Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: xkiiYzmtkVZGcD/ibXv9maEpJ3ZUPyuFVEAZgo0j4aE=
Subject key identifier: EE:3B:C8:5E:3F:65:74:2F:89:63:FA:48:47:C4:02:93:5C:A3:BE:DA
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 01A1C631C7AD90A2F46B2B010C2D6750B003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 180E
Signing time: Tue 10 Nov 2026 16:01:53 +0000
Manifest this update: Tue 10 Nov 2026 16:01:53 +0000
Manifest next update: Wed 11 Nov 2026 16:01:53 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: /Ypv0xjfCtbJfESYBDiZTD0h3Gzc1s++PBMNgn24ovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:c7:ad:90:a2:f4:6b:2b:01:0c:2d:67:50:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Nov 10 16:01:53 2026 GMT
Not After : Nov 11 16:01:53 2026 GMT
Subject: CN=ee3bc85e3f65742f8963fa4847c402935ca3beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:99:4c:9b:72:34:5b:f2:8a:25:e5:03:a5:
8e:d8:7d:86:c5:56:4d:d2:7f:8c:bb:ec:19:a8:de:
3c:30:20:c5:97:3f:c7:b9:90:cf:d6:fa:de:9a:0b:
ed:5b:6e:3a:28:bb:25:c3:e9:06:d9:0f:5e:b4:39:
1d:ef:f4:db:a0:21:6f:f1:fb:f0:dc:d4:14:19:cc:
38:e8:dc:b4:33:9e:f7:b7:45:43:c0:b9:4d:46:48:
f7:d7:d1:fa:01:84:54:f4:5c:17:f2:b1:e2:3e:13:
d2:90:92:4f:b0:04:a8:3e:75:ab:38:6c:38:ea:51:
46:39:b9:15:af:d0:cb:5c:b3:5b:06:65:c4:6b:5f:
73:6d:d1:87:5d:6d:b3:ca:fa:c1:24:84:88:24:64:
52:0a:8b:03:69:de:33:e5:d6:26:51:e6:1e:89:1b:
94:a7:b3:ba:5d:cc:03:d9:12:e0:ff:42:08:49:7b:
6f:a1:ba:72:95:9d:5b:b7:de:b6:bf:4d:49:3d:ed:
42:80:fb:66:36:4c:05:70:55:46:d5:8b:f4:6d:cb:
10:a0:32:fa:a8:a1:90:58:21:e9:9d:2d:54:f0:e7:
6f:ec:9b:3b:fa:c3:27:62:ee:ef:b0:8a:57:c9:fe:
b6:90:32:6c:62:12:bf:93:e0:29:dc:0f:98:4c:38:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:C8:5E:3F:65:74:2F:89:63:FA:48:47:C4:02:93:5C:A3:BE:DA
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:17:6f:bb:4a:20:b1:b5:e0:86:fb:48:4b:07:ea:58:c1:
dd:7e:28:ea:8a:86:da:58:aa:d0:a9:47:30:20:31:b6:73:fa:
de:3e:6c:9e:fa:d8:1b:63:5b:cb:c2:37:56:2a:5e:26:72:2e:
bf:c0:87:2c:7f:68:84:67:7d:e0:8a:df:f4:8b:19:90:7a:8f:
0f:06:7a:02:b7:2b:44:30:b5:7c:33:3c:e5:c9:da:b6:5c:eb:
4e:c1:d1:d0:06:67:41:33:53:8e:3a:2a:9b:83:55:b6:de:99:
6b:9b:1f:4d:17:c8:88:83:4d:6d:a5:60:1f:b6:fc:cf:17:38:
52:f7:35:d4:64:9b:c7:40:11:97:fd:01:6f:36:2d:8e:81:04:
30:d9:99:7d:89:b8:a8:80:49:8b:13:db:8d:76:64:e9:20:72:
f4:8c:9f:82:b4:64:f0:1f:b5:26:9b:a7:f3:e9:ba:6b:29:85:
af:00:c2:91:98:85:10:7e:66:ff:e3:5c:7a:1b:bb:d6:0b:2e:
3a:01:2f:3e:75:14:28:23:9a:c9:af:03:80:75:21:0a:9b:52:
d5:86:89:8c:60:71:46:bd:b5:81:42:7f:df:1f:32:2c:f8:dd:
74:9c:bb:44:e0:8c:1e:51:e1:1b:63:2e:39:e9:55:75:c2:3b:
29:35:69:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHGMcetkKL0aysBDC1nULADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj
YzUzOWQwHhcNMjYxMTEwMTYwMTUzWhcNMjYxMTExMTYwMTUzWjAzMTEwLwYDVQQD
EyhlZTNiYzg1ZTNmNjU3NDJmODk2M2ZhNDg0N2M0MDI5MzVjYTNiZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF6ZTJtyNFvyiiXlA6WO2H2GxVZN
0n+Mu+wZqN48MCDFlz/HuZDP1vremgvtW246KLslw+kG2Q9etDkd7/TboCFv8fvw
3NQUGcw46Ny0M573t0VDwLlNRkj319H6AYRU9FwX8rHiPhPSkJJPsASoPnWrOGw4
6lFGObkVr9DLXLNbBmXEa19zbdGHXW2zyvrBJISIJGRSCosDad4z5dYmUeYeiRuU
p7O6XcwD2RLg/0IISXtvobpylZ1bt962v01JPe1CgPtmNkwFcFVG1Yv0bcsQoDL6
qKGQWCHpnS1U8Odv7Js7+sMnYu7vsIpXyf62kDJsYhK/k+Ap3A+YTDjX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO47yF4/ZXQviWP6SEfEApNco77aMB8GA1UdIwQY
MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt
ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm
LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAem4Xb7tK
ILG14Ib7SEsH6ljB3X4o6oqG2liq0KlHMCAxtnP63j5snvrYG2Nby8I3VipeJnIu
v8CHLH9ohGd94Irf9IsZkHqPDwZ6ArcrRDC1fDM85cnatlzrTsHR0AZnQTNTjjoq
m4NVtt6Za5sfTRfIiINNbaVgH7b8zxc4Uvc11GSbx0ARl/0BbzYtjoEEMNmZfYm4
qIBJixPbjXZk6SBy9IyfgrRk8B+1Jpun8+m6aymFrwDCkZiFEH5m/+Ncehu71gsu
OgEvPnUUKCOaya8DgHUhCptS1YaJjGBxRr21gUJ/3x8yLPjddJy7ROCMHlHhG2Mu
OelVdcI7KTVpPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 19:38:47 2026 by rpki-client