Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: PT9DMJn+ktrFsPZOQYHTuQAJXN6KNi3NbzrniFXBlr4=
Subject key identifier: 93:FD:B0:69:92:86:57:7D:BB:11:A7:82:C0:BF:9C:FC:F5:C6:1D:81
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019F954A77C3B8C48DF64774034B6EB64B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 01C3
Signing time: Fri 24 Jul 2026 18:01:53 +0000
Manifest this update: Fri 24 Jul 2026 18:01:53 +0000
Manifest next update: Sat 25 Jul 2026 18:01:53 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: B7vk2O0dLpQz2A/2EFS8THvoUCfGJcMvKmfnRqw253Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:77:c3:b8:c4:8d:f6:47:74:03:4b:6e:b6:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Jul 24 18:01:53 2026 GMT
Not After : Jul 25 18:01:53 2026 GMT
Subject: CN=93fdb0699286577dbb11a782c0bf9cfcf5c61d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:f5:20:ab:06:3f:03:b1:70:ed:c4:cf:a2:
03:c5:35:1f:a5:7e:bc:16:d3:0f:db:2d:22:f7:ab:
ed:bf:49:d6:d4:8e:75:8d:d1:cb:3e:d8:e5:fa:00:
b1:c6:9a:43:8c:f3:da:a8:f3:3b:b6:76:91:f5:2b:
30:c8:44:b5:4a:a9:0b:d2:cc:85:6a:b3:81:8d:46:
25:44:fb:5f:0d:ac:1d:4c:f7:6c:39:5b:1c:44:70:
b4:9b:07:cf:84:24:d4:5b:96:43:ae:5e:cd:df:9d:
16:9c:83:5f:b5:0a:b6:25:14:09:46:e4:88:e2:a3:
d0:1a:f5:74:17:43:ac:b2:86:27:0f:f1:b8:a7:a2:
dd:fa:cf:51:4a:d4:66:dd:a2:82:20:e7:90:63:5d:
70:2e:02:c1:a7:7e:b4:d0:b1:1f:cb:2a:d4:bf:e7:
72:b8:32:2e:1c:85:96:a7:48:93:f5:4e:89:15:0a:
ea:23:cd:28:07:b4:e9:9d:60:10:1d:27:09:0e:ff:
a0:c2:9f:fb:53:7a:a3:fc:42:78:46:94:d4:e9:da:
f4:77:4e:87:f4:56:38:b3:90:1c:7a:c8:13:b7:02:
78:12:3b:3b:d6:8f:94:de:bd:47:d9:09:d2:b6:76:
fa:4c:1f:d5:cf:20:81:ae:2f:7a:30:0a:65:39:e5:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:B0:69:92:86:57:7D:BB:11:A7:82:C0:BF:9C:FC:F5:C6:1D:81
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7a:dd:bd:c0:5e:f1:66:8b:7d:7d:0d:76:3f:37:5a:85:51:
b7:82:3b:b5:69:e3:9b:f0:2b:a1:99:0a:2d:e7:6b:2d:65:21:
02:5e:3e:b0:cb:25:5d:0c:b0:af:af:f0:0d:a7:86:ce:6a:7a:
63:23:6e:89:55:ec:82:8e:6e:62:05:4e:92:09:a5:20:57:b8:
73:2e:f2:4d:71:17:0e:f2:31:8c:e7:12:b7:46:68:f2:de:a2:
4b:c3:ad:72:ce:f9:51:2c:b8:5c:51:49:a2:16:68:a4:6d:a4:
1c:f2:c1:74:30:1f:2f:2c:1c:21:cb:98:46:e0:94:49:3c:9f:
60:6c:7b:54:e4:1a:57:9c:31:e0:dc:fc:3a:69:75:e4:f6:c3:
24:1e:94:f4:00:b9:fc:81:5b:23:66:66:e9:1c:84:1e:50:47:
23:c3:c2:96:22:5a:72:de:a5:44:65:63:27:4c:6e:3b:bf:0c:
c1:d5:64:58:a8:cf:6e:75:9f:2e:de:ce:08:ed:3c:88:d0:3f:
1e:61:87:2b:30:98:67:12:9a:f4:fa:18:fe:5a:75:6a:d8:54:
ef:69:d0:cf:b3:97:19:74:fc:ab:0b:1b:81:56:86:46:62:32:
58:5a:57:ab:09:c6:a6:aa:57:41:81:f3:98:13:03:0f:22:30:
2c:d2:a1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSnfDuMSN9kd0A0tutksKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNmYjQyNWJjMWMzNTI1NzdlMGE5YWRlNWJmZjU5YzBi
NGM1ODIwHhcNMjYwNzI0MTgwMTUzWhcNMjYwNzI1MTgwMTUzWjAzMTEwLwYDVQQD
Eyg5M2ZkYjA2OTkyODY1NzdkYmIxMWE3ODJjMGJmOWNmY2Y1YzYxZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmD1IKsGPwOxcO3Ez6IDxTUfpX68
FtMP2y0i96vtv0nW1I51jdHLPtjl+gCxxppDjPPaqPM7tnaR9SswyES1SqkL0syF
arOBjUYlRPtfDawdTPdsOVscRHC0mwfPhCTUW5ZDrl7N350WnINftQq2JRQJRuSI
4qPQGvV0F0OssoYnD/G4p6Ld+s9RStRm3aKCIOeQY11wLgLBp3600LEfyyrUv+dy
uDIuHIWWp0iT9U6JFQrqI80oB7TpnWAQHScJDv+gwp/7U3qj/EJ4RpTU6dr0d06H
9FY4s5AcesgTtwJ4Ejs71o+U3r1H2QnStnb6TB/VzyCBri96MAplOeX46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP9sGmShld9uxGngsC/nPz1xh2BMB8GA1UdIwQY
MBaAFA5D+0JbwcNSV34Kmt5b/1nAtMWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWIt
OTExZjFkZGRkNjZiLzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWItOTExZjFkZGRkNjZi
LzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3rdvcBe
8WaLfX0Ndj83WoVRt4I7tWnjm/AroZkKLedrLWUhAl4+sMslXQywr6/wDaeGzmp6
YyNuiVXsgo5uYgVOkgmlIFe4cy7yTXEXDvIxjOcSt0Zo8t6iS8Otcs75USy4XFFJ
ohZopG2kHPLBdDAfLywcIcuYRuCUSTyfYGx7VOQaV5wx4Nz8Oml15PbDJB6U9AC5
/IFbI2Zm6RyEHlBHI8PCliJact6lRGVjJ0xuO78MwdVkWKjPbnWfLt7OCO08iNA/
HmGHKzCYZxKa9PoY/lp1athU72nQz7OXGXT8qwsbgVaGRmIyWFpXqwnGpqpXQYHz
mBMDDyIwLNKhDQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:34:04 2026 by rpki-client