Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: O7YXqS581RBbqhT03xT1wqYAUzwYOYdLqUjuQ2EVNxs=
Subject key identifier: ED:7A:1F:C8:0A:DD:3E:63:16:36:38:CF:3E:2F:06:1C:2E:39:81:7B
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019D38D3710B4C392C47B9832C0B548D3D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 07FE
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: NcMCzC65EDFoWj8v3ty3Nl9qfW036pN9wTj3ACdagrk=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:71:0b:4c:39:2c:47:b9:83:2c:0b:54:8d:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=ed7a1fc80add3e63163638cf3e2f061c2e39817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:c6:ec:a7:ab:25:e4:e5:6a:a9:ec:6c:47:
ec:73:ba:95:9d:31:7e:97:09:a4:62:87:27:dc:01:
08:45:28:f4:d7:0e:f1:1f:07:96:95:07:3e:61:d1:
a1:05:1f:e9:83:5e:64:1a:65:c7:2b:81:67:36:e9:
6d:6a:72:89:6a:e1:81:36:7a:c1:c2:63:0d:af:54:
ea:0f:61:d5:e4:90:d0:f8:4a:dc:3e:e3:3a:1b:eb:
97:a4:0b:79:f9:04:58:ec:a5:f8:61:ac:40:63:1f:
9d:da:6d:d4:bf:89:ba:76:a4:3b:bc:74:39:45:f8:
49:0c:24:dd:54:4a:f9:f4:05:cb:ec:f7:81:e8:d3:
ec:9e:8e:e8:48:b9:c7:75:f1:f9:d6:fe:4a:74:0c:
f3:dd:43:26:f8:22:63:bb:33:fc:63:7c:ed:40:64:
6f:50:25:10:66:59:b3:c2:fd:92:0b:1a:02:36:3b:
62:96:a5:0f:ad:47:85:5d:d6:19:d0:7f:a1:2a:bc:
f5:2e:06:c3:29:8a:34:ae:35:4b:6f:d1:39:38:8a:
09:ef:d7:3a:47:a2:d3:62:4d:17:9d:83:2e:30:d4:
bd:9d:93:29:4b:12:ac:61:dc:24:ca:1d:e7:7a:84:
59:56:7d:af:d9:99:60:13:06:41:b2:b4:3e:d1:d2:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:1F:C8:0A:DD:3E:63:16:36:38:CF:3E:2F:06:1C:2E:39:81:7B
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:2a:f7:a7:9f:30:18:0c:58:74:14:59:7f:c6:a7:be:56:
01:74:ce:ca:cc:cc:69:65:01:c7:d8:0e:43:04:80:fb:a7:54:
2e:8b:09:51:ab:bb:79:5c:b5:a8:99:5f:51:0d:9e:4e:0f:d8:
a9:40:97:d0:2f:ef:d0:e5:39:0c:2e:4f:20:49:84:08:e4:e2:
03:b8:30:49:e6:db:c7:cf:62:d8:4a:e8:89:df:18:d5:da:4c:
10:93:af:fe:1c:b3:65:fd:1d:4e:3f:bd:12:f5:aa:4c:63:f9:
45:9c:19:01:6c:7c:31:14:7e:3e:6f:95:d8:6d:47:63:46:9e:
cd:b0:f0:41:67:30:40:be:a8:63:04:83:f4:61:77:c8:32:5a:
8e:95:d8:9d:c2:67:38:2c:cc:22:0b:58:45:02:78:43:84:6f:
68:ad:8c:43:9c:5e:6f:1d:69:26:11:80:15:e4:76:2c:fd:cd:
de:37:ca:8c:04:6f:9a:5e:0d:fd:19:cd:b3:13:89:26:f9:9c:
7c:49:35:40:bc:55:30:be:26:6b:b9:65:fc:95:87:ef:1e:df:
ec:54:78:5d:04:41:4f:20:62:45:dd:bd:5e:8c:39:8b:43:08:
be:60:6d:0c:19:a5:37:6a:75:5d:fd:01:fd:3d:91:6c:25:ab:
03:8d:1a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403ELTDksR7mDLAtUjT0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjYwMzI5MDkwMTE0WhcNMjYwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
EyhlZDdhMWZjODBhZGQzZTYzMTYzNjM4Y2YzZTJmMDYxYzJlMzk4MTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZHG7KerJeTlaqnsbEfsc7qVnTF+
lwmkYocn3AEIRSj01w7xHweWlQc+YdGhBR/pg15kGmXHK4FnNultanKJauGBNnrB
wmMNr1TqD2HV5JDQ+ErcPuM6G+uXpAt5+QRY7KX4YaxAYx+d2m3Uv4m6dqQ7vHQ5
RfhJDCTdVEr59AXL7PeB6NPsno7oSLnHdfH51v5KdAzz3UMm+CJjuzP8Y3ztQGRv
UCUQZlmzwv2SCxoCNjtilqUPrUeFXdYZ0H+hKrz1LgbDKYo0rjVLb9E5OIoJ79c6
R6LTYk0XnYMuMNS9nZMpSxKsYdwkyh3neoRZVn2v2ZlgEwZBsrQ+0dIg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO16H8gK3T5jFjY4zz4vBhwuOYF7MB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkawq96ef
MBgMWHQUWX/Gp75WAXTOyszMaWUBx9gOQwSA+6dULosJUau7eVy1qJlfUQ2eTg/Y
qUCX0C/v0OU5DC5PIEmECOTiA7gwSebbx89i2Eroid8Y1dpMEJOv/hyzZf0dTj+9
EvWqTGP5RZwZAWx8MRR+Pm+V2G1HY0aezbDwQWcwQL6oYwSD9GF3yDJajpXYncJn
OCzMIgtYRQJ4Q4RvaK2MQ5xebx1pJhGAFeR2LP3N3jfKjARvml4N/RnNsxOJJvmc
fEk1QLxVML4ma7ll/JWH7x7f7FR4XQRBTyBiRd29Xow5i0MIvmBtDBmlN2p1Xf0B
/T2RbCWrA40aHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:09 2026 by rpki-client