Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: l1BNd0wXQeHnqCaendqSNfegi+kzZi0Kv6lWjFA6m/o=
Subject key identifier: 04:CE:1B:79:0B:46:4C:B7:2A:AE:3C:00:0B:22:1D:2B:26:FF:3D:92
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019D3977835C1A8D5446907B49167FB8C4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 12:00:26 +0000
Manifest this update: Sun 29 Mar 2026 12:00:26 +0000
Manifest next update: Mon 30 Mar 2026 12:00:26 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: KzJ+JSr7Em9J3QrObSE3/+c+haKJI4mKKEhbPyAHRQA=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:83:5c:1a:8d:54:46:90:7b:49:16:7f:b8:c4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Mar 29 12:00:26 2026 GMT
Not After : Mar 30 12:00:26 2026 GMT
Subject: CN=04ce1b790b464cb72aae3c000b221d2b26ff3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:eb:f4:42:ff:e1:aa:b0:e9:5f:b6:9f:d2:
ba:b5:d0:5d:ce:35:6b:57:e5:6a:58:be:8c:b2:8c:
e3:d5:94:ff:2e:93:6e:4f:a8:ea:16:de:be:47:57:
1f:b7:ed:89:7c:38:57:f9:6e:de:a6:7c:81:0d:d0:
0e:c7:d1:00:5c:4f:fa:c5:13:a9:5e:4f:ea:cc:13:
b6:76:ee:a7:32:81:0a:5f:47:9d:2c:94:05:e5:2c:
ab:67:f3:29:ea:cf:0f:24:f7:33:a3:b1:5a:77:fc:
ef:a8:b3:c1:b7:bb:ab:87:8f:75:05:d3:ff:25:6c:
17:82:6e:c3:3a:5b:ea:84:d0:31:9e:c4:3e:22:d1:
a9:d6:f8:51:6c:cf:cf:ef:51:f5:67:cc:7f:b1:b6:
52:c8:93:73:b4:af:b0:aa:ca:be:1c:68:cf:f8:cb:
9b:86:d6:87:ac:7d:15:68:3d:26:0c:66:52:5e:98:
35:ac:ea:1d:ac:d7:ce:54:84:2b:ec:64:f8:92:6a:
76:cf:41:11:bd:3a:ef:17:bc:fb:f5:cf:d8:56:08:
d1:10:3f:d3:3c:31:cc:53:c4:4a:75:db:6d:56:31:
b2:5b:62:af:f5:24:fc:dd:0f:70:5d:b0:47:7d:71:
d3:b2:c9:a7:bb:5a:d5:67:9b:7f:44:07:be:50:bd:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:1B:79:0B:46:4C:B7:2A:AE:3C:00:0B:22:1D:2B:26:FF:3D:92
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:f1:ce:45:2c:d6:dc:f4:00:66:4a:4b:bc:f9:23:f4:2f:
44:52:49:a0:14:7e:30:f9:6f:49:e8:31:bd:01:9c:0c:c8:f5:
cb:81:e6:1e:7c:cb:8a:10:f3:72:72:a4:79:12:92:15:68:f2:
16:5c:cb:0f:02:57:a9:5e:84:ee:c8:d0:3a:92:37:b5:50:9c:
71:ce:aa:19:57:3c:1c:58:8e:0c:b6:55:22:dd:a3:a5:8c:b6:
6d:2f:d0:25:b2:b9:54:cb:26:03:89:0f:c4:04:01:f0:79:c8:
ba:ae:63:e0:2a:12:d0:56:c7:a0:f3:e6:0a:f1:d9:80:b6:bb:
d3:d5:6d:98:5c:b2:e8:e5:e2:25:7e:00:fd:e3:03:ca:2b:df:
54:0e:6a:cb:a4:11:e7:55:df:0a:30:d0:3c:bd:99:ec:8d:4e:
52:8f:b2:88:a7:d2:e7:4f:14:94:6a:44:80:9e:30:16:37:7b:
33:95:13:e9:b8:f2:5b:f8:8c:8c:f8:75:d4:67:b6:25:3f:39:
25:10:22:a7:05:a6:dc:52:4b:fc:cb:63:f6:08:6f:53:2c:b0:
33:c0:08:d0:a5:89:1b:ae:4a:ba:b3:eb:1e:4f:bd:26:98:c6:
5c:90:b7:75:50:32:14:9d:40:89:f1:1a:b2:b6:69:c1:78:79:
e5:3d:d0:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4NcGo1URpB7SRZ/uMT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjYwMzI5MTIwMDI2WhcNMjYwMzMwMTIwMDI2WjAzMTEwLwYDVQQD
EygwNGNlMWI3OTBiNDY0Y2I3MmFhZTNjMDAwYjIyMWQyYjI2ZmYzZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xrr9EL/4aqw6V+2n9K6tdBdzjVr
V+VqWL6Msozj1ZT/LpNuT6jqFt6+R1cft+2JfDhX+W7epnyBDdAOx9EAXE/6xROp
Xk/qzBO2du6nMoEKX0edLJQF5SyrZ/Mp6s8PJPczo7Fad/zvqLPBt7urh491BdP/
JWwXgm7DOlvqhNAxnsQ+ItGp1vhRbM/P71H1Z8x/sbZSyJNztK+wqsq+HGjP+Mub
htaHrH0VaD0mDGZSXpg1rOodrNfOVIQr7GT4kmp2z0ERvTrvF7z79c/YVgjRED/T
PDHMU8RKddttVjGyW2Kv9ST83Q9wXbBHfXHTssmnu1rVZ5t/RAe+UL1L+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATOG3kLRky3Kq48AAsiHSsm/z2SMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQfxzkUs
1tz0AGZKS7z5I/QvRFJJoBR+MPlvSegxvQGcDMj1y4HmHnzLihDzcnKkeRKSFWjy
FlzLDwJXqV6E7sjQOpI3tVCccc6qGVc8HFiODLZVIt2jpYy2bS/QJbK5VMsmA4kP
xAQB8HnIuq5j4CoS0FbHoPPmCvHZgLa709VtmFyy6OXiJX4A/eMDyivfVA5qy6QR
51XfCjDQPL2Z7I1OUo+yiKfS508UlGpEgJ4wFjd7M5UT6bjyW/iMjPh11Ge2JT85
JRAipwWm3FJL/Mtj9ghvUyywM8AI0KWJG65KurPrHk+9JpjGXJC3dVAyFJ1AifEa
srZpwXh55T3Qwg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:03 2026 by rpki-client