
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: Psy54NbTyEzljYNgliu6NFzZqpuxE9fjlutS/0WSH84=
Subject key identifier: 44:A0:E4:70:36:2B:EB:32:39:2A:A4:6A:60:E5:3D:E7:2C:D5:C1:E1
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 01A0C7EA9C94AEDE5CB1EAAB518E0B569AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 07:00:36 +0000
Manifest this update: Tue 22 Sep 2026 07:00:36 +0000
Manifest next update: Wed 23 Sep 2026 07:00:36 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: zXgqQzFzhkT8aWBw+6T1kx5oL5HylgYZ3gbJAJIlkA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:9c:94:ae:de:5c:b1:ea:ab:51:8e:0b:56:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Sep 22 07:00:36 2026 GMT
Not After : Sep 23 07:00:36 2026 GMT
Subject: CN=44a0e470362beb32392aa46a60e53de72cd5c1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:cd:4a:be:be:a5:2a:25:63:8f:72:4b:03:
97:01:28:4c:ff:39:03:63:f6:ea:5b:8b:ab:b8:59:
59:50:97:6c:19:62:a6:fc:94:9d:cc:36:30:0c:b4:
e7:87:7f:84:2c:5d:53:82:7a:77:30:d2:cf:6b:59:
b9:11:b3:0b:99:f3:83:4f:96:ec:95:b7:94:be:bb:
5b:27:14:12:d1:5f:15:ff:d4:4d:87:67:2b:ec:67:
01:7a:cf:5a:ae:e3:d4:d2:04:66:24:ad:88:3f:bd:
2a:01:3f:df:ab:b7:61:04:26:59:69:e6:a3:bb:a6:
16:d9:6b:32:89:e3:d7:fd:6d:f3:6b:76:be:7c:bb:
19:84:c8:4f:63:47:bc:3d:fa:e2:84:89:17:2d:fd:
75:0b:97:2d:d2:5f:b8:21:27:a5:ac:51:c3:ad:8d:
57:4a:4e:97:07:d3:8a:6c:bb:e5:84:88:af:20:15:
a6:55:d0:19:10:2d:f2:23:31:01:45:9a:9c:1b:be:
54:a1:5f:18:c2:28:81:a6:4c:ef:52:74:da:3f:f2:
60:17:1f:48:ec:81:34:00:ed:a3:13:18:ce:c4:89:
9a:1c:b2:df:fb:80:12:fa:97:b0:6a:39:9a:1a:f1:
5f:24:df:1a:48:43:13:3d:10:69:ef:c6:d9:32:3f:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A0:E4:70:36:2B:EB:32:39:2A:A4:6A:60:E5:3D:E7:2C:D5:C1:E1
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:5e:5e:75:43:d8:28:b1:16:a8:03:fb:dd:0b:37:ed:84:
89:b3:af:b2:12:82:80:0e:b6:8d:c4:e4:d2:f6:af:68:04:88:
2a:0b:66:71:58:d1:ad:ad:8e:fa:4f:83:8b:61:33:f1:70:2e:
4a:4f:50:a3:dd:61:bc:ae:ec:60:a0:bb:5d:fb:5b:57:38:ec:
6e:6c:cd:71:e9:e9:be:f5:fa:7d:74:df:b9:1c:1a:a9:4c:69:
e5:84:53:13:87:21:5b:9c:b2:d6:2e:1f:05:fe:cf:54:0b:30:
b5:f1:c0:41:60:15:c8:f5:3f:82:66:c6:e0:3b:c6:c2:69:66:
01:3a:90:2f:14:fc:a2:12:9c:d9:c3:06:47:0a:cd:82:0c:db:
1c:6d:ab:c3:29:47:b2:a8:5a:4e:49:79:a0:26:bb:3d:1c:1c:
18:f4:ad:87:57:b2:d0:eb:a7:7d:9f:83:30:c0:f8:73:e0:20:
25:22:c0:04:cf:b7:60:94:0b:88:02:df:2f:62:6f:08:06:5e:
b0:e9:35:d1:87:69:1b:3c:80:3e:0e:9b:b1:7a:7c:f3:2c:45:
dd:ed:6d:96:44:d9:e1:89:28:a1:b4:fc:1c:65:8f:f6:d1:fc:
8b:7c:6b:bd:d9:af:92:2a:6d:57:73:0d:cc:b9:43:a0:88:05:
3d:3b:cb:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6pyUrt5cseqrUY4LVpq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmYzNWY4ZDVhZDNkZWVhNTUxMDY1YjI0MDJiYjBkM2M4
ZDk1MTkwHhcNMjYwOTIyMDcwMDM2WhcNMjYwOTIzMDcwMDM2WjAzMTEwLwYDVQQD
Eyg0NGEwZTQ3MDM2MmJlYjMyMzkyYWE0NmE2MGU1M2RlNzJjZDVjMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GzNSr6+pSolY49ySwOXAShM/zkD
Y/bqW4uruFlZUJdsGWKm/JSdzDYwDLTnh3+ELF1Tgnp3MNLPa1m5EbMLmfODT5bs
lbeUvrtbJxQS0V8V/9RNh2cr7GcBes9aruPU0gRmJK2IP70qAT/fq7dhBCZZaeaj
u6YW2WsyiePX/W3za3a+fLsZhMhPY0e8PfrihIkXLf11C5ct0l+4ISelrFHDrY1X
Sk6XB9OKbLvlhIivIBWmVdAZEC3yIzEBRZqcG75UoV8YwiiBpkzvUnTaP/JgFx9I
7IE0AO2jExjOxImaHLLf+4AS+pewajmaGvFfJN8aSEMTPRBp78bZMj81/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESg5HA2K+syOSqkamDlPecs1cHhMB8GA1UdIwQY
MBaAFAz/NfjVrT3upVEGWyQCuw08jZUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUt
ZTMzZjJiYWFiYzYwLzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUtZTMzZjJiYWFiYzYw
LzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6JeXnVD
2CixFqgD+90LN+2EibOvshKCgA62jcTk0vavaASIKgtmcVjRra2O+k+Di2Ez8XAu
Sk9Qo91hvK7sYKC7XftbVzjsbmzNcenpvvX6fXTfuRwaqUxp5YRTE4chW5yy1i4f
Bf7PVAswtfHAQWAVyPU/gmbG4DvGwmlmATqQLxT8ohKc2cMGRwrNggzbHG2rwylH
sqhaTkl5oCa7PRwcGPSth1ey0OunfZ+DMMD4c+AgJSLABM+3YJQLiALfL2JvCAZe
sOk10YdpGzyAPg6bsXp88yxF3e1tlkTZ4YkoobT8HGWP9tH8i3xrvdmvkiptV3MN
zLlDoIgFPTvLCw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:07:53 2026 by rpki-client