Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: 9w1qZ7UOtP5IZOxFVFND0AARR8wIUyVlJPLlNmATlqs=
Subject key identifier: 02:02:81:58:5D:FC:D7:E3:82:79:B8:85:05:3C:77:E9:16:37:38:B8
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 019D36E4A24F6C69D4B96C39E5FA3CE9EFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0CDC
Signing time: Sun 29 Mar 2026 00:00:46 +0000
Manifest this update: Sun 29 Mar 2026 00:00:46 +0000
Manifest next update: Mon 30 Mar 2026 00:00:46 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: SW6IEb1rQ2zMUFwPYcQLCs0k2jCLYPWD5MRrQvxIC6A=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:a2:4f:6c:69:d4:b9:6c:39:e5:fa:3c:e9:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Mar 29 00:00:46 2026 GMT
Not After : Mar 30 00:00:46 2026 GMT
Subject: CN=020281585dfcd7e38279b885053c77e9163738b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:f4:31:3e:42:6f:16:6b:82:8a:31:2f:39:
c4:95:c2:93:1d:98:9e:71:b3:8a:3b:db:8a:e6:43:
c9:05:db:4c:4d:37:d6:ab:05:f5:b2:68:0d:17:88:
ea:e5:2d:74:36:29:02:d8:f5:30:2b:37:3c:82:9e:
16:b7:a7:f9:76:48:22:e9:77:c2:67:10:1f:4d:18:
15:ee:a7:6e:1d:71:16:d9:0a:71:b5:b8:09:81:37:
c1:3d:b9:f0:cd:d1:71:81:1a:15:7e:9a:e5:c4:e5:
30:8f:4f:33:b6:58:4a:a2:8d:bf:c8:28:10:6c:48:
52:ba:b7:ff:dd:d0:51:42:95:a5:da:71:8f:0d:c1:
d4:22:d3:00:73:16:46:2e:a2:ad:a4:33:05:4e:9c:
03:46:65:6e:88:a1:85:5d:5d:5c:a5:7f:e6:a4:aa:
bb:61:ed:70:52:ef:7f:34:cc:29:58:ec:b8:d8:79:
49:e0:2e:3b:8b:bc:b1:7c:cb:ab:2c:09:bc:a7:a3:
bf:a3:f7:2b:cc:d3:e2:a6:8a:31:bc:0c:53:90:0a:
f6:6b:0c:74:de:5f:a9:4f:f8:8f:09:bd:63:ad:77:
90:01:e9:37:2d:4a:32:62:40:c1:13:7f:3c:34:ad:
67:61:11:15:60:e4:f4:a5:8c:a2:8b:0c:32:d4:bd:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:81:58:5D:FC:D7:E3:82:79:B8:85:05:3C:77:E9:16:37:38:B8
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:17:b8:0b:bf:53:07:1f:be:30:b6:71:40:ae:03:1e:60:fd:
dd:0c:fa:ab:60:da:ae:35:d7:05:35:78:46:b0:15:6e:cb:cf:
ff:12:41:6a:41:77:72:52:ba:fc:2a:eb:b3:c8:37:5d:1d:7d:
c8:d6:a7:3a:a2:6c:9a:cb:90:8c:f8:d6:f7:e2:96:ff:b8:b8:
d6:43:fe:13:56:43:f9:e5:a4:22:c2:c1:ed:6d:13:45:59:9d:
3d:a2:a1:95:2d:63:0d:65:c7:d8:a7:73:5e:bc:32:c0:21:27:
f4:10:6b:e1:8b:43:de:53:47:42:34:11:b3:ce:36:04:36:1d:
65:e3:74:7f:14:b6:82:ad:17:fe:eb:21:ca:07:51:88:c5:82:
4d:5a:e4:62:32:24:2c:10:77:36:d4:e5:db:b6:39:e6:49:1e:
f5:39:52:e7:01:42:31:5b:cb:0e:17:a6:1f:88:5f:ea:fb:af:
85:1f:05:d4:46:40:20:01:06:b6:5f:fd:c8:25:99:39:90:c2:
58:b9:4f:53:a7:23:0b:26:88:d5:fc:a9:05:fe:b6:6a:66:d4:
20:f0:83:98:85:49:35:b9:ca:56:5f:cb:12:1c:a6:cc:5a:6b:
9a:f9:91:76:ed:cf:89:38:4f:2c:df:5b:e1:bb:a9:99:00:a7:
3d:47:ed:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025KJPbGnUuWw55fo86e+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2
NjM3NWMwHhcNMjYwMzI5MDAwMDQ2WhcNMjYwMzMwMDAwMDQ2WjAzMTEwLwYDVQQD
EygwMjAyODE1ODVkZmNkN2UzODI3OWI4ODUwNTNjNzdlOTE2MzczOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFX0MT5CbxZrgooxLznElcKTHZie
cbOKO9uK5kPJBdtMTTfWqwX1smgNF4jq5S10NikC2PUwKzc8gp4Wt6f5dkgi6XfC
ZxAfTRgV7qduHXEW2QpxtbgJgTfBPbnwzdFxgRoVfprlxOUwj08ztlhKoo2/yCgQ
bEhSurf/3dBRQpWl2nGPDcHUItMAcxZGLqKtpDMFTpwDRmVuiKGFXV1cpX/mpKq7
Ye1wUu9/NMwpWOy42HlJ4C47i7yxfMurLAm8p6O/o/crzNPipooxvAxTkAr2awx0
3l+pT/iPCb1jrXeQAek3LUoyYkDBE388NK1nYREVYOT0pYyiiwwy1L2fgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAICgVhd/Nfjgnm4hQU8d+kWNzi4MB8GA1UdIwQY
MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct
ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2
LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhe4C79T
Bx++MLZxQK4DHmD93Qz6q2DarjXXBTV4RrAVbsvP/xJBakF3clK6/Crrs8g3XR19
yNanOqJsmsuQjPjW9+KW/7i41kP+E1ZD+eWkIsLB7W0TRVmdPaKhlS1jDWXH2Kdz
XrwywCEn9BBr4YtD3lNHQjQRs842BDYdZeN0fxS2gq0X/ushygdRiMWCTVrkYjIk
LBB3NtTl27Y55kke9TlS5wFCMVvLDhemH4hf6vuvhR8F1EZAIAEGtl/9yCWZOZDC
WLlPU6cjCyaI1fypBf62ambUIPCDmIVJNbnKVl/LEhymzFprmvmRdu3PiThPLN9b
4bupmQCnPUft1A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:50 2026 by rpki-client