Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File: DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier: j81UiGinjJlbmf+PGoXMtzRA9FA1+oAFVtaD9eXc71E=
Subject key identifier: B4:A3:63:AD:32:2E:C6:BA:03:DB:9A:E1:56:21:C6:B6:A6:53:76:FE
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer: /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial: 01A1E05FADCDCAE7CC271E3C9DFCE0426A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:02:09 +0000
Manifest this update: Sun 15 Nov 2026 18:02:09 +0000
Manifest next update: Mon 16 Nov 2026 18:02:09 +0000
Files and hashes: 1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: 8CmvmpJ/5hmOB/P4lhb4YiPn74dU55CdQ5jU9fwi7Lo=)
3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:ad:cd:ca:e7:cc:27:1e:3c:9d:fc:e0:42:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Validity
Not Before: Nov 15 18:02:09 2026 GMT
Not After : Nov 16 18:02:09 2026 GMT
Subject: CN=b4a363ad322ec6ba03db9ae15621c6b6a65376fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:5d:f8:0c:9b:c8:29:28:1d:d2:fa:8f:a3:
40:8d:fd:3b:c0:8b:9e:b2:c1:70:18:91:8c:d3:68:
87:2a:b9:6e:9f:f1:90:0b:c3:d4:36:cc:95:5e:b7:
28:15:c4:21:b3:c6:21:cc:a2:0b:e3:f6:cc:ee:fa:
41:12:b0:fc:87:e3:61:0a:f4:7b:50:fa:fe:93:0e:
f5:78:36:57:3e:ec:e3:96:67:3f:fe:bc:4b:65:69:
37:53:94:9c:00:16:47:f3:2f:2d:d9:da:02:86:e6:
29:79:b4:c4:66:ea:34:84:4b:4c:cd:c8:f8:cf:7c:
2b:bb:4d:67:01:56:a0:0c:ee:3e:a1:70:16:0c:41:
36:5e:55:61:00:70:a7:37:d3:bd:9f:c9:2c:3a:ce:
40:66:4f:35:3b:75:6a:61:b2:63:87:82:4f:d6:ca:
78:ca:1d:d7:8d:b7:ba:fe:f6:3f:66:f7:fa:7f:09:
81:4c:21:d6:29:41:a5:b5:fb:67:ed:c9:8e:f0:62:
7a:99:4d:a9:df:55:e6:d5:97:7c:5f:d9:01:15:34:
f7:95:e6:8c:9e:c3:89:26:a7:1b:ff:a5:74:7a:a9:
a8:c1:88:88:dd:ec:dd:ba:b9:ab:37:23:0e:d7:df:
83:7b:80:ca:59:cf:cf:10:25:bc:46:ea:eb:b0:d5:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:63:AD:32:2E:C6:BA:03:DB:9A:E1:56:21:C6:B6:A6:53:76:FE
X509v3 Authority Key Identifier:
keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:0d:ce:67:67:78:61:1c:9f:99:1b:3f:3b:75:2f:6d:3e:
e1:ea:5b:36:c0:0e:ba:b2:8f:2b:df:e2:f6:f4:eb:d2:57:fb:
64:d4:4e:4d:d6:f7:56:ed:b9:8e:24:31:c9:ec:cb:0d:c0:cc:
07:88:01:f1:28:78:14:38:a2:e4:d6:ca:a8:6b:11:d1:e2:b7:
1f:87:b5:f7:38:87:c7:7f:e7:50:9f:86:56:e3:41:cf:16:01:
3b:9d:ed:7d:d8:75:51:26:4c:4a:42:f4:1b:2c:67:f7:c0:f1:
78:61:5c:05:2b:75:cb:84:83:c0:88:f6:50:fa:9c:f3:55:01:
59:6f:f4:a9:83:a4:13:5f:c2:19:fe:95:01:48:69:f4:f4:41:
1c:d7:56:9f:b8:6e:76:67:ba:f6:d1:b7:f7:fc:36:77:0c:7f:
a3:0b:6d:0e:62:24:92:8d:34:c3:97:9d:a5:05:58:a8:a5:74:
d5:2a:86:bf:7d:ac:9a:ea:c1:9e:4c:18:7e:31:5e:fe:59:71:
4e:4d:7b:e9:61:d7:5c:dc:5d:93:a3:a8:00:19:61:58:0b:a5:
80:14:3e:b6:9a:74:8f:f5:ea:01:cf:c2:59:2c:5d:39:3d:6e:
80:af:d3:d4:f0:0c:40:14:cf:ee:9c:b6:1c:b4:b0:88:a4:cb:
dd:35:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:40 2026 by rpki-client