Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: cbsYnFOXNlInLvPvFMkZY7DIM6yHLyPehgqJqDyXVxg=
Subject key identifier: 2C:41:BB:04:16:D4:DB:D7:3A:DD:F9:CC:CC:9C:C4:16:ED:21:3A:17
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019CC260F765E9C35CB26D9874D5BB07B980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 040E
Signing time: Fri 06 Mar 2026 09:01:00 +0000
Manifest this update: Fri 06 Mar 2026 09:01:00 +0000
Manifest next update: Sat 07 Mar 2026 09:01:00 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: SSB2TnVrTMajY5a4edpQ3y5d2sgzQFsB9wCIMI/Pdy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:60:f7:65:e9:c3:5c:b2:6d:98:74:d5:bb:07:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Mar 6 09:01:00 2026 GMT
Not After : Mar 7 09:01:00 2026 GMT
Subject: CN=2c41bb0416d4dbd73addf9cccc9cc416ed213a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:83:21:ad:c8:5d:c1:e5:63:52:9e:8d:0a:
c6:f3:c5:fb:f8:09:47:05:c4:4d:b7:a9:d4:8f:bc:
3a:2a:5f:29:cb:11:f5:5c:3f:28:30:f2:fc:16:71:
ba:4b:a0:50:72:c6:6c:92:c7:f5:9a:ce:8f:df:5a:
ef:3d:bc:9d:4d:e1:31:1f:10:6b:60:6e:a2:02:d6:
3c:f6:ff:65:41:1b:5e:03:5b:07:4c:ec:d0:9b:c0:
0c:f5:2b:e8:c6:c1:70:de:79:c5:e6:cf:9a:1b:db:
80:f7:28:92:06:a3:41:12:4c:c3:5d:51:1f:d4:77:
58:c9:e0:8c:ab:5a:d3:90:9c:5b:f1:d2:e9:2a:f8:
60:cc:68:34:e2:2b:af:c3:9a:71:2a:dd:81:d7:b0:
a2:f8:8e:10:26:83:30:eb:35:ce:d4:1e:27:54:d6:
3f:2f:da:38:ad:ca:43:cf:16:29:88:cf:38:9f:40:
42:fd:95:31:c6:55:5d:97:ad:2e:3e:28:7f:51:96:
95:4a:a2:28:54:e2:53:fb:57:ae:d4:4a:7a:39:10:
bc:ec:47:8c:07:b5:bf:c6:ce:4b:de:36:25:aa:97:
dc:39:db:29:b8:ec:0f:26:e6:61:82:fb:50:8c:4f:
23:6e:ff:bb:0b:02:fe:1f:7f:68:db:39:5b:53:73:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:BB:04:16:D4:DB:D7:3A:DD:F9:CC:CC:9C:C4:16:ED:21:3A:17
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:d0:59:18:e3:de:0f:8a:be:bc:a4:7d:05:9a:7f:8f:be:
2f:b9:75:e0:00:88:09:16:ce:78:3f:b9:34:65:23:a7:4b:8f:
c4:3c:5c:8c:a1:8f:ee:07:f6:bd:1e:de:8c:29:15:69:39:93:
a4:b7:24:5f:d3:04:39:2f:5b:71:ab:5f:22:b4:ef:d5:88:b6:
93:30:9a:fc:05:a6:03:56:bf:4c:e0:07:dd:0d:23:67:8a:7f:
46:2a:40:d9:1b:e4:95:7f:79:87:35:bc:e2:45:6a:00:91:35:
e8:51:57:46:b0:f4:fc:ce:12:d8:d0:aa:bd:02:7e:67:98:26:
35:74:81:ac:1c:a9:c2:88:f1:b2:b2:cc:f0:fd:52:3d:77:a9:
68:6a:80:5c:a2:e9:08:35:05:02:4c:77:fb:14:8c:8a:bb:d7:
fe:e5:7c:2b:60:01:a3:48:f0:63:58:da:e3:a2:4e:81:89:9d:
db:89:cc:02:09:11:92:3a:d2:a6:f8:ed:1d:ad:0c:e1:3a:d1:
90:f6:3b:69:dd:bf:41:79:ec:e8:7c:e5:3d:9c:df:61:df:e7:
c7:bf:ac:ae:ee:71:67:d2:35:ee:84:bb:97:e2:0e:ce:e6:71:
38:e3:b9:4b:9e:ad:b4:79:50:82:55:32:34:e9:42:2f:8b:3a:
eb:75:93:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzCYPdl6cNcsm2YdNW7B7mAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj
MWMzMWEwHhcNMjYwMzA2MDkwMTAwWhcNMjYwMzA3MDkwMTAwWjAzMTEwLwYDVQQD
EygyYzQxYmIwNDE2ZDRkYmQ3M2FkZGY5Y2NjYzljYzQxNmVkMjEzYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWyDIa3IXcHlY1KejQrG88X7+AlH
BcRNt6nUj7w6Kl8pyxH1XD8oMPL8FnG6S6BQcsZsksf1ms6P31rvPbydTeExHxBr
YG6iAtY89v9lQRteA1sHTOzQm8AM9SvoxsFw3nnF5s+aG9uA9yiSBqNBEkzDXVEf
1HdYyeCMq1rTkJxb8dLpKvhgzGg04iuvw5pxKt2B17Ci+I4QJoMw6zXO1B4nVNY/
L9o4rcpDzxYpiM84n0BC/ZUxxlVdl60uPih/UZaVSqIoVOJT+1eu1Ep6ORC87EeM
B7W/xs5L3jYlqpfcOdspuOwPJuZhgvtQjE8jbv+7CwL+H39o2zlbU3Nr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxBuwQW1NvXOt35zMycxBbtIToXMB8GA1UdIwQY
MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt
MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3
LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURHQWRjj
3g+KvrykfQWaf4++L7l14ACICRbOeD+5NGUjp0uPxDxcjKGP7gf2vR7ejCkVaTmT
pLckX9MEOS9bcatfIrTv1Yi2kzCa/AWmA1a/TOAH3Q0jZ4p/RipA2RvklX95hzW8
4kVqAJE16FFXRrD0/M4S2NCqvQJ+Z5gmNXSBrBypwojxsrLM8P1SPXepaGqAXKLp
CDUFAkx3+xSMirvX/uV8K2ABo0jwY1ja46JOgYmd24nMAgkRkjrSpvjtHa0M4TrR
kPY7ad2/QXns6HzlPZzfYd/nx7+sru5xZ9I17oS7l+IOzuZxOOO5S56ttHlQglUy
NOlCL4s663WThg==
-----END CERTIFICATE-----
Generated at Fri Mar 6 18:19:40 2026 by rpki-client