Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: gkgyeQoVHwajCBZuv8QzfsUeIyCe9KnsCiED+EdezfI=
Subject key identifier: B2:1E:5D:25:3C:00:F0:D5:08:24:01:14:C3:A5:26:95:1B:8D:67:3C
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019D3865764301042356592C505A83CC07B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 07F9
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: mpsfh7opaJQKbb1o6XUI1UoR89Z1QH6K0SAZmSzzUPg=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:76:43:01:04:23:56:59:2c:50:5a:83:cc:07:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=b21e5d253c00f0d508240114c3a526951b8d673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:91:ab:3e:c0:1d:81:f5:7a:a5:8a:e6:ab:
0d:8d:f0:30:93:47:d9:ba:cc:eb:1f:1c:42:c5:a7:
32:dd:fa:45:76:13:49:79:7d:ce:d8:99:fc:bb:f0:
d3:2c:d8:a3:b0:fc:e2:19:85:28:0c:cf:b4:8e:ae:
58:8c:36:71:3b:75:bf:f4:6c:2c:64:a3:dc:f7:60:
c2:f0:51:2d:47:ab:d7:3a:ea:89:af:59:ba:80:1c:
2e:60:84:0c:cf:6a:f4:36:b4:42:60:7f:6a:ce:e7:
15:54:4b:ed:5e:32:57:b4:11:81:20:63:f2:54:83:
db:86:54:7b:fb:46:b1:9d:99:1c:88:c0:7d:8f:70:
fc:08:4a:19:b5:35:c7:f4:18:63:09:95:92:72:ec:
ff:1e:f4:43:0e:05:70:69:7a:21:05:83:2a:0b:e6:
f5:a9:52:03:4a:66:75:48:c1:a7:bb:32:21:7a:98:
f5:97:f7:14:58:85:a4:e0:21:11:74:00:12:d5:47:
1d:35:16:92:be:5d:03:67:aa:04:b7:f5:60:6a:77:
8c:ce:ab:be:52:0b:d0:e5:84:3b:d5:50:14:d5:c6:
6c:e3:71:8d:fd:ee:7a:8d:82:f9:dc:f1:0e:c0:fb:
03:72:9a:a7:18:87:7b:c3:d1:7b:89:f0:ca:fa:bf:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:5D:25:3C:00:F0:D5:08:24:01:14:C3:A5:26:95:1B:8D:67:3C
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:7b:b3:c6:5b:95:ed:f6:e4:ae:d9:b4:2f:b5:42:9c:ce:
8e:51:9d:67:3c:38:79:e3:ec:05:bf:55:ec:99:85:54:77:9a:
f4:59:bc:9c:b9:cf:cc:32:5d:ef:00:be:25:bf:73:73:0a:0c:
ea:24:d9:9d:b7:63:2f:e1:26:4d:53:45:50:a0:d4:7b:da:60:
1e:0d:f5:2c:d9:c1:6b:41:66:5d:e6:93:30:f0:59:61:9f:dd:
4b:20:18:87:6c:26:06:3d:db:13:d2:4b:cb:74:0e:db:02:fe:
42:a9:10:2c:d3:32:ed:6d:dc:55:f6:03:c7:a2:f3:2f:c2:b0:
ec:c1:0e:7c:1d:b7:d7:8a:3c:78:8f:a3:ed:57:0b:58:57:8b:
c5:03:29:b4:22:f1:68:ab:d5:5b:40:52:43:7c:10:28:1a:e6:
c5:f9:62:85:ec:f3:0e:8c:c3:dc:73:3a:da:a1:31:70:f1:fe:
c5:13:ab:3a:42:07:7a:73:76:58:1f:c4:2e:cb:d2:bc:2f:bd:
a6:e2:c6:74:80:ff:f9:5d:6c:72:2a:81:9b:e1:89:71:5b:f3:
21:11:63:d9:0f:a5:ab:70:b8:58:4b:e9:9e:2b:93:3a:8e:5d:
a8:d9:00:d5:1c:4f:b7:5f:ed:b0:d7:8f:96:6f:ae:88:d7:e2:
79:b2:ce:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXZDAQQjVlksUFqDzAe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl
YmEzNTMwHhcNMjYwMzI5MDcwMTA2WhcNMjYwMzMwMDcwMTA2WjAzMTEwLwYDVQQD
EyhiMjFlNWQyNTNjMDBmMGQ1MDgyNDAxMTRjM2E1MjY5NTFiOGQ2NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNWRqz7AHYH1eqWK5qsNjfAwk0fZ
uszrHxxCxacy3fpFdhNJeX3O2Jn8u/DTLNijsPziGYUoDM+0jq5YjDZxO3W/9Gws
ZKPc92DC8FEtR6vXOuqJr1m6gBwuYIQMz2r0NrRCYH9qzucVVEvtXjJXtBGBIGPy
VIPbhlR7+0axnZkciMB9j3D8CEoZtTXH9BhjCZWScuz/HvRDDgVwaXohBYMqC+b1
qVIDSmZ1SMGnuzIhepj1l/cUWIWk4CERdAAS1UcdNRaSvl0DZ6oEt/VganeMzqu+
UgvQ5YQ71VAU1cZs43GN/e56jYL53PEOwPsDcpqnGId7w9F7ifDK+r/jXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIeXSU8APDVCCQBFMOlJpUbjWc8MB8GA1UdIwQY
MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt
ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4
LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgN7s8Zb
le325K7ZtC+1QpzOjlGdZzw4eePsBb9V7JmFVHea9Fm8nLnPzDJd7wC+Jb9zcwoM
6iTZnbdjL+EmTVNFUKDUe9pgHg31LNnBa0FmXeaTMPBZYZ/dSyAYh2wmBj3bE9JL
y3QO2wL+QqkQLNMy7W3cVfYDx6LzL8Kw7MEOfB2314o8eI+j7VcLWFeLxQMptCLx
aKvVW0BSQ3wQKBrmxflihezzDozD3HM62qExcPH+xROrOkIHenN2WB/ELsvSvC+9
puLGdID/+V1sciqBm+GJcVvzIRFj2Q+lq3C4WEvpniuTOo5dqNkA1RxPt1/tsNeP
lm+uiNfiebLO/Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:22 2026 by rpki-client