
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
File: DIXrpeHV0Efz2lfeYnX968At-5g.mft (raw, json)
Hash identifier: D1KApZJEuuGAsmJl9q0a6uhDMabsAgBWEy3NeQrPd3U=
Subject key identifier: E6:57:3F:9E:3E:0A:43:D1:5A:B4:12:CF:D1:C2:DB:6B:E5:C3:71:9D
Authority key identifier: 0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
Certificate issuer: /CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Certificate serial: 019F8F7E85FE03972460518E656930B2F2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
Manifest number: A8
Signing time: Thu 23 Jul 2026 15:01:01 +0000
Manifest this update: Thu 23 Jul 2026 15:01:01 +0000
Manifest next update: Fri 24 Jul 2026 15:01:01 +0000
Files and hashes: 1: 07X4-aly_fwzIPkdRTVK5Fls7IE.asa (hash: PSrwFcPr+F0Ok6ZKKWr4uBgYHzYBf4fKh4J9YvDEC+k=)
2: DIXrpeHV0Efz2lfeYnX968At-5g.crl (hash: xCzQftPtk/T7Q0qVntV0pKltelGWgbCfYduVC5d8UAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:85:fe:03:97:24:60:51:8e:65:69:30:b2:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Validity
Not Before: Jul 23 15:01:01 2026 GMT
Not After : Jul 24 15:01:01 2026 GMT
Subject: CN=e6573f9e3e0a43d15ab412cfd1c2db6be5c3719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:cb:f6:d8:4c:2f:24:28:39:47:f4:8f:2d:
86:5a:e4:cf:61:68:e3:d9:ce:93:ee:fc:72:72:f8:
09:f1:03:13:7f:53:ef:f4:7d:9c:00:6b:13:0b:3c:
3f:e4:eb:1a:d8:d8:e1:46:d8:46:30:13:b5:15:1a:
1e:5b:5f:e8:9e:bb:d0:33:cd:28:64:6a:0f:97:0c:
1d:e3:cd:3a:cc:ea:e5:9d:67:0e:bd:00:88:8e:bf:
1e:a9:11:97:c9:bf:18:e0:41:bb:eb:8d:a9:c8:a9:
a7:b2:c9:cc:f0:fd:4f:a1:f7:3b:c6:92:2a:8e:35:
1e:96:bf:de:6b:77:93:f8:8a:b9:b9:f5:4d:d9:c3:
7f:98:73:29:52:d4:d2:98:ec:a3:b1:72:74:01:e3:
be:01:23:1f:90:39:53:d1:de:66:e9:36:18:43:33:
44:72:99:e8:0d:5c:5a:8a:e1:b6:ae:89:8c:3f:79:
1e:78:9b:7c:bb:5d:43:0c:01:0d:91:6a:c4:bd:7a:
ca:6d:f6:e1:6c:e0:a1:f0:21:db:27:45:87:5c:59:
81:26:9e:de:a7:db:f9:24:d5:17:e0:b1:43:4b:f4:
16:90:87:3b:a4:46:c4:a9:fc:20:03:c8:9a:74:d3:
d7:01:ad:44:ad:3c:2d:c8:ad:de:90:e3:8d:d8:07:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:3F:9E:3E:0A:43:D1:5A:B4:12:CF:D1:C2:DB:6B:E5:C3:71:9D
X509v3 Authority Key Identifier:
keyid:0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:d6:bf:ff:1a:c8:d6:4f:b9:82:66:e2:43:4b:ed:5b:86:
51:c4:3c:6b:73:e4:31:b4:33:27:e8:30:2b:ff:b3:a1:d2:18:
0c:c2:eb:cf:5b:01:4b:d2:fa:bd:60:a6:02:22:d6:3b:29:58:
43:08:d1:0b:29:68:d4:22:de:c1:a7:44:0f:29:67:e4:56:18:
97:1e:aa:af:e2:2f:4e:ee:4f:1c:89:b2:81:a9:39:be:c7:ee:
2b:3d:f6:20:f1:9d:3e:e2:07:0d:af:13:3f:f0:f9:25:90:05:
2f:b3:b5:99:aa:ea:d9:aa:7e:68:1c:d5:28:ee:3a:0b:df:45:
ec:19:e3:27:9f:06:7e:fc:a3:c0:ed:21:af:46:14:56:54:74:
65:71:b7:73:19:a6:11:7e:78:41:9d:cd:2e:ab:b8:e3:a6:1d:
93:d9:7f:07:a0:08:fc:3e:0a:90:4b:92:e5:d3:7f:c1:d4:55:
ec:af:6a:65:99:88:a6:67:cf:dd:06:f6:a4:fa:51:ea:de:9f:
ac:cb:1d:af:37:8a:cd:c4:3d:8c:d1:bb:b9:4a:2b:2e:48:28:
31:47:76:73:f2:cc:2d:e6:69:83:fc:b9:8b:09:b6:dc:0d:7a:
ee:e1:36:af:1e:9a:72:6b:fd:a5:d8:71:d0:c9:87:4c:92:26:
14:12:ac:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfoX+A5ckYFGOZWkwsvLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODVlYmE1ZTFkNWQwNDdmM2RhNTdkZTYyNzVmZGViYzAy
ZGZiOTgwHhcNMjYwNzIzMTUwMTAxWhcNMjYwNzI0MTUwMTAxWjAzMTEwLwYDVQQD
EyhlNjU3M2Y5ZTNlMGE0M2QxNWFiNDEyY2ZkMWMyZGI2YmU1YzM3MTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6jL9thMLyQoOUf0jy2GWuTPYWjj
2c6T7vxycvgJ8QMTf1Pv9H2cAGsTCzw/5Osa2NjhRthGMBO1FRoeW1/onrvQM80o
ZGoPlwwd4806zOrlnWcOvQCIjr8eqRGXyb8Y4EG7642pyKmnssnM8P1Pofc7xpIq
jjUelr/ea3eT+Iq5ufVN2cN/mHMpUtTSmOyjsXJ0AeO+ASMfkDlT0d5m6TYYQzNE
cpnoDVxaiuG2romMP3keeJt8u11DDAENkWrEvXrKbfbhbOCh8CHbJ0WHXFmBJp7e
p9v5JNUX4LFDS/QWkIc7pEbEqfwgA8iadNPXAa1ErTwtyK3ekOON2AeAIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZXP54+CkPRWrQSz9HC22vlw3GdMB8GA1UdIwQY
MBaAFAyF66Xh1dBH89pX3mJ1/evALfuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElYcnBlSFYwRWZ6MmxmZVluWDk2OEF0LTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80MzBmMDgtNjMzMi00ZGM2LTlmMmMt
MjBkNDJlNDkzMTNlLzEvRElYcnBlSFYwRWZ6MmxmZVluWDk2OEF0LTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80MzBmMDgtNjMzMi00ZGM2LTlmMmMtMjBkNDJlNDkzMTNl
LzEvRElYcnBlSFYwRWZ6MmxmZVluWDk2OEF0LTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOnWv/8a
yNZPuYJm4kNL7VuGUcQ8a3PkMbQzJ+gwK/+zodIYDMLrz1sBS9L6vWCmAiLWOylY
QwjRCylo1CLewadEDyln5FYYlx6qr+IvTu5PHImygak5vsfuKz32IPGdPuIHDa8T
P/D5JZAFL7O1marq2ap+aBzVKO46C99F7BnjJ58GfvyjwO0hr0YUVlR0ZXG3cxmm
EX54QZ3NLqu446Ydk9l/B6AI/D4KkEuS5dN/wdRV7K9qZZmIpmfP3Qb2pPpR6t6f
rMsdrzeKzcQ9jNG7uUorLkgoMUd2c/LMLeZpg/y5iwm23A167uE2rx6acmv9pdhx
0MmHTJImFBKsLA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:05 2026 by rpki-client