Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: bAf7qRMUObp+NHUqRZTD2TjOLWXpSxV9hB4ZnG9iLLY=
Subject key identifier: C5:14:3E:31:8D:92:AC:3B:0A:AF:A9:EC:28:B5:98:9E:A6:A5:EF:68
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 019D3789613D9DEE57F8E948806C5A0B3ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 08A8
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: HZchOoPrIKB4ik8s92TW41oCFY5z6WCV3rorS8fONAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:61:3d:9d:ee:57:f8:e9:48:80:6c:5a:0b:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=c5143e318d92ac3b0aafa9ec28b5989ea6a5ef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:8c:48:18:35:34:97:a7:60:cf:60:17:7b:
2f:75:8e:2a:c5:b9:09:82:0f:cc:a7:52:ec:c1:02:
3e:08:3e:df:ec:60:b8:1b:f3:91:3d:b1:9e:1d:3b:
98:98:04:55:e8:86:58:cb:07:43:12:63:db:fc:ea:
65:5c:ee:82:60:35:b9:9a:b9:61:96:74:75:6f:35:
57:30:c5:10:0e:0e:6b:be:3f:0e:60:3b:93:7d:f3:
3a:2e:1c:e9:35:d6:4a:d5:51:01:da:5d:0e:04:d3:
3b:34:6f:68:40:99:9a:3c:01:4e:4b:ed:7a:bb:9b:
38:0d:5e:2f:1d:a9:a8:32:d1:77:97:f9:ef:d5:64:
a3:9b:09:e1:f4:b3:e1:cb:87:ce:2b:7a:af:5c:a5:
d5:3b:0d:d0:e6:c5:4d:a2:34:9c:ea:1d:10:a7:e5:
21:ee:af:f7:96:3d:ba:5f:ae:19:3e:95:da:2a:17:
54:00:f4:c7:70:15:03:5a:10:2f:8e:40:26:e9:56:
ed:1c:30:02:84:7e:99:64:22:43:85:49:e4:ad:ef:
3b:10:18:4e:b8:7f:be:9c:89:25:8c:4f:17:3d:95:
42:5b:7a:f2:bf:c5:0a:66:e5:52:dc:b3:2c:22:0f:
5a:bf:2c:c3:f3:a8:1a:a0:c6:68:93:b7:24:1c:7c:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:14:3E:31:8D:92:AC:3B:0A:AF:A9:EC:28:B5:98:9E:A6:A5:EF:68
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:93:ae:22:78:47:e5:5c:30:e1:f7:0b:6e:b9:9c:29:9e:4e:
07:5d:a1:48:8c:0d:f2:32:cd:c7:d2:88:0d:5b:8d:52:e6:19:
01:6f:ff:e0:05:0d:70:4b:98:61:dd:ba:99:e9:80:61:6a:ba:
24:f6:8d:27:5c:a8:ce:0f:51:7c:37:47:97:ec:69:ee:73:e0:
1a:bd:d9:a5:4e:c6:bf:65:04:18:17:23:1e:c8:cf:60:b0:29:
f7:53:f3:9b:81:19:71:6c:dc:77:a5:32:7e:e5:b4:09:96:ff:
3c:27:82:ea:49:b2:81:45:ac:cd:3f:c8:b4:0c:fb:eb:8a:c1:
88:5f:8c:9d:47:bb:6a:e7:19:b9:0e:cf:44:f7:3f:fc:dc:a7:
4c:ae:be:1f:db:a1:6e:33:00:dd:58:a8:06:c0:49:f7:b3:7a:
9d:80:56:96:3c:35:0d:6e:06:76:ee:40:19:ed:b9:e1:41:4f:
f8:0a:f5:cb:80:1e:24:63:09:0c:45:9c:30:83:73:2c:9b:24:
74:7e:58:cf:d7:d9:2c:62:6c:b7:54:ef:0d:fc:e9:c6:d9:29:
81:a0:24:84:04:36:28:99:97:d5:7a:5f:d5:df:b1:36:fb:fc:
da:ac:0a:22:2c:70:4c:52:25:cf:43:dd:bb:ad:f0:d1:41:89:
df:d1:63:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWE9ne5X+OlIgGxaCzrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk
ZDJjOWUwHhcNMjYwMzI5MDMwMDQzWhcNMjYwMzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhjNTE0M2UzMThkOTJhYzNiMGFhZmE5ZWMyOGI1OTg5ZWE2YTVlZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNyMSBg1NJenYM9gF3svdY4qxbkJ
gg/Mp1LswQI+CD7f7GC4G/ORPbGeHTuYmARV6IZYywdDEmPb/OplXO6CYDW5mrlh
lnR1bzVXMMUQDg5rvj8OYDuTffM6LhzpNdZK1VEB2l0OBNM7NG9oQJmaPAFOS+16
u5s4DV4vHamoMtF3l/nv1WSjmwnh9LPhy4fOK3qvXKXVOw3Q5sVNojSc6h0Qp+Uh
7q/3lj26X64ZPpXaKhdUAPTHcBUDWhAvjkAm6VbtHDAChH6ZZCJDhUnkre87EBhO
uH++nIkljE8XPZVCW3ryv8UKZuVS3LMsIg9avyzD86gaoMZok7ckHHxD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUUPjGNkqw7Cq+p7Ci1mJ6mpe9oMB8GA1UdIwQY
MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt
MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz
LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopOuInhH
5Vww4fcLbrmcKZ5OB12hSIwN8jLNx9KIDVuNUuYZAW//4AUNcEuYYd26memAYWq6
JPaNJ1yozg9RfDdHl+xp7nPgGr3ZpU7Gv2UEGBcjHsjPYLAp91Pzm4EZcWzcd6Uy
fuW0CZb/PCeC6kmygUWszT/ItAz764rBiF+MnUe7aucZuQ7PRPc//NynTK6+H9uh
bjMA3VioBsBJ97N6nYBWljw1DW4Gdu5AGe254UFP+Ar1y4AeJGMJDEWcMINzLJsk
dH5Yz9fZLGJst1TvDfzpxtkpgaAkhAQ2KJmX1Xpf1d+xNvv82qwKIixwTFIlz0Pd
u63w0UGJ39Fjbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:40 2026 by rpki-client