Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: Zj921zCbXxfIXTmPzPImvYhp++6b3a/LKWh1lUuX1Bg=
Subject key identifier: 7D:00:6B:53:17:8C:04:A7:8E:60:51:42:7D:A2:5A:3E:F0:86:F0:92
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019E1E34EEF1631681162DA3F8DEC2B0963A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 157E
Signing time: Tue 12 May 2026 22:00:45 +0000
Manifest this update: Tue 12 May 2026 22:00:45 +0000
Manifest next update: Wed 13 May 2026 22:00:45 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: FHe5QIAq5Y5r5btjpEWNS54WO92clNGsAVpQ6uv9QaM=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:ee:f1:63:16:81:16:2d:a3:f8:de:c2:b0:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: May 12 22:00:45 2026 GMT
Not After : May 13 22:00:45 2026 GMT
Subject: CN=7d006b53178c04a78e6051427da25a3ef086f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:ca:76:3b:b6:3c:16:a1:90:6e:a3:8a:d0:
c0:33:31:72:b0:1b:d0:02:80:75:42:8c:0e:bf:2c:
75:bf:9d:92:93:8a:02:72:2f:90:53:2d:9b:fe:45:
53:c7:06:8e:71:12:0e:13:60:01:80:64:c8:59:30:
32:8b:63:49:4b:df:0d:97:d6:c5:75:a6:37:58:37:
c1:e2:83:73:32:6f:a7:f8:ca:a0:0f:ba:cd:de:ee:
fe:a7:d1:b4:52:07:1a:af:3d:4c:53:89:38:f6:62:
de:bf:13:36:16:42:f2:1a:2e:b3:5b:60:34:d7:21:
19:02:b4:3d:46:dc:e0:22:ab:9c:fa:80:87:a1:82:
b0:0b:ec:a4:2a:e5:37:af:bb:03:1e:34:fe:5a:3c:
8e:4a:8d:d7:bd:f0:57:92:69:aa:01:1e:56:e0:50:
45:a8:05:d8:0d:76:d3:de:c4:0b:c6:c6:35:f8:7c:
10:30:98:01:30:d2:7a:0a:98:e5:2a:49:2a:03:60:
09:b5:0c:2d:a1:1c:20:27:38:ce:27:3f:80:55:38:
93:77:fa:74:e9:11:aa:27:d8:4a:ce:6a:87:ee:0e:
a8:cd:b5:c5:cc:f0:32:66:16:36:83:33:4d:4d:92:
0a:cc:66:15:ed:17:86:79:49:9f:2e:be:7e:df:90:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:6B:53:17:8C:04:A7:8E:60:51:42:7D:A2:5A:3E:F0:86:F0:92
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:4b:ac:6f:e2:96:2e:9b:33:ef:f9:19:97:d4:fc:5e:a6:
35:aa:56:fd:39:8e:0f:1c:20:05:b3:a6:e1:f2:d0:dc:bb:c3:
ee:e0:bc:06:cd:78:0e:29:56:15:5d:0c:8e:5a:0a:f0:0d:2a:
06:19:12:c6:3f:95:14:e7:ef:a2:53:5d:07:e6:12:fe:08:70:
d5:32:c4:40:6e:2c:e5:7b:36:64:28:45:2f:04:1a:f1:ed:24:
f2:db:aa:5b:42:64:18:d9:29:e8:93:bf:cb:90:e7:21:ea:99:
fa:b2:17:53:66:e6:73:35:47:50:a8:49:21:72:ba:98:52:d0:
c4:fe:9d:8e:01:71:07:ac:72:0b:98:7b:b2:61:19:90:5c:7a:
3b:be:f5:c8:2d:ff:0e:bf:9f:a6:2f:59:4b:c9:07:e7:70:b8:
fb:a9:07:46:7e:47:97:e8:c5:d0:64:39:22:c7:77:79:0b:b8:
77:9a:c7:31:6b:87:f9:9b:8b:30:96:3b:f4:c3:7c:66:9c:76:
1f:2e:9d:bc:6b:f4:26:68:11:2b:16:6f:e3:2c:9a:eb:86:45:
b1:60:3a:e4:4b:61:77:1b:db:7a:75:d4:7c:a6:5b:ea:39:4c:
85:f1:04:96:6d:41:d8:ea:71:4a:eb:22:34:7b:da:b5:58:8d:
49:f4:86:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNO7xYxaBFi2j+N7CsJY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjYwNTEyMjIwMDQ1WhcNMjYwNTEzMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZDAwNmI1MzE3OGMwNGE3OGU2MDUxNDI3ZGEyNWEzZWYwODZmMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/Kdju2PBahkG6jitDAMzFysBvQ
AoB1QowOvyx1v52Sk4oCci+QUy2b/kVTxwaOcRIOE2ABgGTIWTAyi2NJS98Nl9bF
daY3WDfB4oNzMm+n+MqgD7rN3u7+p9G0Ugcarz1MU4k49mLevxM2FkLyGi6zW2A0
1yEZArQ9RtzgIquc+oCHoYKwC+ykKuU3r7sDHjT+WjyOSo3XvfBXkmmqAR5W4FBF
qAXYDXbT3sQLxsY1+HwQMJgBMNJ6CpjlKkkqA2AJtQwtoRwgJzjOJz+AVTiTd/p0
6RGqJ9hKzmqH7g6ozbXFzPAyZhY2gzNNTZIKzGYV7ReGeUmfLr5+35DWVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0Aa1MXjASnjmBRQn2iWj7whvCSMB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPtLrG/i
li6bM+/5GZfU/F6mNapW/TmODxwgBbOm4fLQ3LvD7uC8Bs14DilWFV0MjloK8A0q
BhkSxj+VFOfvolNdB+YS/ghw1TLEQG4s5Xs2ZChFLwQa8e0k8tuqW0JkGNkp6JO/
y5DnIeqZ+rIXU2bmczVHUKhJIXK6mFLQxP6djgFxB6xyC5h7smEZkFx6O771yC3/
Dr+fpi9ZS8kH53C4+6kHRn5Hl+jF0GQ5Isd3eQu4d5rHMWuH+ZuLMJY79MN8Zpx2
Hy6dvGv0JmgRKxZv4yya64ZFsWA65EthdxvbenXUfKZb6jlMhfEElm1B2OpxSusi
NHvatViNSfSG1A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:32:01 2026 by rpki-client