Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: 9kCd1YmlEWgw7yKkq1auTYsud/a9oFxxzcfXVFCKUPM=
Subject key identifier: 2D:DC:BF:5C:9B:2A:9E:2A:E9:14:2D:06:56:5F:A4:16:68:D9:8B:2F
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019D3865E2431B1596C2C7F5136E02BC1939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0E1A
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: pd1TAv5lMHulmhb1cNe0HKTLNV35+vx4b6p7EL28huM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e2:43:1b:15:96:c2:c7:f5:13:6e:02:bc:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=2ddcbf5c9b2a9e2ae9142d06565fa41668d98b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:f7:32:a2:c1:ac:75:48:77:4c:9c:2d:0a:
c7:dd:a7:c6:6f:2a:af:25:26:86:e5:93:7c:b6:d2:
5e:68:87:0e:7d:a4:90:74:e7:2c:64:d5:74:46:80:
10:78:e7:99:c1:b1:04:a1:b5:68:b4:e2:52:9e:12:
89:1e:bd:c9:cc:e3:ff:a4:a5:a3:1b:13:97:5b:09:
9b:50:d2:1c:45:34:36:4b:b3:56:8d:48:72:4c:e8:
46:00:47:b9:25:75:be:79:fc:24:0b:35:a6:8a:5c:
af:34:34:27:9c:f8:bb:df:ab:ae:50:70:86:0e:14:
4a:52:fa:aa:7b:96:0c:4c:b3:f7:99:51:4d:99:ad:
0a:37:4b:7f:b0:c9:e5:d0:86:75:51:77:22:88:7c:
65:d2:7b:78:85:b9:86:76:88:7b:30:df:73:ed:65:
8e:96:08:eb:f1:7a:2b:54:06:62:7b:dd:8d:f4:27:
ad:de:59:e7:4f:ef:40:a1:6e:f9:a6:f0:23:00:2b:
58:05:20:dd:61:d0:bc:18:4e:af:bc:e1:62:cb:f1:
c5:0b:d1:c4:f6:4e:21:8b:e7:3f:58:a1:e8:09:a8:
b5:57:e5:dd:f0:43:1c:f6:85:ff:10:0f:72:cb:bd:
f6:ef:47:b9:b7:7b:be:8c:ad:5e:0b:c3:f7:1f:78:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:BF:5C:9B:2A:9E:2A:E9:14:2D:06:56:5F:A4:16:68:D9:8B:2F
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:33:f7:0f:fd:d7:bc:9a:14:cf:20:a0:b7:03:31:d3:69:fb:
a0:8f:18:93:2e:72:73:7b:31:34:b3:40:04:de:53:26:f8:92:
4a:e0:60:de:4b:12:7f:66:ca:4d:af:92:67:64:13:59:a5:3d:
cd:49:b5:b3:fb:44:24:da:44:90:d5:c7:ed:24:53:5f:89:51:
ff:58:80:d8:54:09:19:c0:fe:63:1e:76:3d:93:2d:43:0d:70:
b3:b7:c0:7b:37:2f:bf:49:d7:50:07:42:df:06:f2:cb:01:26:
ee:3d:3c:e6:d7:67:7b:69:fd:a5:81:84:8e:76:02:00:d6:bb:
6f:f9:88:fb:d6:13:a1:bd:cf:3e:5a:b9:b7:b1:e8:54:59:db:
86:9b:e5:10:d1:14:89:c4:ec:b4:79:6a:76:75:45:a5:17:64:
ac:0b:2a:57:e4:d8:11:1b:7e:88:9b:99:fe:19:b6:74:5e:96:
42:08:f0:30:6c:16:17:e0:d2:c3:8b:b4:ff:a8:f7:c6:b0:29:
5c:bb:42:94:c2:1b:c7:66:f2:41:19:f7:38:52:24:26:3a:60:
76:be:33:8e:a3:6b:d3:42:ca:c2:00:a6:e9:cf:39:9c:95:92:
58:1d:bb:96:73:31:51:bc:34:b6:76:4d:fa:5c:ca:ca:da:08:
74:1a:85:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeJDGxWWwsf1E24CvBk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjYwMzI5MDcwMTM0WhcNMjYwMzMwMDcwMTM0WjAzMTEwLwYDVQQD
EygyZGRjYmY1YzliMmE5ZTJhZTkxNDJkMDY1NjVmYTQxNjY4ZDk4YjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R33MqLBrHVId0ycLQrH3afGbyqv
JSaG5ZN8ttJeaIcOfaSQdOcsZNV0RoAQeOeZwbEEobVotOJSnhKJHr3JzOP/pKWj
GxOXWwmbUNIcRTQ2S7NWjUhyTOhGAEe5JXW+efwkCzWmilyvNDQnnPi736uuUHCG
DhRKUvqqe5YMTLP3mVFNma0KN0t/sMnl0IZ1UXciiHxl0nt4hbmGdoh7MN9z7WWO
lgjr8XorVAZie92N9Cet3lnnT+9AoW75pvAjACtYBSDdYdC8GE6vvOFiy/HFC9HE
9k4hi+c/WKHoCai1V+Xd8EMc9oX/EA9yy73270e5t3u+jK1eC8P3H3gt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3cv1ybKp4q6RQtBlZfpBZo2YsvMB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzP3D/3X
vJoUzyCgtwMx02n7oI8Yky5yc3sxNLNABN5TJviSSuBg3ksSf2bKTa+SZ2QTWaU9
zUm1s/tEJNpEkNXH7SRTX4lR/1iA2FQJGcD+Yx52PZMtQw1ws7fAezcvv0nXUAdC
3wbyywEm7j085tdne2n9pYGEjnYCANa7b/mI+9YTob3PPlq5t7HoVFnbhpvlENEU
icTstHlqdnVFpRdkrAsqV+TYERt+iJuZ/hm2dF6WQgjwMGwWF+DSw4u0/6j3xrAp
XLtClMIbx2byQRn3OFIkJjpgdr4zjqNr00LKwgCm6c85nJWSWB27lnMxUbw0tnZN
+lzKytoIdBqFSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client