Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
File: dnh0JGjLAfClJrTpIib-O3TGfEE.mft (raw, json)
Hash identifier: hMdZ5Msdk+t8IPNUj9Yl05VibLyu0a/D+R+9RyRvgu4=
Subject key identifier: D5:97:81:E1:3A:32:7C:C1:70:31:DA:F4:9C:B2:B5:85:18:6B:37:6E
Authority key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41
Certificate issuer: /CN=7678742468cb01f0a526b4e92226fe3b74c67c41
Certificate serial: 019D3909B489BEDA2B4C5196003679AF1261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
Manifest number: 0125
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: 1vE1bB4EDBxNcUGfUCxckstUSVo.roa (hash: ZcEWN1iWGFKaa88mWnoVaJOYXC/9DLTCOLoGub+bZ74=)
2: dnh0JGjLAfClJrTpIib-O3TGfEE.crl (hash: LT3mlZsL2ukYRzES6Iy58xOV9ZtIydZ1Yxnn7XlRO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b4:89:be:da:2b:4c:51:96:00:36:79:af:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7678742468cb01f0a526b4e92226fe3b74c67c41
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=d59781e13a327cc17031daf49cb2b585186b376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:99:a7:fc:3c:85:ca:c6:1b:95:69:41:a1:
0e:bd:b2:7e:e0:cf:d5:00:fb:45:ef:21:38:2b:91:
4e:de:58:92:ea:f9:62:e8:4c:82:f1:e3:e3:69:b8:
dd:38:f9:c4:d0:37:55:27:bf:0a:42:79:8a:10:04:
7d:b7:8a:ed:8c:b2:6b:d8:a7:f6:75:6d:3f:7f:62:
5c:50:a1:db:c3:b8:31:eb:d5:8f:12:63:48:a7:e1:
4a:43:3d:4c:fc:17:c8:8d:f7:70:b0:45:b3:af:0d:
cd:26:c9:7d:21:c7:45:99:dc:12:61:85:0a:f9:3a:
a9:90:e0:4a:5e:38:2b:e4:5c:c2:c2:b4:34:98:37:
de:3a:51:13:d6:18:7c:79:83:cb:52:91:67:f5:cc:
fa:b2:16:3c:8e:de:e0:0e:d2:c5:4a:5a:75:47:38:
78:49:b0:1d:1a:5c:72:8d:de:ea:25:02:1f:18:a5:
2d:35:20:ce:1b:d6:de:3c:d8:58:43:d2:7f:eb:36:
c4:05:30:3a:59:7f:34:8b:0e:89:d1:66:a0:07:6b:
df:e4:ae:be:c1:cf:c0:f1:5a:f8:a5:96:e8:5f:b6:
bc:d5:1c:f3:48:ed:30:54:51:86:09:9c:26:3f:4b:
24:e9:8a:95:23:c0:ee:3e:9f:45:0e:3d:a0:84:bf:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:97:81:E1:3A:32:7C:C1:70:31:DA:F4:9C:B2:B5:85:18:6B:37:6E
X509v3 Authority Key Identifier:
keyid:76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:3f:bc:50:05:01:49:2e:00:e1:71:6c:b2:ae:c0:0b:a4:
0a:c7:eb:fd:ca:6d:2d:22:bf:d3:ab:c3:a9:e5:44:39:95:bc:
bb:7f:37:12:02:b8:99:bf:63:a0:1f:16:5f:db:47:4a:e3:e0:
aa:32:42:58:e7:21:a0:0e:13:1a:5c:7f:1d:4a:bd:fc:5e:9e:
b9:c6:ca:6d:b4:80:31:e8:c8:db:50:30:10:21:af:c8:fb:62:
0a:d4:19:dc:98:7c:18:42:13:5d:66:f5:a0:9f:02:fa:6b:55:
21:1b:98:3a:62:b3:64:33:46:b3:34:be:d0:8b:02:07:73:58:
46:36:1f:27:f7:d0:a7:ea:6c:63:bc:b2:a5:fd:99:cd:64:73:
24:30:43:83:d3:77:0c:11:e9:ce:6f:67:33:1a:8e:cf:65:95:
16:c2:35:05:db:2d:95:aa:f9:af:cb:c6:bf:55:97:d6:f5:70:
8f:23:5f:98:bd:23:4c:bd:d3:82:0f:b4:55:9d:73:20:d2:10:
25:23:88:73:b8:e4:2e:4d:7d:e5:61:81:3c:25:ff:ef:0b:27:
d1:ea:d0:1b:0e:56:23:bc:cc:c5:ef:14:0c:23:dc:7d:d8:7b:
34:87:5c:f3:a7:69:6b:64:bd:f9:a8:fd:39:d8:ad:c9:59:b5:
aa:06:7b:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbSJvtorTFGWADZ5rxJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Nzg3NDI0NjhjYjAxZjBhNTI2YjRlOTIyMjZmZTNiNzRj
NjdjNDEwHhcNMjYwMzI5MTAwMDMwWhcNMjYwMzMwMTAwMDMwWjAzMTEwLwYDVQQD
EyhkNTk3ODFlMTNhMzI3Y2MxNzAzMWRhZjQ5Y2IyYjU4NTE4NmIzNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QmZp/w8hcrGG5VpQaEOvbJ+4M/V
APtF7yE4K5FO3liS6vli6EyC8ePjabjdOPnE0DdVJ78KQnmKEAR9t4rtjLJr2Kf2
dW0/f2JcUKHbw7gx69WPEmNIp+FKQz1M/BfIjfdwsEWzrw3NJsl9IcdFmdwSYYUK
+TqpkOBKXjgr5FzCwrQ0mDfeOlET1hh8eYPLUpFn9cz6shY8jt7gDtLFSlp1Rzh4
SbAdGlxyjd7qJQIfGKUtNSDOG9bePNhYQ9J/6zbEBTA6WX80iw6J0WagB2vf5K6+
wc/A8Vr4pZboX7a81RzzSO0wVFGGCZwmP0sk6YqVI8DuPp9FDj2ghL9WgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWXgeE6MnzBcDHa9JyytYUYazduMB8GA1UdIwQY
MBaAFHZ4dCRoywHwpSa06SIm/jt0xnxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUt
ZmE0NGM3YTA3ZDI3LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUtZmE0NGM3YTA3ZDI3
LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq0/vFAF
AUkuAOFxbLKuwAukCsfr/cptLSK/06vDqeVEOZW8u383EgK4mb9joB8WX9tHSuPg
qjJCWOchoA4TGlx/HUq9/F6eucbKbbSAMejI21AwECGvyPtiCtQZ3Jh8GEITXWb1
oJ8C+mtVIRuYOmKzZDNGszS+0IsCB3NYRjYfJ/fQp+psY7yypf2ZzWRzJDBDg9N3
DBHpzm9nMxqOz2WVFsI1Bdstlar5r8vGv1WX1vVwjyNfmL0jTL3Tgg+0VZ1zINIQ
JSOIc7jkLk195WGBPCX/7wsn0erQGw5WI7zMxe8UDCPcfdh7NIdc86dpa2S9+aj9
OdityVm1qgZ7Yw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:56 2026 by rpki-client