Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: 6CQUKHMyqUhDvyZkD9F0yGmkNHjrR+CHiNgXlp9Y25E=
Subject key identifier: DF:68:69:FA:45:A5:A2:82:39:C8:89:D5:24:F2:C4:8C:29:68:52:E1
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019D3789636BCF9A8B61A533A1FE13E9EFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1326
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: m8Mmjg3S5u2dK7Fr9molVg+nl9dAGJPJu2E2Cpsr6YQ=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:63:6b:cf:9a:8b:61:a5:33:a1:fe:13:e9:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=df6869fa45a5a28239c889d524f2c48c296852e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:9c:81:65:32:4d:5f:fd:ac:e3:78:fb:84:
96:9b:44:46:d3:1e:a8:43:22:cf:49:86:65:f0:0c:
77:cd:e7:18:0a:e9:f9:61:50:74:57:b0:f9:98:0b:
ff:3a:13:e3:67:8f:64:1e:7a:c0:2e:c2:e9:73:2e:
49:6d:f3:56:95:b0:d4:87:4f:4c:78:ff:91:21:ff:
2a:aa:4f:5d:aa:7a:e8:60:5c:d0:91:50:ed:d8:65:
0b:50:c5:df:6e:01:18:c9:12:9b:5d:d9:6e:a2:d3:
24:06:ed:e1:55:4c:0b:bf:47:3e:54:eb:25:c2:c2:
4c:0c:82:8a:b2:ff:df:3b:6d:bf:68:e4:8f:16:8d:
e9:5b:4a:0f:e0:ed:2f:33:ae:dd:c8:5b:29:69:03:
ed:ee:90:11:26:48:fb:70:b0:e4:1f:0d:ae:2a:34:
81:8d:c9:85:6b:b9:51:2c:89:d1:c7:3e:2b:53:d2:
5a:e0:33:a7:f9:e7:e0:51:06:12:8e:79:76:8f:ff:
55:40:62:c5:07:ce:aa:32:3d:4a:aa:20:c7:4b:b6:
16:0d:3d:5d:ea:8a:a8:3a:97:4e:db:b8:f3:a1:ea:
d5:89:ff:f0:bf:fa:f5:c4:c8:6e:81:7d:40:82:ce:
50:04:8d:01:17:a3:4a:b0:14:33:dc:d1:ba:d4:6c:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:69:FA:45:A5:A2:82:39:C8:89:D5:24:F2:C4:8C:29:68:52:E1
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:74:61:ce:f8:86:94:e0:84:85:07:2e:5b:76:69:78:a7:22:
67:5c:0e:5c:a0:5f:96:63:ca:12:84:f4:b4:8c:03:9f:5d:63:
ca:7c:06:66:1a:44:3f:38:10:58:32:39:1f:f7:2e:d5:b4:5e:
94:d1:97:f3:1a:5b:df:0a:01:5e:f0:b9:ae:ed:de:31:e2:16:
11:aa:20:7a:66:85:b6:48:1a:fd:13:2c:14:ef:34:da:ec:ca:
7b:43:fc:e6:df:0e:f2:eb:49:d4:d2:10:e4:14:9c:0b:34:1f:
a6:ff:28:92:34:be:6c:2e:b7:73:7e:dc:6b:ff:0f:72:5a:63:
e0:34:54:10:18:c1:21:ee:cc:c8:3b:9c:84:f0:bf:9d:a3:91:
1b:52:15:63:51:db:f5:cc:b5:31:13:b7:45:39:db:49:86:a4:
16:39:2b:78:72:b5:0a:b4:fc:78:0a:e9:c3:88:88:97:1a:fd:
b1:a1:42:62:21:e6:c7:c9:b7:f0:4a:71:94:e8:32:3c:66:54:
47:f1:27:b8:f3:7e:c1:dd:54:73:10:55:98:75:cf:3b:fd:fb:
69:b4:93:a8:4a:a4:8f:c9:a9:f5:ad:fa:2d:37:9f:26:50:05:
de:a9:d1:cf:45:3e:31:e2:ca:e8:32:c9:c4:0c:ae:6e:a0:12:
52:33:84:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWNrz5qLYaUzof4T6e/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjYwMzI5MDMwMDQzWhcNMjYwMzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhkZjY4NjlmYTQ1YTVhMjgyMzljODg5ZDUyNGYyYzQ4YzI5Njg1MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4icgWUyTV/9rON4+4SWm0RG0x6o
QyLPSYZl8Ax3zecYCun5YVB0V7D5mAv/OhPjZ49kHnrALsLpcy5JbfNWlbDUh09M
eP+RIf8qqk9dqnroYFzQkVDt2GULUMXfbgEYyRKbXdluotMkBu3hVUwLv0c+VOsl
wsJMDIKKsv/fO22/aOSPFo3pW0oP4O0vM67dyFspaQPt7pARJkj7cLDkHw2uKjSB
jcmFa7lRLInRxz4rU9Ja4DOn+efgUQYSjnl2j/9VQGLFB86qMj1KqiDHS7YWDT1d
6oqoOpdO27jzoerVif/wv/r1xMhugX1Ags5QBI0BF6NKsBQz3NG61GxzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9oafpFpaKCOciJ1STyxIwpaFLhMB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3RhzviG
lOCEhQcuW3ZpeKciZ1wOXKBflmPKEoT0tIwDn11jynwGZhpEPzgQWDI5H/cu1bRe
lNGX8xpb3woBXvC5ru3eMeIWEaogemaFtkga/RMsFO802uzKe0P85t8O8utJ1NIQ
5BScCzQfpv8okjS+bC63c37ca/8Pclpj4DRUEBjBIe7MyDuchPC/naORG1IVY1Hb
9cy1MRO3RTnbSYakFjkreHK1CrT8eArpw4iIlxr9saFCYiHmx8m38EpxlOgyPGZU
R/EnuPN+wd1UcxBVmHXPO/37abSTqEqkj8mp9a36LTefJlAF3qnRz0U+MeLK6DLJ
xAyubqASUjOEIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client