Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: 65vkPyt49uskVuYls8VJsSr6gji8sY351f5hGjDeZkE=
Subject key identifier: 21:8D:A2:96:D1:1B:31:0A:55:C6:04:4C:6B:02:15:5E:8D:48:AE:76
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 019FAABEF90E043768C588D1B03A288111F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0957
Signing time: Tue 28 Jul 2026 22:01:09 +0000
Manifest this update: Tue 28 Jul 2026 22:01:09 +0000
Manifest next update: Wed 29 Jul 2026 22:01:09 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: okDamAkA3QsVoh2Ybt+AKvbesHOcqbKgWlfXECqb7ic=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:f9:0e:04:37:68:c5:88:d1:b0:3a:28:81:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Jul 28 22:01:09 2026 GMT
Not After : Jul 29 22:01:09 2026 GMT
Subject: CN=218da296d11b310a55c6044c6b02155e8d48ae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:de:d0:9a:d0:f3:51:e4:d3:f4:ca:f3:9d:
87:a1:f0:84:a9:40:07:f9:1c:66:ab:e5:06:22:4c:
db:83:c6:16:27:8b:e0:4b:fd:c0:a2:6d:55:8c:eb:
f6:7e:a6:37:77:3e:39:a6:99:02:1c:2c:c1:59:a4:
f7:db:3c:e1:3c:7b:a4:18:94:25:23:0f:56:43:81:
46:92:42:37:90:5a:4c:63:3f:58:ca:fd:f7:de:1a:
6f:37:c1:16:21:d3:39:d0:77:ce:c9:4e:87:a8:6d:
dc:08:c8:6e:ed:1f:76:01:30:74:74:4f:f4:43:71:
c8:84:1a:4c:28:13:1f:b5:8b:d8:3b:c8:e4:ef:ce:
cd:c5:24:a7:6c:be:42:2b:66:95:69:cd:80:56:60:
0a:0f:b0:27:4c:fb:2b:e9:8b:a5:02:67:85:f8:ae:
ed:90:fb:36:5f:6e:63:6e:15:1f:36:57:c2:2f:d6:
06:ff:14:59:10:e3:31:5d:c5:f9:b3:c0:47:bf:14:
92:d2:90:ca:7c:df:c7:8c:bf:14:d6:3e:55:66:fe:
7a:ac:ef:00:e9:1e:3e:3d:b3:d5:fc:1b:67:0c:2a:
83:a9:9a:ae:b2:08:58:7e:2f:e2:f5:09:be:01:60:
e6:c8:d7:a5:49:a7:c5:ad:0f:d5:a6:52:8c:b1:2a:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:A2:96:D1:1B:31:0A:55:C6:04:4C:6B:02:15:5E:8D:48:AE:76
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:c6:c2:3c:05:63:bd:c2:7e:09:c7:a8:49:c5:7d:d9:32:
68:d3:3d:96:95:37:b0:eb:5b:f8:04:ff:a2:96:33:0f:73:bf:
1c:c4:99:87:b6:89:5b:0a:f4:a2:0d:dc:05:7a:f8:17:3b:0c:
45:a7:2e:78:2c:3e:5e:03:d1:7d:bc:f3:71:9e:a8:cc:ee:61:
7c:5c:02:ba:1c:90:4f:5d:cd:40:2e:57:f8:1d:07:6a:8f:f0:
90:88:26:ff:e6:41:32:99:d2:b8:ad:de:f6:a6:88:23:32:4b:
96:c4:90:ae:27:5a:2d:f0:e4:d7:6e:09:ee:13:3d:5e:77:89:
8e:08:f3:02:01:43:3f:fd:36:ff:bc:4a:97:8f:b3:4d:61:e5:
fd:65:13:bc:1e:6d:6a:1d:20:68:a9:af:0c:15:10:ec:90:a1:
d4:78:b2:39:52:fe:81:71:0d:fe:1a:8c:3d:b8:bb:e7:a8:ca:
a2:fd:7d:15:aa:0f:5a:ba:26:15:e5:f8:e9:c9:ee:87:7e:1b:
e8:8e:43:9c:e0:06:55:37:09:46:40:78:9f:fd:32:08:8f:f4:
78:f6:50:bc:7a:ef:96:cc:47:4a:d6:72:b0:c8:59:bd:19:a3:
89:de:3e:d9:27:3b:58:a4:46:e4:77:2c:04:da:f1:c8:56:72:
35:04:7d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvvkOBDdoxYjRsDoogRHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWRkNTM5NTI1YTM5ZDg0NzAxNGU4ZmVhM2M2NDFkOTcz
Y2M4NjYwHhcNMjYwNzI4MjIwMTA5WhcNMjYwNzI5MjIwMTA5WjAzMTEwLwYDVQQD
EygyMThkYTI5NmQxMWIzMTBhNTVjNjA0NGM2YjAyMTU1ZThkNDhhZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuere0JrQ81Hk0/TK852HofCEqUAH
+Rxmq+UGIkzbg8YWJ4vgS/3Aom1VjOv2fqY3dz45ppkCHCzBWaT32zzhPHukGJQl
Iw9WQ4FGkkI3kFpMYz9Yyv333hpvN8EWIdM50HfOyU6HqG3cCMhu7R92ATB0dE/0
Q3HIhBpMKBMftYvYO8jk787NxSSnbL5CK2aVac2AVmAKD7AnTPsr6YulAmeF+K7t
kPs2X25jbhUfNlfCL9YG/xRZEOMxXcX5s8BHvxSS0pDKfN/HjL8U1j5VZv56rO8A
6R4+PbPV/BtnDCqDqZqusghYfi/i9Qm+AWDmyNelSafFrQ/VplKMsSqa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGNopbRGzEKVcYETGsCFV6NSK52MB8GA1UdIwQY
MBaAFA4d1TlSWjnYRwFOj+o8ZB2XPMhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAt
OTI5ODkzMDgxODY2LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAtOTI5ODkzMDgxODY2
LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkHGwjwF
Y73CfgnHqEnFfdkyaNM9lpU3sOtb+AT/opYzD3O/HMSZh7aJWwr0og3cBXr4FzsM
RacueCw+XgPRfbzzcZ6ozO5hfFwCuhyQT13NQC5X+B0Hao/wkIgm/+ZBMpnSuK3e
9qaIIzJLlsSQridaLfDk124J7hM9XneJjgjzAgFDP/02/7xKl4+zTWHl/WUTvB5t
ah0gaKmvDBUQ7JCh1HiyOVL+gXEN/hqMPbi756jKov19FaoPWromFeX46cnuh34b
6I5DnOAGVTcJRkB4n/0yCI/0ePZQvHrvlsxHStZysMhZvRmjid4+2Sc7WKRG5Hcs
BNrxyFZyNQR9ZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:25 2026 by rpki-client