Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: PKmBnuORdvhseuQwW7oqF91C0YsYPhN7Zx/K6VbxQyM=
Subject key identifier: E2:A2:23:F5:2D:34:0B:38:1B:A4:2B:C1:0B:46:C4:C3:32:5D:DB:A8
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019E1ED9E10EDE98F86B4638AF05C4F82057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 01:00:55 +0000
Manifest this update: Wed 13 May 2026 01:00:55 +0000
Manifest next update: Thu 14 May 2026 01:00:55 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: 899INHdsq88NrpR7DL99iZL+4DYVM08NYx7uMJ9j7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e1:0e:de:98:f8:6b:46:38:af:05:c4:f8:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: May 13 01:00:55 2026 GMT
Not After : May 14 01:00:55 2026 GMT
Subject: CN=e2a223f52d340b381ba42bc10b46c4c3325ddba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:38:f4:bb:60:8c:30:e7:3d:b8:b6:70:b5:2e:
ab:36:15:e9:f5:64:c1:92:2b:d0:e5:7c:e9:82:72:
0f:34:b5:6a:7f:e3:7e:86:f5:25:f6:e4:53:3b:d5:
8b:51:f5:41:b6:13:e0:2c:aa:b9:d9:b1:fb:90:da:
fe:5d:f9:71:ea:40:54:53:d0:a6:a6:15:5a:ad:b8:
30:9a:6d:7a:99:39:7d:86:1b:62:d8:74:7e:b2:6f:
18:a4:f2:35:e6:e7:28:11:a6:07:a9:12:67:97:05:
bb:97:a8:38:c9:62:dd:01:38:8c:86:98:9a:61:6d:
15:02:ef:4e:ca:15:3b:91:27:7d:40:0f:87:67:f8:
9b:99:fb:65:2f:ed:90:91:e7:e2:3d:ae:21:c7:c5:
20:dd:96:14:e1:a0:c1:82:44:8e:2f:a6:bb:c9:e1:
0c:4c:80:bd:71:78:dc:bd:d4:27:ca:5b:cc:25:07:
c5:e3:b6:b3:39:64:b0:92:3f:ee:d4:98:3b:79:10:
0b:e0:a2:28:c7:5c:d0:9d:f8:59:f3:f8:7b:1a:aa:
88:ce:d7:24:5d:68:cd:39:84:2f:70:9d:50:5b:8f:
d4:e1:c5:3c:df:cc:3b:3a:4d:aa:41:2b:f9:d9:3f:
de:05:53:9f:45:33:d0:72:a0:47:e2:fb:0a:59:76:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:23:F5:2D:34:0B:38:1B:A4:2B:C1:0B:46:C4:C3:32:5D:DB:A8
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:d5:da:d1:db:51:68:67:79:28:ea:20:4d:85:c4:9c:37:
1f:ea:f4:92:37:26:71:9c:67:6a:8c:1f:b1:01:ca:ac:64:d8:
d3:43:17:d0:36:c8:b6:16:3f:2a:b5:71:a6:ca:85:ce:29:d6:
cf:33:23:46:48:0a:90:3a:15:f7:6a:d6:4d:04:64:d3:03:4e:
51:de:3d:75:a0:34:e6:f7:4c:d0:e3:0a:6d:be:cc:dd:7a:76:
f7:e0:b8:1a:1f:60:86:9d:79:72:f9:9e:ed:6e:bd:66:9e:23:
1b:b8:28:42:b3:35:25:43:0b:cb:de:f2:a2:8f:26:43:ab:74:
a9:89:14:ca:75:b3:8e:37:6a:e6:fe:21:10:f0:69:b2:13:d0:
55:72:26:a0:a2:6f:b7:7f:95:10:9d:a5:49:a2:52:cd:eb:4c:
35:7c:3d:d4:f5:1f:22:df:fc:cb:a0:30:f4:63:be:47:10:59:
81:cd:71:bb:7f:4b:9c:f2:27:c3:0b:b2:5e:29:02:e3:7c:48:
f5:b2:a1:10:db:47:49:21:1d:56:ef:e5:b9:47:7e:4a:64:91:
f5:ca:15:8f:85:fb:fe:98:33:72:8f:ad:79:ae:b7:0d:c0:c8:
37:ba:4c:45:22:78:57:ff:b1:cb:00:6c:c4:0d:2e:fc:20:0f:
45:31:8c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2eEO3pj4a0Y4rwXE+CBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzg3MWRiNTA5OGJmODM4ZmZlYTk5YTAyZjY3OTM2OGIz
ZTFhYjIwHhcNMjYwNTEzMDEwMDU1WhcNMjYwNTE0MDEwMDU1WjAzMTEwLwYDVQQD
EyhlMmEyMjNmNTJkMzQwYjM4MWJhNDJiYzEwYjQ2YzRjMzMyNWRkYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/jj0u2CMMOc9uLZwtS6rNhXp9WTB
kivQ5XzpgnIPNLVqf+N+hvUl9uRTO9WLUfVBthPgLKq52bH7kNr+Xflx6kBUU9Cm
phVarbgwmm16mTl9hhti2HR+sm8YpPI15ucoEaYHqRJnlwW7l6g4yWLdATiMhpia
YW0VAu9OyhU7kSd9QA+HZ/ibmftlL+2QkefiPa4hx8Ug3ZYU4aDBgkSOL6a7yeEM
TIC9cXjcvdQnylvMJQfF47azOWSwkj/u1Jg7eRAL4KIox1zQnfhZ8/h7GqqIztck
XWjNOYQvcJ1QW4/U4cU838w7Ok2qQSv52T/eBVOfRTPQcqBH4vsKWXbHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKiI/UtNAs4G6QrwQtGxMMyXduoMB8GA1UdIwQY
MBaAFA3IcdtQmL+Dj/6pmgL2eTaLPhqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUt
NjViZTQ0ZDBkYmQ0LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUtNjViZTQ0ZDBkYmQ0
LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdzV2tHb
UWhneSjqIE2FxJw3H+r0kjcmcZxnaowfsQHKrGTY00MX0DbIthY/KrVxpsqFzinW
zzMjRkgKkDoV92rWTQRk0wNOUd49daA05vdM0OMKbb7M3Xp29+C4Gh9ghp15cvme
7W69Zp4jG7goQrM1JUMLy97yoo8mQ6t0qYkUynWzjjdq5v4hEPBpshPQVXImoKJv
t3+VEJ2lSaJSzetMNXw91PUfIt/8y6Aw9GO+RxBZgc1xu39LnPInwwuyXikC43xI
9bKhENtHSSEdVu/luUd+SmSR9coVj4X7/pgzco+tea63DcDIN7pMRSJ4V/+xywBs
xA0u/CAPRTGMaQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:36 2026 by rpki-client