Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
File: DhEMl9XysftNNYKIwOpir18gxBo.mft (raw, json)
Hash identifier: ZPTZBup63+m/0qKIRzmYz+m+CO5R/521JPeAMqXDNbQ=
Subject key identifier: D0:6E:43:4F:AB:F4:2F:FD:C6:45:8F:EF:4F:CD:23:A4:DE:76:68:6F
Authority key identifier: 0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
Certificate issuer: /CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Certificate serial: 019D27720A50A5ADEE1A11105617424A072D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
Manifest number: 018F
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: DhEMl9XysftNNYKIwOpir18gxBo.crl (hash: BZLEXthE8UnVlOX3XicLXB9MBMgXFOZloVVhs3qR40U=)
2: UgJvQvKty6Zh2ac8QLWpSTJ3e9Q.roa (hash: e7Y0YkdCjz1xJOGFlqqNmoUkXvlhwJtg0uSF5GJoHhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0a:50:a5:ad:ee:1a:11:10:56:17:42:4a:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=d06e434fabf42ffdc6458fef4fcd23a4de76686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:60:38:44:00:29:6f:1b:25:70:58:50:f8:
8a:b3:07:a4:84:71:54:37:9c:4e:4a:af:df:f7:8f:
44:3b:fb:18:c6:b1:f1:aa:09:83:6c:c0:36:8e:84:
e3:e6:51:1e:e7:da:f5:31:01:db:4e:47:d0:0b:0a:
76:67:a8:ef:9b:b6:4c:8c:ab:eb:8f:af:06:85:66:
20:b6:e7:da:2c:da:c1:40:db:5b:99:41:42:d4:31:
4b:63:01:dd:1b:ee:49:c8:d0:54:ed:8a:03:44:3c:
e1:f5:2a:43:ac:79:07:71:86:a1:de:75:be:18:c2:
58:ae:a6:87:1f:e5:b8:f0:cc:91:59:b5:d1:98:36:
93:f6:7d:a3:ae:9d:be:31:e0:18:6b:13:95:2d:f7:
02:9d:25:9e:2c:2f:4c:38:6b:0c:8d:26:81:16:2f:
ef:42:0a:04:bd:ff:2a:9c:84:18:8d:8a:bf:b7:eb:
12:52:d6:99:f9:7a:ab:58:60:24:e3:8c:d9:8c:3c:
42:d5:74:6f:cc:6b:9a:f8:f1:06:ce:e3:6f:21:9c:
5a:bd:01:e6:74:56:88:16:69:fe:4e:b5:45:83:b6:
ad:cb:5f:be:f5:ee:47:86:b4:c1:d6:89:cf:65:ef:
ed:74:a0:4e:ab:45:25:c6:be:5b:f0:85:f9:65:e2:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:43:4F:AB:F4:2F:FD:C6:45:8F:EF:4F:CD:23:A4:DE:76:68:6F
X509v3 Authority Key Identifier:
keyid:0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:61:c0:32:61:27:93:4c:44:84:48:9f:d8:fb:42:f5:b4:
2b:6b:01:fd:e7:61:76:fb:58:86:ec:a7:39:7f:31:68:a0:a1:
dc:83:52:4c:c1:82:6e:ca:f5:fd:81:95:7f:86:44:62:75:79:
d7:1d:34:28:27:84:0a:d8:5e:f2:29:ed:c2:0d:0d:02:18:1f:
6b:a4:75:97:f8:3b:e2:54:b3:6a:c0:ab:88:f7:ec:8f:0c:ef:
76:d1:df:7c:53:b4:e6:2e:4a:92:64:e2:5e:ad:66:91:24:a9:
8e:35:4d:f5:72:95:0b:ff:90:4d:46:10:31:05:f7:f2:b8:74:
df:cb:10:e0:b6:49:84:99:04:ad:46:16:fe:93:64:32:0b:f1:
ac:e3:55:b9:dc:57:a2:ce:c2:9f:94:6a:17:8c:e6:91:3f:ba:
a3:88:50:cf:de:6b:5c:10:36:ea:62:37:93:57:03:88:35:5b:
3c:81:46:20:31:e2:63:5a:ef:49:56:12:60:8a:86:52:6e:8c:
fc:9d:56:cc:25:cf:a5:b3:7a:e6:60:b2:c8:1c:15:cc:a6:97:
8d:af:20:45:b1:57:0a:18:91:e9:97:3f:37:ee:8d:9f:88:31:
cf:ba:6e:1e:8c:6f:35:dd:34:6b:8e:de:58:20:f6:a9:5a:56:
85:3d:d0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgpQpa3uGhEQVhdCSgctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTEwYzk3ZDVmMmIxZmI0ZDM1ODI4OGMwZWE2MmFmNWYy
MGM0MWEwHhcNMjYwMzI2MDAwMTE4WhcNMjYwMzI3MDAwMTE4WjAzMTEwLwYDVQQD
EyhkMDZlNDM0ZmFiZjQyZmZkYzY0NThmZWY0ZmNkMjNhNGRlNzY2ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9VgOEQAKW8bJXBYUPiKswekhHFU
N5xOSq/f949EO/sYxrHxqgmDbMA2joTj5lEe59r1MQHbTkfQCwp2Z6jvm7ZMjKvr
j68GhWYgtufaLNrBQNtbmUFC1DFLYwHdG+5JyNBU7YoDRDzh9SpDrHkHcYah3nW+
GMJYrqaHH+W48MyRWbXRmDaT9n2jrp2+MeAYaxOVLfcCnSWeLC9MOGsMjSaBFi/v
QgoEvf8qnIQYjYq/t+sSUtaZ+XqrWGAk44zZjDxC1XRvzGua+PEGzuNvIZxavQHm
dFaIFmn+TrVFg7aty1++9e5HhrTB1onPZe/tdKBOq0Ulxr5b8IX5ZeJRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBuQ0+r9C/9xkWP70/NI6TedmhvMB8GA1UdIwQY
MBaAFA4RDJfV8rH7TTWCiMDqYq9fIMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYt
NjFjZDYxODY1OGM2LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYtNjFjZDYxODY1OGM2
LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5thwDJh
J5NMRIRIn9j7QvW0K2sB/edhdvtYhuynOX8xaKCh3INSTMGCbsr1/YGVf4ZEYnV5
1x00KCeECthe8intwg0NAhgfa6R1l/g74lSzasCriPfsjwzvdtHffFO05i5KkmTi
Xq1mkSSpjjVN9XKVC/+QTUYQMQX38rh038sQ4LZJhJkErUYW/pNkMgvxrONVudxX
os7Cn5RqF4zmkT+6o4hQz95rXBA26mI3k1cDiDVbPIFGIDHiY1rvSVYSYIqGUm6M
/J1WzCXPpbN65mCyyBwVzKaXja8gRbFXChiR6Zc/N+6Nn4gxz7puHoxvNd00a47e
WCD2qVpWhT3QTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:41 2026 by rpki-client