Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier: akCRn1/E7p9q/HrfQJRAzaQo90x5n+YfqeWpG/ChVYA=
Subject key identifier: D2:5D:D5:2C:F4:EF:5D:55:18:0C:D8:7D:35:DA:52:48:B6:42:14:86
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer: /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial: 019D98F48A5F95C6F0EB69A09C5024967FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number: 06EC
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: 5ui5clLWW98otSFPv63NTFLNvfYGGJA5/NNpQhfsu0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8a:5f:95:c6:f0:eb:69:a0:9c:50:24:96:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=d25dd52cf4ef5d55180cd87d35da5248b6421486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b3:27:31:cf:88:2b:47:c4:ec:8e:e1:d8:d7:
6b:6e:4d:51:97:85:ce:c2:f7:2a:28:8e:84:87:03:
60:23:4b:7f:44:5b:dc:c3:06:c2:cd:e9:92:b2:83:
59:22:ef:8d:e2:7a:51:02:93:6b:ff:88:c8:6a:94:
2e:e1:a9:df:33:72:3a:51:97:2b:41:b2:7a:ab:c1:
ac:b5:92:8e:9a:49:a7:ba:0e:9c:91:d7:0d:84:78:
12:99:f5:d3:07:44:96:7c:c0:42:3e:9a:85:af:05:
ee:23:e6:73:27:8e:bf:63:f8:38:6c:8a:16:bd:24:
35:bf:ca:53:b0:eb:a0:f1:ad:7a:85:5d:f3:5b:46:
93:4f:e1:3c:13:9c:c9:0a:1c:00:84:41:43:21:c5:
50:e5:d5:47:f1:33:88:11:e6:86:fe:53:f0:df:53:
83:d1:5b:5a:da:4f:f9:d7:3d:a0:ad:f1:c8:83:0f:
43:89:d5:1a:1a:f9:37:4d:47:b9:02:16:f2:34:4e:
a3:b6:08:45:5b:9e:96:50:c1:34:7e:62:3a:73:ce:
c6:52:63:89:96:0e:f9:9e:e7:33:4f:6f:b2:af:e2:
d7:99:55:7c:52:0f:db:7b:a6:01:0b:e5:d9:61:10:
89:40:55:c7:d8:c7:aa:c0:ba:d2:e1:a2:1e:69:c9:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:D5:2C:F4:EF:5D:55:18:0C:D8:7D:35:DA:52:48:B6:42:14:86
X509v3 Authority Key Identifier:
keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:88:82:5e:10:fe:b7:6c:26:d1:b2:6f:f8:a5:1b:b1:9a:
eb:df:51:4f:58:c5:00:4a:9c:71:9b:ba:b0:e3:24:85:a5:87:
67:5a:b2:db:84:aa:39:70:5d:4c:39:0d:65:a2:eb:9b:98:bb:
be:11:85:13:89:f7:02:bc:f4:7b:91:96:74:89:4a:1a:a0:bb:
7c:0d:98:71:bf:28:e1:f9:5a:65:ed:1e:a3:8f:d9:f1:d1:a5:
07:83:be:af:cb:d8:a9:94:b3:49:88:bd:4a:e2:84:39:03:38:
c6:aa:22:33:d4:7b:64:e4:ef:a7:20:d7:fd:5b:3c:e6:50:08:
74:19:90:2d:cd:3d:bb:9d:14:0e:18:a0:4c:6e:34:a6:25:4b:
e8:f7:3d:78:b9:23:21:45:74:f8:0e:a2:e0:6e:87:e6:6e:16:
e1:57:17:75:c3:24:d7:57:57:e7:fe:df:c2:83:c2:e1:42:38:
64:d1:44:55:f6:49:1c:b6:4b:23:24:0f:c5:f2:f1:01:7e:97:
e1:1e:cb:79:af:1a:d6:05:e7:e3:b0:00:c2:0c:ef:6a:b7:48:
ad:e8:af:7b:e9:93:0d:a4:e5:28:68:6a:5c:ee:69:28:97:3f:
48:a2:34:09:ee:8a:1d:00:cb:dc:7f:59:7d:b2:46:e6:f5:6f:
16:18:bc:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Ipflcbw62mgnFAkln/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDdmNjlkZWU0M2FjMDFkN2RmZWFjYTliNzZhMjQwZWE2
ZWYzNjYwHhcNMjYwNDE3MDEwMDU2WhcNMjYwNDE4MDEwMDU2WjAzMTEwLwYDVQQD
EyhkMjVkZDUyY2Y0ZWY1ZDU1MTgwY2Q4N2QzNWRhNTI0OGI2NDIxNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LMnMc+IK0fE7I7h2Ndrbk1Rl4XO
wvcqKI6EhwNgI0t/RFvcwwbCzemSsoNZIu+N4npRApNr/4jIapQu4anfM3I6UZcr
QbJ6q8GstZKOmkmnug6ckdcNhHgSmfXTB0SWfMBCPpqFrwXuI+ZzJ46/Y/g4bIoW
vSQ1v8pTsOug8a16hV3zW0aTT+E8E5zJChwAhEFDIcVQ5dVH8TOIEeaG/lPw31OD
0Vta2k/51z2grfHIgw9DidUaGvk3TUe5AhbyNE6jtghFW56WUME0fmI6c87GUmOJ
lg75nuczT2+yr+LXmVV8Ug/be6YBC+XZYRCJQFXH2MeqwLrS4aIeacnnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJd1Sz0711VGAzYfTXaUki2QhSGMB8GA1UdIwQY
MBaAFHYH9p3uQ6wB19/qypt2okDqbvNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTct
YzAyNDNhM2JkYWZiLzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTctYzAyNDNhM2JkYWZi
LzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7uIgl4Q
/rdsJtGyb/ilG7Ga699RT1jFAEqccZu6sOMkhaWHZ1qy24SqOXBdTDkNZaLrm5i7
vhGFE4n3Arz0e5GWdIlKGqC7fA2Ycb8o4flaZe0eo4/Z8dGlB4O+r8vYqZSzSYi9
SuKEOQM4xqoiM9R7ZOTvpyDX/Vs85lAIdBmQLc09u50UDhigTG40piVL6Pc9eLkj
IUV0+A6i4G6H5m4W4VcXdcMk11dX5/7fwoPC4UI4ZNFEVfZJHLZLIyQPxfLxAX6X
4R7Lea8a1gXn47AAwgzvardIreive+mTDaTlKGhqXO5pKJc/SKI0Ce6KHQDL3H9Z
fbJG5vVvFhi8Bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:42 2026 by rpki-client