Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier: yDdI+VOxkqMiHnKHX+wwa0ad7Yx+cz5ISv6Ke1Nkoac=
Subject key identifier: 96:6D:CC:CC:21:62:75:06:73:DE:20:F1:92:B9:31:47:1A:B2:66:DB
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial: 019D29CE1D751E6C8BD4E969161CB495501F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number: 0866
Signing time: Thu 26 Mar 2026 11:01:06 +0000
Manifest this update: Thu 26 Mar 2026 11:01:06 +0000
Manifest next update: Fri 27 Mar 2026 11:01:06 +0000
Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: 8MXGQLcMP4gujFWaWOu6FXLcxVm6uBQ4kuIWUKYwYUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:1d:75:1e:6c:8b:d4:e9:69:16:1c:b4:95:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
Validity
Not Before: Mar 26 11:01:06 2026 GMT
Not After : Mar 27 11:01:06 2026 GMT
Subject: CN=966dcccc2162750673de20f192b931471ab266db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:55:1e:80:2e:1b:35:8b:4a:20:82:1a:62:
3a:4c:f7:a3:ee:94:e4:ab:f5:95:e0:47:e5:c3:b1:
53:dc:52:07:a6:f1:b0:df:97:4c:98:b4:91:9e:31:
84:a4:82:6b:ec:b5:b6:91:80:3b:6b:aa:fa:33:84:
22:d6:e7:62:ac:48:05:38:41:b1:10:a1:52:67:33:
1e:4e:4a:2b:90:4f:bf:71:4e:bc:65:48:99:57:72:
90:0e:30:5b:67:a3:00:8f:d9:67:a4:92:f5:6e:2b:
b8:93:47:35:72:07:4b:e5:99:37:16:44:a2:95:b4:
34:01:e6:33:70:25:3b:42:3c:09:d1:2c:f1:62:57:
17:53:2a:13:a8:9c:3b:7e:14:2c:ae:73:fc:3c:d0:
2b:a0:13:bd:a0:00:5f:ab:e0:71:0c:c9:31:5e:40:
e8:1a:21:b0:39:5b:85:a5:0e:36:d1:7c:42:49:bd:
eb:7c:40:b2:86:d7:0f:71:7f:92:24:ff:62:dc:34:
f0:33:79:4e:61:9e:bb:f1:e5:9a:f6:b4:1b:88:80:
5d:84:6a:ea:f2:23:39:17:55:92:ac:d7:e5:4f:50:
6c:b9:bc:68:b5:05:f1:44:95:a5:cd:03:72:c9:b2:
70:81:cd:a6:5d:5d:aa:f3:cc:be:a6:28:94:41:e8:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:CC:CC:21:62:75:06:73:DE:20:F1:92:B9:31:47:1A:B2:66:DB
X509v3 Authority Key Identifier:
keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:b4:06:47:e0:36:a1:e6:67:ad:63:3a:a0:15:60:2f:58:
a9:2d:ea:52:d8:37:60:4f:ac:fd:22:26:ab:ce:77:49:84:3b:
b4:0c:e7:b9:9d:35:40:a7:8a:b6:20:e0:25:db:92:0d:0c:19:
5e:8d:bc:9f:80:32:4a:cc:d4:e9:dc:76:85:55:93:5a:14:ea:
46:c4:9e:43:69:23:fc:8c:d5:df:f4:09:72:33:a0:92:c8:57:
55:2a:5b:c8:e0:8e:92:5f:8b:f9:e1:71:21:2a:05:a9:ed:5e:
2f:ea:71:fc:48:60:25:e2:58:e4:c9:d2:93:15:88:c7:ad:02:
27:04:6b:40:c8:19:8c:37:95:2d:7b:11:75:64:b9:40:6b:c9:
46:82:03:8b:ab:67:f5:79:c1:d7:d5:2c:8d:4c:22:c9:64:95:
70:a1:f1:11:69:58:a9:f7:13:99:76:f4:32:af:7c:9b:0a:06:
aa:a8:87:f5:d6:ab:95:f7:d6:c1:a4:1e:23:1d:0a:9a:07:e1:
81:63:41:be:6a:57:24:30:8a:39:ba:36:0f:fb:16:9c:e4:5e:
7e:5b:aa:30:94:e9:77:9f:3e:2d:76:a4:09:49:3b:ce:e4:f3:
60:8b:74:9b:69:41:be:4c:f3:94:2f:15:6c:01:b6:d7:ed:7f:
9e:33:db:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzh11HmyL1OlpFhy0lVAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzFjODkyOTk5YmI0NTY0YmNlNDgwYzkyMWI2ZmYxNzIw
NWVjYzYwHhcNMjYwMzI2MTEwMTA2WhcNMjYwMzI3MTEwMTA2WjAzMTEwLwYDVQQD
Eyg5NjZkY2NjYzIxNjI3NTA2NzNkZTIwZjE5MmI5MzE0NzFhYjI2NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJVHoAuGzWLSiCCGmI6TPej7pTk
q/WV4Eflw7FT3FIHpvGw35dMmLSRnjGEpIJr7LW2kYA7a6r6M4Qi1udirEgFOEGx
EKFSZzMeTkorkE+/cU68ZUiZV3KQDjBbZ6MAj9lnpJL1biu4k0c1cgdL5Zk3FkSi
lbQ0AeYzcCU7QjwJ0SzxYlcXUyoTqJw7fhQsrnP8PNAroBO9oABfq+BxDMkxXkDo
GiGwOVuFpQ420XxCSb3rfECyhtcPcX+SJP9i3DTwM3lOYZ678eWa9rQbiIBdhGrq
8iM5F1WSrNflT1BsubxotQXxRJWlzQNyybJwgc2mXV2q88y+piiUQegQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZtzMwhYnUGc94g8ZK5MUcasmbbMB8GA1UdIwQY
MBaAFHVxyJKZm7RWS85IDJIbb/FyBezGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYt
ZTA0ZjhmY2MyY2ExLzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYtZTA0ZjhmY2MyY2Ex
LzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaC0Bkfg
NqHmZ61jOqAVYC9YqS3qUtg3YE+s/SImq853SYQ7tAznuZ01QKeKtiDgJduSDQwZ
Xo28n4AySszU6dx2hVWTWhTqRsSeQ2kj/IzV3/QJcjOgkshXVSpbyOCOkl+L+eFx
ISoFqe1eL+px/EhgJeJY5MnSkxWIx60CJwRrQMgZjDeVLXsRdWS5QGvJRoIDi6tn
9XnB19UsjUwiyWSVcKHxEWlYqfcTmXb0Mq98mwoGqqiH9darlffWwaQeIx0Kmgfh
gWNBvmpXJDCKObo2D/sWnORefluqMJTpd58+LXakCUk7zuTzYIt0m2lBvkzzlC8V
bAG21+1/njPbuw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:34 2026 by rpki-client