Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: HzQlmr3bq3Bw5jQwb83NMVrWVCLcIyFGSrCHIRiwofQ=
Subject key identifier: 41:80:5B:93:5E:CB:27:83:41:F4:D4:3D:A4:50:3A:F8:D7:F9:3E:36
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019E20244AB8EC21AD1E6288D909EF8F7377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0E92
Signing time: Wed 13 May 2026 07:01:49 +0000
Manifest this update: Wed 13 May 2026 07:01:49 +0000
Manifest next update: Thu 14 May 2026 07:01:49 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: VeVKO7mx1/kex2P42ZtWcdtgAlmbi8LO2od/DW5jPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:4a:b8:ec:21:ad:1e:62:88:d9:09:ef:8f:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: May 13 07:01:49 2026 GMT
Not After : May 14 07:01:49 2026 GMT
Subject: CN=41805b935ecb278341f4d43da4503af8d7f93e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:a0:44:1c:ac:ab:9a:75:1a:e8:5f:9d:a4:
89:0b:86:61:ce:c2:9e:65:15:bb:fe:25:ef:2a:3a:
1f:8d:0d:c1:44:f0:8b:14:43:9e:c9:ae:78:2f:18:
4d:c3:ec:65:3e:4b:a9:76:57:f2:38:b9:32:f7:10:
4e:fc:ee:2e:c3:85:4d:43:87:c2:c6:6b:ec:30:b6:
9a:d4:a6:a2:0d:31:70:d5:0c:82:a6:12:cc:a4:c6:
76:b8:04:0f:d9:a9:aa:98:dd:b2:59:84:7c:fb:0b:
3d:6a:cb:0f:2c:62:7c:52:0f:8d:16:8c:0d:fa:f0:
42:8a:e6:59:91:6d:f7:83:d4:21:ed:d4:0f:a7:07:
7d:00:11:59:62:eb:44:06:5e:30:bf:91:18:47:dc:
73:4f:e4:af:0e:12:7e:f6:be:57:a8:8b:d5:34:18:
67:1c:ba:ef:06:bc:9f:91:58:cb:bc:1d:f8:6e:b8:
29:fc:cf:5a:ee:fa:64:73:08:08:e3:b9:ce:ae:4f:
96:14:a2:4b:12:25:28:f1:d3:ab:50:a6:d3:e6:a6:
45:d3:ee:58:5c:fc:63:5a:1d:45:3d:84:aa:60:ad:
55:29:07:83:21:56:f1:28:80:df:aa:25:31:27:f7:
4a:03:a1:87:51:69:f1:f4:dd:5a:9e:99:c9:e6:d1:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:5B:93:5E:CB:27:83:41:F4:D4:3D:A4:50:3A:F8:D7:F9:3E:36
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:4f:87:dd:73:c3:1c:91:de:80:27:36:93:6b:c1:54:f6:
07:04:16:d3:bf:4f:4c:0f:1a:25:b6:c7:cd:8c:95:12:78:78:
22:cf:46:cc:24:6b:40:48:84:b4:70:ee:78:76:11:5b:a0:21:
2a:b8:a2:f9:f6:c6:b0:9e:87:bd:21:75:74:80:bb:f5:c7:06:
63:e6:f9:97:07:f5:7c:a7:78:d4:bd:9d:9a:47:59:dc:dc:4d:
82:fb:99:ff:54:45:af:2e:40:6d:4a:b1:39:31:b0:37:a5:9d:
15:0f:d8:1e:d4:be:f9:ef:de:50:b5:24:3a:d4:9b:12:e2:47:
12:17:04:ae:19:51:d5:d1:64:51:e6:4a:c9:47:64:53:38:70:
5f:dc:c8:f5:a8:96:64:14:9c:07:b9:e9:21:17:db:f3:8e:1e:
52:a6:4f:3f:92:4a:e3:40:45:31:cb:02:46:a6:f9:ac:7e:96:
47:12:9a:3f:76:12:eb:86:59:fd:78:31:aa:5a:c5:74:f1:71:
47:64:c3:e2:c6:ec:88:02:f0:f9:09:02:a0:eb:20:c6:e7:26:
c9:f0:f8:6a:29:12:cc:a0:68:11:f3:d4:c8:fe:77:4a:83:bf:
e3:f9:2b:c7:7d:f7:37:d6:64:bc:50:51:88:d6:7c:bc:c3:a5:
c7:bf:48:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJEq47CGtHmKI2Qnvj3N3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjYwNTEzMDcwMTQ5WhcNMjYwNTE0MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg0MTgwNWI5MzVlY2IyNzgzNDFmNGQ0M2RhNDUwM2FmOGQ3ZjkzZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoigRBysq5p1GuhfnaSJC4ZhzsKe
ZRW7/iXvKjofjQ3BRPCLFEOeya54LxhNw+xlPkupdlfyOLky9xBO/O4uw4VNQ4fC
xmvsMLaa1KaiDTFw1QyCphLMpMZ2uAQP2amqmN2yWYR8+ws9assPLGJ8Ug+NFowN
+vBCiuZZkW33g9Qh7dQPpwd9ABFZYutEBl4wv5EYR9xzT+SvDhJ+9r5XqIvVNBhn
HLrvBryfkVjLvB34brgp/M9a7vpkcwgI47nOrk+WFKJLEiUo8dOrUKbT5qZF0+5Y
XPxjWh1FPYSqYK1VKQeDIVbxKIDfqiUxJ/dKA6GHUWnx9N1anpnJ5tEseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGAW5NeyyeDQfTUPaRQOvjX+T42MB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRNPh91z
wxyR3oAnNpNrwVT2BwQW079PTA8aJbbHzYyVEnh4Is9GzCRrQEiEtHDueHYRW6Ah
Krii+fbGsJ6HvSF1dIC79ccGY+b5lwf1fKd41L2dmkdZ3NxNgvuZ/1RFry5AbUqx
OTGwN6WdFQ/YHtS++e/eULUkOtSbEuJHEhcErhlR1dFkUeZKyUdkUzhwX9zI9aiW
ZBScB7npIRfb844eUqZPP5JK40BFMcsCRqb5rH6WRxKaP3YS64ZZ/XgxqlrFdPFx
R2TD4sbsiALw+QkCoOsgxucmyfD4aikSzKBoEfPUyP53SoO/4/krx333N9ZkvFBR
iNZ8vMOlx79Inw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:52:46 2026 by rpki-client