Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: YlWtCCOJBOQibntZk9TxdloAn2m7vNghLC3bpsLy6PA=
Subject key identifier: B7:FE:EC:AC:E9:25:64:1C:0D:43:7A:23:8A:94:CC:40:F8:BF:2E:57
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019D386595B6E8D9D26F8F16D6E62FB8F78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: o7IIdxsBVcHvyaEawRy0D0Mwn5mVSwo/YeB+m/hFm+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:95:b6:e8:d9:d2:6f:8f:16:d6:e6:2f:b8:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=b7feecace925641c0d437a238a94cc40f8bf2e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9f:c8:1e:85:1b:39:29:21:c0:4c:a5:d6:ff:
39:d9:c6:40:5c:1f:68:08:87:1e:e6:d2:12:3d:41:
ba:52:0d:5e:62:a0:b9:2e:e5:f4:d7:44:8c:21:60:
6b:3e:fa:18:c7:66:c2:10:a9:30:94:c6:af:a3:c7:
2e:2b:a0:ec:e8:ef:ce:51:4b:94:62:8e:d8:da:84:
dc:b2:7c:08:4f:44:b2:d6:8c:58:0e:a7:f2:92:22:
71:b4:18:ee:56:20:a4:9b:ef:79:8f:a0:15:42:14:
f6:fe:1b:99:4c:83:25:ae:8a:fa:3a:84:8f:28:b9:
11:de:9c:b6:8d:25:58:06:9e:8a:47:97:85:80:b2:
63:65:14:3e:8d:ed:ac:eb:1a:ea:62:1a:f5:2a:70:
db:c0:4c:66:c1:c3:34:da:b5:fc:aa:d5:1a:ad:50:
84:fc:9f:ce:2c:d3:19:89:9d:f0:a8:c7:8a:63:86:
a7:24:f5:ab:ab:48:7f:53:09:8a:20:aa:2a:29:cc:
f2:4d:f4:2e:11:09:14:0d:33:a3:94:71:fd:8c:79:
7a:90:e6:5d:a6:ea:e8:c0:34:a8:f3:d0:6a:2a:31:
7a:7a:6c:21:e7:be:24:e4:e1:f8:27:07:2b:9e:44:
65:20:7c:be:cb:72:23:b9:93:bf:7c:37:fc:35:d7:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:EC:AC:E9:25:64:1C:0D:43:7A:23:8A:94:CC:40:F8:BF:2E:57
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:98:30:53:0a:c3:10:3c:cf:95:3b:36:a5:92:70:bb:cf:86:
48:17:8f:ad:a8:81:3a:b1:ee:c2:bf:ac:9d:e2:9b:1a:90:82:
31:da:12:c2:c1:39:fc:cf:ef:e5:c2:4c:22:bd:d4:78:86:a8:
3e:f7:fa:d5:ab:52:f9:79:2e:81:70:cb:c4:71:df:89:f5:37:
18:de:a6:b9:2f:b7:e3:d7:59:95:f4:b5:0f:c0:6b:45:08:88:
37:61:ae:e3:e6:ae:3c:7e:ca:72:cd:7e:4c:2c:cb:7e:1a:c6:
15:8b:b9:7c:ea:bc:b8:b7:8b:2d:32:77:56:0a:ab:63:de:30:
ff:6c:e6:c9:bf:a2:9a:48:67:39:be:e2:8c:c6:71:6e:5f:d2:
32:91:65:fe:ff:6b:44:2b:f6:12:8f:51:ab:82:0b:a2:57:6a:
1f:ab:a9:56:e5:06:f9:d0:02:18:f3:9b:da:b1:10:b5:17:f3:
5d:dd:7b:19:23:89:bd:d8:0a:cd:8b:38:57:8e:10:72:a3:8f:
96:99:e4:f4:d0:53:a1:3a:24:2d:2e:79:b8:5a:55:e7:3f:61:
23:2e:0c:84:0a:75:66:ba:32:48:bc:e4:38:c8:14:6b:e7:b3:
4c:a5:5d:50:02:d0:ff:a7:30:af:2a:4d:5c:2c:20:b0:1e:66:
b6:11:8d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZW26NnSb48W1uYvuPePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx
ODAzZmYwHhcNMjYwMzI5MDcwMTE0WhcNMjYwMzMwMDcwMTE0WjAzMTEwLwYDVQQD
EyhiN2ZlZWNhY2U5MjU2NDFjMGQ0MzdhMjM4YTk0Y2M0MGY4YmYyZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5/IHoUbOSkhwEyl1v852cZAXB9o
CIce5tISPUG6Ug1eYqC5LuX010SMIWBrPvoYx2bCEKkwlMavo8cuK6Ds6O/OUUuU
Yo7Y2oTcsnwIT0Sy1oxYDqfykiJxtBjuViCkm+95j6AVQhT2/huZTIMlror6OoSP
KLkR3py2jSVYBp6KR5eFgLJjZRQ+je2s6xrqYhr1KnDbwExmwcM02rX8qtUarVCE
/J/OLNMZiZ3wqMeKY4anJPWrq0h/UwmKIKoqKczyTfQuEQkUDTOjlHH9jHl6kOZd
purowDSo89BqKjF6emwh574k5OH4JwcrnkRlIHy+y3IjuZO/fDf8Ndfz/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf+7KzpJWQcDUN6I4qUzED4vy5XMB8GA1UdIwQY
MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt
ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi
LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5gwUwrD
EDzPlTs2pZJwu8+GSBePraiBOrHuwr+sneKbGpCCMdoSwsE5/M/v5cJMIr3UeIao
Pvf61atS+XkugXDLxHHfifU3GN6muS+349dZlfS1D8BrRQiIN2Gu4+auPH7Kcs1+
TCzLfhrGFYu5fOq8uLeLLTJ3VgqrY94w/2zmyb+imkhnOb7ijMZxbl/SMpFl/v9r
RCv2Eo9Rq4ILoldqH6upVuUG+dACGPOb2rEQtRfzXd17GSOJvdgKzYs4V44QcqOP
lpnk9NBToTokLS55uFpV5z9hIy4MhAp1ZroySLzkOMgUa+ezTKVdUALQ/6cwrypN
XCwgsB5mthGN3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client