1C:5E:82:47:CF:66:25:8E:C7:9B:5B:45:9B:C5:7A
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:c6:4d:7d:e5:43:ee:0d:2f:32:0d:4d:7f:ba:b8:15:f7:
eb:fd:04:38:fe:ae:f6:f8:f0:a6:68:f2:cc:84:66:81:d6:5c:
e5:4c:70:49:5c:9a:b8:83:95:03:ea:bc:a7:35:85:29:c9:64:
22:f8:c1:23:81:db:25:a5:a6:b8:40:da:5e:6f:9f:87:4a:39:
e7:08:ce:21:75:49:86:50:6d:52:dc:7d:c6:f9:7d:3f:e5:73:
31:e9:f9:24:49:80:b1:4e:9f:00:6d:db:94:e0:11:04:26:58:
fe:a6:71:21:ab:09:8f:f6:56:af:74:a1:9b:26:cf:1a:4a:ec:
47:85:6c:bf:aa:9c:cb:c2:0d:c2:da:d1:1a:35:ab:ce:79:92:
ae:1f:af:81:4a:fb:6a:aa:55:6f:17:9e:e2:25:21:5b:c6:06:
e0:ad:a4:26:54:ff:d5:43:49:53:db:b2:11:d1:26:90:54:b7:
8d:54:18:83:53:22:b8:0a:63:78:cb:1d:a4:69:19:68:43:34:
99:93:af:a5:32:9d:ac:dc:55:a8:b1:ae:7d:9d:5a:f7:81:fe:
e4:b8:1a:d8:ab:0f:dc:29:17:b1:69:a2:c1:00:83:a9:0e:1a:
0e:94:d7:a9:60:3c:eb:bb:14:21:ff:73:69:ad:01:b8:e9:a0:
b3:ee:99:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4vHjZRM/IvjztIuGJRLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk
ZDIxMmIwHhcNMjYwNDE3MTAwMDU3WhcNMjYwNDE4MTAwMDU3WjAzMTEwLwYDVQQD
EyhlOThlOTk2ZGUxMWM1ZTgyNDdjZjY2MjU4ZWM3OWI1YjQ1OWJjNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpBl0dHt8G2NnJzQxLNWrU3f07FC
/lnf6ba/xKBU1ROEKrVUw6lLhaqOjGEyN+domvnlhrQz0etXytWrSuRTxcXs3SoP
zFjRaUgnXLqjWR3LPwsFH6efTu9jSao1BksVRv7HdMY0vLQivd1kqODJ1J+xJtmR
lK/anXXLntzijrVXh8mi8iadKDUS9URBB1gy6MWPNXikL6H0t35vYA8mUeU3xc9M
rTqwo/VMmd0QVu/kxEpnsygX9txFC5JgJ1FBb7ge/Eid5d9MsBswJTBZ+eFTleyB
eJVDZW+GvQtRhzbqGsouBBgJxKcstkONBZh/8s1r+aSNBYWKO1covJvC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmOmW3hHF6CR89mJY7Hm1tFm8V6MB8GA1UdIwQY
MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt
YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi
LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA/GTX3l
Q+4NLzINTX+6uBX36/0EOP6u9vjwpmjyzIRmgdZc5UxwSVyauIOVA+q8pzWFKclk
IvjBI4HbJaWmuEDaXm+fh0o55wjOIXVJhlBtUtx9xvl9P+VzMen5JEmAsU6fAG3b
lOARBCZY/qZxIasJj/ZWr3ShmybPGkrsR4Vsv6qcy8INwtrRGjWrznmSrh+vgUr7
aqpVbxee4iUhW8YG4K2kJlT/1UNJU9uyEdEmkFS3jVQYg1MiuApjeMsdpGkZaEM0
mZOvpTKdrNxVqLGufZ1a94H+5Lga2KsP3CkXsWmiwQCDqQ4aDpTXqWA867sUIf9z
aa0BuOmgs+6Z8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:34 2026 by rpki-client