Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: nBnhn+xloTLcoTvaWmQdUz8g4CE4KD04NakkV0alXjo=
Subject key identifier: 27:CF:9D:1F:F6:18:2E:07:31:F2:DF:83:72:D4:B2:97:B4:76:35:61
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 019D9A3F20D9BB0E1CA3D2EF1CDDE89D29B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:02:01 +0000
Manifest this update: Fri 17 Apr 2026 07:02:01 +0000
Manifest next update: Sat 18 Apr 2026 07:02:01 +0000
Files and hashes: 1: 9PGq0B7AC-zJ-L0Q3TG3hN4oObE.roa (hash: 6D9R0IBfDMT40g6CEBy8W3M8kqiFYFX93dGioQ6h2MU=)
2: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: DSW3IL7HHLvohqvctU5P+4RdazSMSWRKTGvztTbpj+4=)
3: oluFcKd04dxpY6SBSmCmuqZrS88.roa (hash: KFH+bY6wncAOQdUwwJb+fxlikqPQMitBxlXuxYgpo4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:20:d9:bb:0e:1c:a3:d2:ef:1c:dd:e8:9d:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Apr 17 07:02:01 2026 GMT
Not After : Apr 18 07:02:01 2026 GMT
Subject: CN=27cf9d1ff6182e0731f2df8372d4b297b4763561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:eb:00:15:0f:34:b0:cd:f4:06:e8:66:b2:
3d:33:dc:43:3b:50:72:8a:90:2f:86:a5:13:a6:87:
74:e7:df:f1:cb:94:3f:4a:98:16:f3:f0:07:ad:06:
fc:90:f6:97:9c:49:cf:9a:ba:49:bf:b8:17:7e:a9:
02:91:5e:47:26:2c:23:ee:7f:cf:6e:a1:7c:15:cb:
f0:b1:8e:61:99:14:49:b3:c7:71:7d:1c:81:05:27:
d0:c9:29:cb:6c:74:21:8c:78:d4:2d:47:0f:dc:00:
7b:76:9b:53:25:f4:de:f2:1d:93:64:16:2b:6d:4d:
81:96:90:38:cf:9b:06:b4:fb:8b:ce:35:4b:b2:56:
f3:7c:20:16:c0:d7:b6:4d:ed:c8:99:7b:7a:d4:f9:
e2:15:d9:76:1c:11:39:2c:bd:13:e6:2b:ef:fb:7c:
cd:80:62:65:5f:51:b2:d1:43:b5:60:7b:3c:79:31:
fe:2c:1f:32:dd:84:13:25:72:5f:4c:f9:9b:a8:41:
38:94:42:cf:48:de:c4:9a:e9:8b:ea:de:3d:19:08:
cf:67:c1:50:2e:33:3f:cf:af:f8:2f:49:ff:24:34:
67:f3:9f:2d:72:d6:48:3c:89:7e:8b:17:fe:c3:79:
33:3d:18:2c:1e:07:92:5c:8b:6b:97:64:8b:89:31:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:9D:1F:F6:18:2E:07:31:F2:DF:83:72:D4:B2:97:B4:76:35:61
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3b:a5:30:58:5b:fd:28:fd:9d:f6:95:fd:15:70:b1:a9:42:
52:2a:51:c6:4e:3e:21:aa:69:b4:78:ee:26:be:f2:6a:c5:30:
c1:98:aa:a6:f2:05:d5:94:8b:04:f8:35:63:b4:20:f0:d6:25:
97:81:d6:2c:b1:fc:06:79:7c:fe:d4:5a:0d:2e:78:f1:d2:43:
e3:f5:7a:b8:ff:7f:5f:63:2a:7f:6c:fd:4c:7c:6e:b5:c2:a6:
2a:a7:a2:98:64:6e:93:62:db:bc:c4:ab:bf:d8:50:09:14:a0:
bd:9c:76:4a:55:e7:f9:fd:28:f4:81:e6:a9:52:15:50:b1:53:
df:f3:90:7f:9a:0a:d1:f5:11:66:6d:e5:40:8c:5f:df:0a:80:
f3:0e:e0:fa:33:e1:7f:65:13:eb:bb:ce:9e:ca:b8:94:eb:83:
90:f4:bb:1a:79:66:21:d6:93:19:ce:dd:2f:e0:fd:e2:46:cf:
3e:23:c3:63:36:30:8f:bb:46:29:46:0a:f5:cf:da:f5:9c:69:
f7:ef:96:99:5d:3c:e1:02:77:e6:4c:8c:90:61:0a:b4:d3:83:
e2:c3:b5:05:04:f7:ec:1d:e5:c7:36:33:50:a8:7a:43:ef:cf:
05:56:21:3d:5e:a6:2c:a2:27:8a:64:54:ae:cf:0c:7b:8a:58:
c2:27:d1:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPyDZuw4co9LvHN3onSm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjYwNDE3MDcwMjAxWhcNMjYwNDE4MDcwMjAxWjAzMTEwLwYDVQQD
EygyN2NmOWQxZmY2MTgyZTA3MzFmMmRmODM3MmQ0YjI5N2I0NzYzNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOnrABUPNLDN9AboZrI9M9xDO1By
ipAvhqUTpod059/xy5Q/SpgW8/AHrQb8kPaXnEnPmrpJv7gXfqkCkV5HJiwj7n/P
bqF8FcvwsY5hmRRJs8dxfRyBBSfQySnLbHQhjHjULUcP3AB7dptTJfTe8h2TZBYr
bU2BlpA4z5sGtPuLzjVLslbzfCAWwNe2Te3ImXt61PniFdl2HBE5LL0T5ivv+3zN
gGJlX1Gy0UO1YHs8eTH+LB8y3YQTJXJfTPmbqEE4lELPSN7EmumL6t49GQjPZ8FQ
LjM/z6/4L0n/JDRn858tctZIPIl+ixf+w3kzPRgsHgeSXItrl2SLiTEejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfPnR/2GC4HMfLfg3LUspe0djVhMB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzulMFhb
/Sj9nfaV/RVwsalCUipRxk4+IapptHjuJr7yasUwwZiqpvIF1ZSLBPg1Y7Qg8NYl
l4HWLLH8Bnl8/tRaDS548dJD4/V6uP9/X2Mqf2z9THxutcKmKqeimGRuk2LbvMSr
v9hQCRSgvZx2SlXn+f0o9IHmqVIVULFT3/OQf5oK0fURZm3lQIxf3wqA8w7g+jPh
f2UT67vOnsq4lOuDkPS7GnlmIdaTGc7dL+D94kbPPiPDYzYwj7tGKUYK9c/a9Zxp
9++WmV084QJ35kyMkGEKtNOD4sO1BQT37B3lxzYzUKh6Q+/PBVYhPV6mLKInimRU
rs8Me4pYwifRGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:30 2026 by rpki-client