Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: b+4W3KGzj3LAUtE3XAUQmjcOZcADVJdwyjlugmqFXmY=
Subject key identifier: 59:01:D0:50:CD:12:5D:9E:32:5F:A4:B9:CA:4E:BE:F8:32:7A:5F:D1
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019D3AF82A52EB4972AAEDAA807536B400DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 19:00:35 +0000
Manifest this update: Sun 29 Mar 2026 19:00:35 +0000
Manifest next update: Mon 30 Mar 2026 19:00:35 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: hzxjJW1UDZ68ESKzdKW6l/rgCTXYICwLF7iRhcq5Fgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:2a:52:eb:49:72:aa:ed:aa:80:75:36:b4:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Mar 29 19:00:35 2026 GMT
Not After : Mar 30 19:00:35 2026 GMT
Subject: CN=5901d050cd125d9e325fa4b9ca4ebef8327a5fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:b1:f9:45:d9:71:68:d9:bf:92:4d:7c:cc:
4f:e5:8c:31:ea:56:29:ff:1c:0e:35:69:87:34:5f:
96:dc:db:c3:f7:6d:83:e0:e7:4d:f8:d3:e1:2d:dd:
d2:79:c0:64:57:35:57:72:0b:b8:03:17:7e:42:91:
58:eb:f1:de:11:0e:90:cd:6e:04:7d:83:20:18:0d:
c5:1c:ed:47:a1:7d:9b:88:97:7f:fc:06:b2:d0:b7:
02:7c:a2:d3:59:e5:2c:91:01:8a:98:2e:82:99:f2:
53:ab:e9:aa:20:3e:36:9c:a2:66:03:de:65:fa:af:
b4:d5:2d:4c:13:f1:3f:d2:f6:df:75:82:f1:8c:f3:
63:71:ba:17:25:e9:85:af:70:d9:04:90:40:5a:f4:
66:31:bd:3c:db:a8:be:ed:2f:2f:c6:78:16:69:77:
b0:da:4f:13:1a:3f:35:7b:b2:d1:be:2b:22:8e:7a:
78:f1:d8:2c:c5:71:03:db:45:6c:ab:29:30:c2:5f:
96:57:3c:0f:ff:24:5d:21:a1:28:f5:c8:6e:8d:af:
62:7a:2d:82:d2:71:3e:76:40:a4:f2:00:fe:40:a9:
0b:82:6e:3b:ea:f3:08:ed:7e:cf:f4:6a:c1:68:78:
7d:2e:55:de:59:1b:03:ec:dc:90:bf:0b:27:ab:cf:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:D0:50:CD:12:5D:9E:32:5F:A4:B9:CA:4E:BE:F8:32:7A:5F:D1
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:91:5f:3c:3c:2e:1e:c6:9c:c4:cd:b9:5f:64:9f:7f:d2:
67:d3:4c:25:7f:4d:dc:86:80:4a:83:67:c6:14:71:a7:7b:d4:
c2:28:3d:f5:c1:c3:80:7d:8e:a3:94:ee:22:f3:37:66:29:5e:
0e:3d:98:03:be:fe:0d:bf:c6:67:b1:4f:58:97:32:c0:1c:63:
25:29:51:73:8b:77:b6:6e:a7:c6:77:e7:8e:8f:4f:ea:2d:b7:
9c:30:74:6b:fd:7f:b6:f2:be:3b:11:63:fd:eb:aa:f8:a6:90:
a4:94:76:84:45:09:24:13:c1:1f:3a:52:3d:4d:ff:25:f2:08:
8a:17:65:50:d0:2a:57:43:5f:6b:40:95:f5:ba:58:70:e5:a8:
1d:df:71:d8:e1:2f:63:ba:f5:a1:5d:bc:5d:48:78:a8:a9:b3:
61:12:15:de:a3:85:b8:06:f5:0c:c7:16:f8:9c:f7:b7:42:6d:
a0:11:9a:d0:a5:94:b3:d2:36:1b:9e:77:92:7c:34:78:95:44:
32:02:93:6a:2d:4a:62:8b:2d:1d:d8:85:68:fe:da:09:a5:7d:
91:82:e5:36:da:60:eb:a3:a7:69:80:ef:51:a2:13:d8:8b:10:
96:53:61:9d:73:c8:a2:6e:3c:00:59:9c:2c:2c:da:f2:1e:79:
d1:40:b3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06+CpS60lyqu2qgHU2tADeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMWExODE2ZGQzNjhiNzdjZjMyYmQyMWE5ZTBiYWQ1ZGY2
Y2RmZjAwHhcNMjYwMzI5MTkwMDM1WhcNMjYwMzMwMTkwMDM1WjAzMTEwLwYDVQQD
Eyg1OTAxZDA1MGNkMTI1ZDllMzI1ZmE0YjljYTRlYmVmODMyN2E1ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgex+UXZcWjZv5JNfMxP5Ywx6lYp
/xwONWmHNF+W3NvD922D4OdN+NPhLd3SecBkVzVXcgu4Axd+QpFY6/HeEQ6QzW4E
fYMgGA3FHO1HoX2biJd//Aay0LcCfKLTWeUskQGKmC6CmfJTq+mqID42nKJmA95l
+q+01S1ME/E/0vbfdYLxjPNjcboXJemFr3DZBJBAWvRmMb0826i+7S8vxngWaXew
2k8TGj81e7LRvisijnp48dgsxXED20Vsqykwwl+WVzwP/yRdIaEo9chuja9iei2C
0nE+dkCk8gD+QKkLgm476vMI7X7P9GrBaHh9LlXeWRsD7NyQvwsnq8+RyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkB0FDNEl2eMl+kucpOvvgyel/RMB8GA1UdIwQY
MBaAFA8aGBbdNot3zzK9IangutXfbN/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEt
NzIzMTE0NmQxNTZmLzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEtNzIzMTE0NmQxNTZm
LzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQORXzw8
Lh7GnMTNuV9kn3/SZ9NMJX9N3IaASoNnxhRxp3vUwig99cHDgH2Oo5TuIvM3Zile
Dj2YA77+Db/GZ7FPWJcywBxjJSlRc4t3tm6nxnfnjo9P6i23nDB0a/1/tvK+OxFj
/euq+KaQpJR2hEUJJBPBHzpSPU3/JfIIihdlUNAqV0Nfa0CV9bpYcOWoHd9x2OEv
Y7r1oV28XUh4qKmzYRIV3qOFuAb1DMcW+Jz3t0JtoBGa0KWUs9I2G553knw0eJVE
MgKTai1KYostHdiFaP7aCaV9kYLlNtpg66OnaYDvUaIT2IsQllNhnXPIom48AFmc
LCza8h550UCzjg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:45 2026 by rpki-client