Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: tuCAYh6aDNDa7eC5+WOnqZIHpMOKBfx8NtY16FxjH7k=
Subject key identifier: 3D:F5:2C:1F:D4:DD:64:27:E6:C0:9D:28:06:9D:6C:D2:A1:DD:55:D4
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019DA2D3673BA14DD5F39CC836D3A40CA476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 0712
Signing time: Sat 18 Apr 2026 23:00:56 +0000
Manifest this update: Sat 18 Apr 2026 23:00:56 +0000
Manifest next update: Sun 19 Apr 2026 23:00:56 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: daZcLa2laX0ld78IQbIH8ECZ+Af40EfANqisGRIKWJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:67:3b:a1:4d:d5:f3:9c:c8:36:d3:a4:0c:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Apr 18 23:00:56 2026 GMT
Not After : Apr 19 23:00:56 2026 GMT
Subject: CN=3df52c1fd4dd6427e6c09d28069d6cd2a1dd55d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:7f:5d:94:5a:be:68:10:56:5f:82:66:81:
3f:1a:ae:cf:f4:cb:98:60:3f:69:ba:73:99:74:7c:
2c:2e:af:b3:a8:d9:8a:83:be:29:c4:50:69:11:d5:
2c:5c:2d:b6:7b:66:3e:94:a9:cb:42:8d:e7:62:4e:
88:97:cb:3e:60:51:4f:88:04:2c:a5:57:e9:7f:29:
56:90:03:af:a4:5b:25:71:90:3f:57:39:41:40:db:
0b:a1:d3:d7:9a:d9:af:52:2f:9a:06:c0:66:2d:23:
fe:a2:a5:cb:6b:c7:f2:2a:e7:40:39:10:28:7d:38:
e4:36:03:8a:d8:e0:38:28:6e:c6:91:a8:a5:d2:01:
b5:e5:5d:e5:0e:22:9e:25:3e:55:61:88:de:76:ae:
86:f6:92:33:6c:4c:16:46:98:81:77:f3:f6:da:aa:
0c:cd:c2:ea:1b:3f:12:19:4a:09:8d:12:7b:62:6f:
db:a0:bc:60:72:3e:6c:61:bc:f3:76:05:b4:2c:99:
b7:dc:09:44:37:dc:0c:a4:bb:3a:e3:fa:3e:46:70:
b0:79:cc:59:6e:86:18:14:a8:3c:f1:92:4b:9b:47:
7c:ea:9b:32:84:04:bd:13:c2:69:d8:22:c8:08:97:
ed:48:bf:f3:98:17:e0:1e:70:b5:5c:ba:43:b4:d6:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:2C:1F:D4:DD:64:27:E6:C0:9D:28:06:9D:6C:D2:A1:DD:55:D4
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9d:7a:62:43:cd:45:8e:97:3b:2a:1d:df:04:af:23:6b:67:
9d:3f:ce:d3:26:e7:0d:c2:44:34:27:16:96:d7:01:6e:36:86:
47:bf:78:40:f5:ed:05:d7:8b:20:47:38:a7:5a:a5:64:5a:3a:
4a:d6:82:6d:fb:5f:5c:dd:61:3d:f8:d6:a4:7c:46:b3:b5:63:
26:f9:8a:fd:de:c7:56:e2:32:fb:48:a5:2b:c3:cd:a3:d1:a1:
e0:1e:bf:52:45:be:87:5c:88:0a:92:9b:e6:4b:b1:75:a8:f9:
ed:fe:fb:11:95:c7:f6:09:76:85:f1:53:b7:6c:47:cc:9f:8a:
d9:8f:40:aa:bc:ad:7b:1b:89:0b:3f:2d:44:3c:72:eb:03:4f:
96:14:c3:a6:61:70:b6:7a:20:14:e7:c7:8f:11:4a:6f:04:0d:
9d:78:d8:44:5e:94:0f:4f:35:35:05:cd:4e:91:24:eb:2d:52:
8a:88:8e:0f:94:3d:e7:e1:87:cf:5f:30:d9:37:87:69:89:76:
55:74:b8:3b:56:a6:ea:b8:da:47:a8:97:6a:e2:bf:9f:24:b3:
de:b2:17:a3:a5:e0:f0:a7:94:8b:d2:4c:ac:22:9c:38:cd:5d:
21:5a:96:58:f7:61:a3:36:7c:35:ac:93:1d:3e:a5:00:41:b6:
4a:a9:e7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i02c7oU3V85zINtOkDKR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NDEzNTg0NzAzMjE1NjRhZGI0MmE3NmQ3NzNhZTNjYWU3
YmJkNTYwHhcNMjYwNDE4MjMwMDU2WhcNMjYwNDE5MjMwMDU2WjAzMTEwLwYDVQQD
EygzZGY1MmMxZmQ0ZGQ2NDI3ZTZjMDlkMjgwNjlkNmNkMmExZGQ1NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUx/XZRavmgQVl+CZoE/Gq7P9MuY
YD9punOZdHwsLq+zqNmKg74pxFBpEdUsXC22e2Y+lKnLQo3nYk6Il8s+YFFPiAQs
pVfpfylWkAOvpFslcZA/VzlBQNsLodPXmtmvUi+aBsBmLSP+oqXLa8fyKudAORAo
fTjkNgOK2OA4KG7Gkail0gG15V3lDiKeJT5VYYjedq6G9pIzbEwWRpiBd/P22qoM
zcLqGz8SGUoJjRJ7Ym/boLxgcj5sYbzzdgW0LJm33AlEN9wMpLs64/o+RnCwecxZ
boYYFKg88ZJLm0d86psyhAS9E8Jp2CLICJftSL/zmBfgHnC1XLpDtNYk1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD31LB/U3WQn5sCdKAadbNKh3VXUMB8GA1UdIwQY
MBaAFHVBNYRwMhVkrbQqdtdzrjyue71WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYt
ODI2NWE5NmU0MjBkLzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYtODI2NWE5NmU0MjBk
LzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ16YkPN
RY6XOyod3wSvI2tnnT/O0ybnDcJENCcWltcBbjaGR794QPXtBdeLIEc4p1qlZFo6
StaCbftfXN1hPfjWpHxGs7VjJvmK/d7HVuIy+0ilK8PNo9Gh4B6/UkW+h1yICpKb
5kuxdaj57f77EZXH9gl2hfFTt2xHzJ+K2Y9AqrytexuJCz8tRDxy6wNPlhTDpmFw
tnogFOfHjxFKbwQNnXjYRF6UD081NQXNTpEk6y1SioiOD5Q95+GHz18w2TeHaYl2
VXS4O1am6rjaR6iXauK/nySz3rIXo6Xg8KeUi9JMrCKcOM1dIVqWWPdhozZ8NayT
HT6lAEG2SqnnVw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:13 2026 by rpki-client