Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: YLkAnmJCamyhU8JfjRHuDah1kcRMSR506pCRIwKtqZs=
Subject key identifier: 71:24:BD:1E:7D:2E:79:65:2C:FD:59:36:A9:5C:FA:B9:85:57:B9:2C
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 01A127D5A465A750EE215DF9AFD2B04A5E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 11FE
Signing time: Sat 10 Oct 2026 22:01:14 +0000
Manifest this update: Sat 10 Oct 2026 22:01:14 +0000
Manifest next update: Sun 11 Oct 2026 22:01:14 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: U+K3IfPXznXpsEKX3dop056MeUEtNq4lmfecLipOmpA=)
2: _Ma0eGZ-z0n1VYqlad5Keq9wR4A.roa (hash: 3N14sFvn0+1bgJyRiEeYpdH6Wj5+13bYO0jZXdPYIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:a4:65:a7:50:ee:21:5d:f9:af:d2:b0:4a:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Oct 10 22:01:14 2026 GMT
Not After : Oct 11 22:01:14 2026 GMT
Subject: CN=7124bd1e7d2e79652cfd5936a95cfab98557b92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:46:b2:96:8b:ee:07:48:e3:e9:a9:79:6f:
6d:5f:17:0a:02:c8:b7:e9:52:9e:35:99:08:53:82:
d2:37:42:e6:f8:9b:4f:fe:e8:39:be:c5:b9:f5:38:
87:77:36:40:9c:b2:cf:0f:c3:84:cc:28:d1:ca:34:
c3:4b:1d:d8:bb:bd:6f:29:91:55:6d:90:25:41:0b:
e4:ef:7a:87:c9:93:32:a0:e0:85:56:a0:50:1c:22:
53:89:9d:76:42:1d:e6:87:f6:a9:86:96:0a:75:b2:
f1:d9:bc:21:3f:ae:f8:5d:9c:68:d3:c4:61:99:3c:
2f:8a:70:e0:0d:62:7c:28:0a:f3:05:d8:ce:19:72:
a0:47:82:52:f6:85:c2:20:41:94:3c:89:84:ac:ab:
48:d6:31:81:1d:ec:32:c0:f1:94:52:41:35:f9:29:
de:1d:b7:1b:de:f8:15:dd:3a:25:f9:cb:89:39:f2:
ec:2a:a8:b0:03:dd:66:94:3c:b5:53:99:4d:4a:f6:
e5:b1:35:24:ef:eb:85:74:68:5e:be:4e:51:38:a3:
3b:45:74:70:55:11:c8:e8:f9:79:7b:00:54:73:f2:
3d:0a:3e:77:f2:9f:e9:61:16:af:db:e4:60:af:46:
2d:c8:06:60:29:0f:dd:49:d2:f9:e0:26:ef:db:cc:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:BD:1E:7D:2E:79:65:2C:FD:59:36:A9:5C:FA:B9:85:57:B9:2C
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:f0:b2:0d:92:6b:2e:89:34:a1:03:38:24:f2:56:d6:cf:
26:e9:ce:ee:3e:22:a9:f4:40:67:00:9a:b5:cb:ab:bc:5a:d4:
3f:a1:ab:b6:5f:11:ab:c5:89:ea:11:9a:e2:0e:66:67:5c:9f:
78:bd:d1:6d:92:f5:c1:0b:0d:ea:97:7a:87:f2:fb:a3:5f:12:
e7:ff:53:3b:d8:6a:5a:a7:23:ad:b6:5b:3d:a7:5e:cb:02:50:
ec:94:44:70:61:7d:bc:14:f0:19:86:41:09:09:b6:15:bc:40:
1f:2c:55:bd:2e:00:94:a1:b4:57:70:24:4d:80:2d:cf:7b:f2:
4c:15:b8:f2:40:0e:45:44:f7:e8:31:0c:e2:62:2c:04:d9:19:
e3:27:3c:57:0b:2a:df:09:21:37:eb:c3:3b:33:46:7c:a2:69:
24:c6:e4:ec:02:d5:99:aa:12:62:ef:01:64:e3:15:d9:7a:32:
d3:a4:c9:22:fe:b4:b6:15:fe:8f:d6:20:cf:6b:ca:9d:dd:0f:
f4:f6:f1:17:22:ae:f1:c9:2a:34:65:6a:c5:54:a3:fc:32:3e:
1c:dc:a7:bd:fe:96:0d:d3:21:40:27:24:fe:72:5f:29:0b:ea:
0e:ce:c3:23:1f:10:3d:1c:bd:82:fb:da:82:af:23:85:42:26:
d9:58:32:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1aRlp1DuIV35r9KwSl4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2
N2E4MDIwHhcNMjYxMDEwMjIwMTE0WhcNMjYxMDExMjIwMTE0WjAzMTEwLwYDVQQD
Eyg3MTI0YmQxZTdkMmU3OTY1MmNmZDU5MzZhOTVjZmFiOTg1NTdiOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NVGspaL7gdI4+mpeW9tXxcKAsi3
6VKeNZkIU4LSN0Lm+JtP/ug5vsW59TiHdzZAnLLPD8OEzCjRyjTDSx3Yu71vKZFV
bZAlQQvk73qHyZMyoOCFVqBQHCJTiZ12Qh3mh/aphpYKdbLx2bwhP674XZxo08Rh
mTwvinDgDWJ8KArzBdjOGXKgR4JS9oXCIEGUPImErKtI1jGBHewywPGUUkE1+Sne
Hbcb3vgV3Tol+cuJOfLsKqiwA91mlDy1U5lNSvblsTUk7+uFdGhevk5ROKM7RXRw
VRHI6Pl5ewBUc/I9Cj538p/pYRav2+Rgr0YtyAZgKQ/dSdL54Cbv28wNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEkvR59LnllLP1ZNqlc+rmFV7ksMB8GA1UdIwQY
MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt
ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl
LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWDwsg2S
ay6JNKEDOCTyVtbPJunO7j4iqfRAZwCatcurvFrUP6Grtl8Rq8WJ6hGa4g5mZ1yf
eL3RbZL1wQsN6pd6h/L7o18S5/9TO9hqWqcjrbZbPadeywJQ7JREcGF9vBTwGYZB
CQm2FbxAHyxVvS4AlKG0V3AkTYAtz3vyTBW48kAORUT36DEM4mIsBNkZ4yc8Vwsq
3wkhN+vDOzNGfKJpJMbk7ALVmaoSYu8BZOMV2Xoy06TJIv60thX+j9Ygz2vKnd0P
9PbxFyKu8ckqNGVqxVSj/DI+HNynvf6WDdMhQCck/nJfKQvqDs7DIx8QPRy9gvva
gq8jhUIm2VgyJA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:09:00 2026 by rpki-client