Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: mYYZgWT916LBljY04ppgAZtHuateKWnPMyxUaaVEpkI=
Subject key identifier: F9:2F:7E:CE:4E:83:08:27:9B:B0:A4:1D:A8:E6:8A:AF:0C:EF:F1:17
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019D99994896810E33BEF4D166217EA5F6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 17B3
Signing time: Fri 17 Apr 2026 04:00:52 +0000
Manifest this update: Fri 17 Apr 2026 04:00:52 +0000
Manifest next update: Sat 18 Apr 2026 04:00:52 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: J5WjN8kBm+Ey6rLJWRz0+O+95+fXVhUz5DOMrK63vhI=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:48:96:81:0e:33:be:f4:d1:66:21:7e:a5:f6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Apr 17 04:00:52 2026 GMT
Not After : Apr 18 04:00:52 2026 GMT
Subject: CN=f92f7ece4e8308279bb0a41da8e68aaf0ceff117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:3b:a4:96:50:03:1b:4d:7f:f7:ea:f0:d3:
65:fb:ac:73:e5:54:20:38:30:7d:8b:34:68:e4:1d:
e5:2c:4f:fb:2e:7c:fb:b1:6e:aa:b6:99:28:0d:ef:
78:be:0c:27:90:8e:23:bd:4d:c8:97:83:6c:8c:2c:
71:b8:cd:8c:a7:8d:2c:23:40:ee:2a:a7:96:3f:d8:
de:6e:cc:32:2d:ce:bd:94:57:1c:15:d4:03:db:35:
5f:0e:b2:d9:c5:e6:fa:92:99:5b:cd:1c:0b:83:a5:
da:1a:d8:51:95:c6:6c:7b:5d:74:0b:18:b1:60:03:
1d:83:a3:4e:61:d2:f7:05:b7:97:74:0a:5e:8a:e1:
bd:a4:87:01:1f:0c:12:e5:54:03:fd:88:43:ec:e8:
49:fd:36:b4:7e:f9:69:37:fe:a5:95:eb:c2:5d:a5:
e9:a5:24:4b:41:25:80:5d:d8:20:0b:c8:25:ac:7f:
78:ca:68:b4:65:a9:fc:5a:db:c9:5b:33:15:3b:ad:
f5:fb:c5:a1:68:e4:d0:25:7c:d5:8b:a3:1f:40:91:
f8:69:28:62:92:cb:98:25:98:50:a0:d1:55:72:bf:
68:3f:b5:b8:5c:aa:f9:68:00:6b:34:3a:c7:2e:d1:
21:ca:e2:d4:16:57:b4:e7:c4:4d:37:49:e6:d6:dc:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:7E:CE:4E:83:08:27:9B:B0:A4:1D:A8:E6:8A:AF:0C:EF:F1:17
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:a4:03:37:73:b5:45:71:35:4d:4a:fd:b4:0c:c8:70:a6:
5a:39:ab:93:f2:4d:9b:ee:d2:6d:d9:64:1c:e2:9a:25:c8:49:
d3:19:af:71:cd:4b:79:c1:d2:3b:9c:c9:43:17:e7:74:e2:85:
ef:c2:bf:0a:d0:be:96:31:f0:89:c4:43:bc:f6:43:39:4e:54:
24:96:55:f9:cf:63:7f:a2:b8:d2:86:1c:94:39:45:07:00:fd:
f5:cd:6a:f7:c5:a2:a1:f7:40:89:a1:ac:0d:c4:5e:1e:28:5f:
7c:86:26:56:bc:97:20:47:3a:84:d5:1d:1f:b3:cc:4a:48:60:
ca:b9:b8:1a:f6:34:a3:5c:34:81:f2:49:d4:74:43:b8:a2:53:
24:0e:5c:82:e8:a3:a3:c5:dd:41:3f:99:e3:e4:90:f3:c4:59:
d7:6a:c8:d9:08:ba:19:c6:55:b3:17:53:01:73:e6:8d:4a:93:
2e:76:4b:3e:9e:fb:fe:43:bd:5b:c6:04:1f:5d:01:30:9c:41:
4f:fe:fc:4e:50:ad:16:63:d6:52:c0:30:9b:bc:a6:c6:94:90:
54:4c:84:bd:53:68:1a:cf:e9:33:9b:43:c9:39:31:5d:e3:d0:
a6:cd:66:31:cc:d0:7e:f3:bd:89:2b:58:e5:ae:f7:13:cc:99:
dc:0e:6e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUiWgQ4zvvTRZiF+pfb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjYwNDE3MDQwMDUyWhcNMjYwNDE4MDQwMDUyWjAzMTEwLwYDVQQD
EyhmOTJmN2VjZTRlODMwODI3OWJiMGE0MWRhOGU2OGFhZjBjZWZmMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw87pJZQAxtNf/fq8NNl+6xz5VQg
ODB9izRo5B3lLE/7Lnz7sW6qtpkoDe94vgwnkI4jvU3Il4NsjCxxuM2Mp40sI0Du
KqeWP9jebswyLc69lFccFdQD2zVfDrLZxeb6kplbzRwLg6XaGthRlcZse110Cxix
YAMdg6NOYdL3BbeXdApeiuG9pIcBHwwS5VQD/YhD7OhJ/Ta0fvlpN/6llevCXaXp
pSRLQSWAXdggC8glrH94ymi0Zan8WtvJWzMVO631+8WhaOTQJXzVi6MfQJH4aShi
ksuYJZhQoNFVcr9oP7W4XKr5aABrNDrHLtEhyuLUFle058RNN0nm1tz/4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkvfs5Ogwgnm7CkHajmiq8M7/EXMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz6kAzdz
tUVxNU1K/bQMyHCmWjmrk/JNm+7SbdlkHOKaJchJ0xmvcc1LecHSO5zJQxfndOKF
78K/CtC+ljHwicRDvPZDOU5UJJZV+c9jf6K40oYclDlFBwD99c1q98WiofdAiaGs
DcReHihffIYmVryXIEc6hNUdH7PMSkhgyrm4GvY0o1w0gfJJ1HRDuKJTJA5cguij
o8XdQT+Z4+SQ88RZ12rI2Qi6GcZVsxdTAXPmjUqTLnZLPp77/kO9W8YEH10BMJxB
T/78TlCtFmPWUsAwm7ymxpSQVEyEvVNoGs/pM5tDyTkxXePQps1mMczQfvO9iStY
5a73E8yZ3A5uqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:40 2026 by rpki-client