Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: nTlir8Xg6LkohFYiEMTlFG1a68tIXWBSJsDJpCMdVTQ=
Subject key identifier: 5F:6D:3D:93:72:86:99:25:3A:77:1D:C1:67:1B:30:8B:F5:5A:2C:A1
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019FA82BCDF21B56BFF2BA12E540B75706A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 10:01:10 +0000
Manifest this update: Tue 28 Jul 2026 10:01:10 +0000
Manifest next update: Wed 29 Jul 2026 10:01:10 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: lt0hfwOWhu5gzpEm8QISbkKJWcHkLJry0F/gyFslvZY=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:cd:f2:1b:56:bf:f2:ba:12:e5:40:b7:57:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jul 28 10:01:10 2026 GMT
Not After : Jul 29 10:01:10 2026 GMT
Subject: CN=5f6d3d93728699253a771dc1671b308bf55a2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:4a:0c:b0:e1:3d:91:f5:0d:39:f0:eb:5c:
65:28:a1:22:6c:9a:4a:cd:3a:d5:ea:3f:26:0b:9d:
ca:ea:cf:65:5a:5a:3d:4c:a2:f8:a7:f8:2c:32:02:
c2:0f:65:bd:1e:3b:8e:6e:8f:18:04:23:a3:ba:5f:
24:f3:23:70:0f:5a:bd:93:48:9b:20:04:0e:27:b2:
d1:03:f2:85:a9:5f:55:27:92:78:5d:77:4f:95:ef:
61:f7:3b:34:99:79:82:1a:68:98:35:99:69:e9:fe:
1b:f2:a4:05:33:ce:b1:de:52:cf:92:69:0f:8c:09:
a4:25:03:97:90:e2:9d:30:30:ed:e6:08:91:b5:27:
fc:fb:ba:0e:c0:99:03:82:12:00:3d:79:c7:82:2a:
49:c4:31:8d:be:28:1e:f3:46:24:94:bb:70:fe:7a:
30:26:28:66:0e:4d:88:4f:43:16:91:35:91:b3:dc:
cd:1b:26:c5:27:0e:24:3f:72:66:da:8c:73:3c:9a:
3e:20:92:0c:e0:ed:67:c6:a6:17:9d:95:dd:fb:37:
4c:3d:f8:c6:25:a3:10:50:13:1d:c3:b2:9b:c3:69:
99:17:94:5d:dd:fe:ec:ff:fe:e1:04:93:e5:7d:51:
31:b6:0a:36:89:c5:5a:17:84:94:ea:19:88:78:8f:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:3D:93:72:86:99:25:3A:77:1D:C1:67:1B:30:8B:F5:5A:2C:A1
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:1c:75:28:20:7f:7b:d1:ce:6b:b4:5e:b0:c3:07:eb:5a:
0d:7e:e2:8c:18:ed:7e:1b:09:a4:6e:ce:56:c4:1f:ca:f3:0b:
bf:8e:97:ab:b6:8f:7c:62:40:02:ce:8c:52:26:ce:f7:41:fc:
3b:37:35:78:8e:c4:05:57:bd:b9:ea:96:4e:a6:d6:08:0d:20:
ce:33:10:68:67:75:b0:47:e8:17:a5:b1:1f:9d:86:32:65:73:
b5:ba:21:5e:d1:7c:ab:bb:0d:73:d6:c6:0c:8f:b8:56:63:01:
e8:3e:4b:3d:87:0d:11:3f:be:e9:cc:79:d9:90:d5:17:73:93:
be:a3:1b:cb:80:82:a1:a6:af:eb:4d:68:c7:26:fe:4d:6d:42:
5e:66:4c:dd:1e:24:ff:91:e0:31:4e:ba:03:63:e5:d6:46:b8:
aa:71:a8:07:3f:4f:0d:77:31:49:01:c6:fc:5d:21:05:67:e0:
83:36:b5:4d:75:80:3a:5e:41:87:a9:ed:12:be:1e:b6:d8:a2:
d6:2e:3a:5e:3f:82:47:02:40:04:9d:06:61:56:7d:76:c1:26:
27:1b:a4:e1:f2:c2:ff:07:28:65:be:9f:18:c9:50:77:30:a9:
72:24:ed:92:81:26:6c:f6:36:09:53:c5:0e:88:cc:52:d6:cc:
c7:b1:7a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK83yG1a/8roS5UC3VwapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjYwNzI4MTAwMTEwWhcNMjYwNzI5MTAwMTEwWjAzMTEwLwYDVQQD
Eyg1ZjZkM2Q5MzcyODY5OTI1M2E3NzFkYzE2NzFiMzA4YmY1NWEyY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzBKDLDhPZH1DTnw61xlKKEibJpK
zTrV6j8mC53K6s9lWlo9TKL4p/gsMgLCD2W9HjuObo8YBCOjul8k8yNwD1q9k0ib
IAQOJ7LRA/KFqV9VJ5J4XXdPle9h9zs0mXmCGmiYNZlp6f4b8qQFM86x3lLPkmkP
jAmkJQOXkOKdMDDt5giRtSf8+7oOwJkDghIAPXnHgipJxDGNvige80YklLtw/now
JihmDk2IT0MWkTWRs9zNGybFJw4kP3Jm2oxzPJo+IJIM4O1nxqYXnZXd+zdMPfjG
JaMQUBMdw7Kbw2mZF5Rd3f7s//7hBJPlfVExtgo2icVaF4SU6hmIeI/aAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9tPZNyhpklOncdwWcbMIv1WiyhMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/YcdSgg
f3vRzmu0XrDDB+taDX7ijBjtfhsJpG7OVsQfyvMLv46Xq7aPfGJAAs6MUibO90H8
Ozc1eI7EBVe9ueqWTqbWCA0gzjMQaGd1sEfoF6WxH52GMmVztbohXtF8q7sNc9bG
DI+4VmMB6D5LPYcNET++6cx52ZDVF3OTvqMby4CCoaav601oxyb+TW1CXmZM3R4k
/5HgMU66A2Pl1ka4qnGoBz9PDXcxSQHG/F0hBWfggza1TXWAOl5Bh6ntEr4ettii
1i46Xj+CRwJABJ0GYVZ9dsEmJxuk4fLC/wcoZb6fGMlQdzCpciTtkoEmbPY2CVPF
DojMUtbMx7F6sQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:27 2026 by rpki-client