Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: 7BDnMBIPaGOcJ1+KIbxxUy2gZUn7TytwobQJGtF49wM=
Subject key identifier: 8E:CC:30:C2:6D:CD:40:D1:26:02:1C:92:14:B3:47:44:D9:15:97:E9
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019D9850466B1AE5125E9F011697039E38A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 15E4
Signing time: Thu 16 Apr 2026 22:01:30 +0000
Manifest this update: Thu 16 Apr 2026 22:01:30 +0000
Manifest next update: Fri 17 Apr 2026 22:01:30 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: GPUrOJYkQD+PJgkcBYXklLNfBcPW+ksjd3TYfQ+qf5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:46:6b:1a:e5:12:5e:9f:01:16:97:03:9e:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Apr 16 22:01:30 2026 GMT
Not After : Apr 17 22:01:30 2026 GMT
Subject: CN=8ecc30c26dcd40d126021c9214b34744d91597e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:31:5a:03:87:e5:d6:ed:8f:b5:32:f3:73:
95:55:65:03:11:c2:00:27:75:7a:73:60:c8:71:be:
82:ab:61:8f:3c:85:f0:00:c4:81:5e:5e:bb:0e:40:
13:a9:38:34:08:be:47:25:7a:09:e0:e1:5c:c3:65:
fb:91:eb:2d:2d:bc:08:ba:6d:41:f0:7d:fd:80:6a:
96:3d:b8:d2:7e:b8:63:14:79:33:08:1a:4e:42:97:
b4:54:7c:e6:af:4c:d1:64:6c:81:88:5d:d5:78:db:
c2:2f:50:ab:d6:aa:da:c5:84:d6:fd:f9:75:41:0e:
c9:e4:18:ef:bd:00:df:71:b9:76:4e:77:bd:d1:b2:
a8:00:a8:6c:6b:4b:0f:80:ad:80:e2:ce:8e:59:ed:
78:47:ae:6b:a5:59:07:e9:cb:49:bb:24:43:9f:e5:
46:bf:25:6e:09:29:d1:6a:1b:2a:74:0f:c8:14:5e:
ae:cb:2e:35:2a:36:7c:1f:b2:0f:c3:04:43:5a:a8:
04:c4:18:be:ce:4b:76:d6:6e:c4:51:ed:67:ca:a4:
18:33:de:08:c6:19:41:ff:09:e8:76:3f:ee:39:24:
f6:30:98:36:bd:4d:e2:6a:d5:1d:c1:59:c2:2b:ed:
b7:3f:f5:ab:30:69:57:5c:ab:67:21:04:ee:df:a8:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:30:C2:6D:CD:40:D1:26:02:1C:92:14:B3:47:44:D9:15:97:E9
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:84:8d:a2:bc:74:d1:dd:96:63:e0:70:ed:24:ea:f7:0d:7e:
f8:03:4c:86:80:98:14:71:7a:ed:c4:9a:fe:de:87:9d:7a:9c:
2c:f6:16:fb:35:ff:d9:37:07:cd:01:7e:a3:31:ad:52:d4:99:
fb:fe:65:3c:32:d9:29:5f:6b:02:80:c6:4b:8a:4f:cd:69:2c:
c0:74:c0:0c:6a:63:dc:ad:d5:ff:7e:85:c3:72:75:27:dd:ec:
ef:b5:3d:e7:c0:55:7c:0a:fc:4c:29:fb:a9:ff:04:1e:06:52:
0d:b1:ac:c7:17:54:44:73:bd:2f:f4:37:70:57:3a:ac:8f:62:
b1:5e:8b:3a:f5:7c:e3:f3:da:d3:fb:b8:73:0f:91:28:52:2f:
a6:17:2c:9a:90:63:05:33:2d:fc:15:08:fe:56:85:ab:48:63:
62:74:1a:dc:ce:48:ad:43:ad:88:22:cd:6a:eb:1d:31:8d:7c:
0c:c7:12:99:54:45:07:4c:ac:d0:03:db:5e:c1:b8:98:65:46:
8b:e3:32:65:66:06:05:54:b2:ac:ee:2e:55:74:e1:d6:49:c1:
8b:1f:e8:4f:75:4e:9a:a2:eb:86:f9:46:78:61:ca:8c:4d:90:
0b:29:86:75:b3:f6:9c:39:34:63:12:94:e3:8e:e9:b1:8d:ac:
76:29:79:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEZrGuUSXp8BFpcDnjinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj
YzUzOWQwHhcNMjYwNDE2MjIwMTMwWhcNMjYwNDE3MjIwMTMwWjAzMTEwLwYDVQQD
Eyg4ZWNjMzBjMjZkY2Q0MGQxMjYwMjFjOTIxNGIzNDc0NGQ5MTU5N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ukxWgOH5dbtj7Uy83OVVWUDEcIA
J3V6c2DIcb6Cq2GPPIXwAMSBXl67DkATqTg0CL5HJXoJ4OFcw2X7kestLbwIum1B
8H39gGqWPbjSfrhjFHkzCBpOQpe0VHzmr0zRZGyBiF3VeNvCL1Cr1qraxYTW/fl1
QQ7J5BjvvQDfcbl2Tne90bKoAKhsa0sPgK2A4s6OWe14R65rpVkH6ctJuyRDn+VG
vyVuCSnRahsqdA/IFF6uyy41KjZ8H7IPwwRDWqgExBi+zkt21m7EUe1nyqQYM94I
xhlB/wnodj/uOST2MJg2vU3iatUdwVnCK+23P/WrMGlXXKtnIQTu36g7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7MMMJtzUDRJgIckhSzR0TZFZfpMB8GA1UdIwQY
MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt
ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm
LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnISNorx0
0d2WY+Bw7STq9w1++ANMhoCYFHF67cSa/t6HnXqcLPYW+zX/2TcHzQF+ozGtUtSZ
+/5lPDLZKV9rAoDGS4pPzWkswHTADGpj3K3V/36Fw3J1J93s77U958BVfAr8TCn7
qf8EHgZSDbGsxxdURHO9L/Q3cFc6rI9isV6LOvV84/Pa0/u4cw+RKFIvphcsmpBj
BTMt/BUI/laFq0hjYnQa3M5IrUOtiCLNausdMY18DMcSmVRFB0ys0APbXsG4mGVG
i+MyZWYGBVSyrO4uVXTh1knBix/oT3VOmqLrhvlGeGHKjE2QCymGdbP2nDk0YxKU
447psY2sdil5lQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:55 2026 by rpki-client