Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: NtG4DYPMpUOaAbjz9CPUYIElwVyVKs8/Xk9WDx5eCH0=
Subject key identifier: 65:53:32:F1:B3:49:C8:15:60:50:8C:65:4F:47:9B:50:59:E5:60:4E
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 019D390A28B2E5529E24F0E5A04E72122FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: h6E0tIUsYU6ye7CoFEluZ0YyOBFZO6R9dISiJ4F9x64=)
2: VioAP3Sp-sEl8X9cNMDH4e3VLXo.roa (hash: IqbTP2M4+QLgn00WwMpRsWioAmun/oCczD7J45nxBPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:28:b2:e5:52:9e:24:f0:e5:a0:4e:72:12:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=655332f1b349c81560508c654f479b5059e5604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:84:25:13:54:ab:e0:d3:74:31:37:bd:50:
a5:c9:d1:3b:20:fb:a8:a9:ab:7b:9b:a4:3a:83:b2:
e9:23:f4:29:f9:04:de:90:f5:39:16:c5:50:df:16:
ad:31:13:86:71:37:9f:e3:60:d4:84:44:86:b1:98:
fb:8f:42:62:96:9c:9d:5a:05:bd:9c:ff:9a:a9:fd:
fe:7b:9d:8b:85:32:e2:99:15:c0:7c:3b:50:42:1b:
07:94:4b:ee:dd:a3:97:9f:78:12:a9:f4:3b:fd:9f:
18:5e:0d:ee:c3:60:b6:71:a8:47:e0:10:b6:f5:35:
e0:98:0e:14:e8:63:79:60:1d:bb:57:23:cf:c3:7c:
7b:bd:d4:38:c4:0e:f3:d0:dc:69:6c:73:78:de:3d:
f7:aa:2b:5e:25:08:f0:52:3e:89:c3:bf:56:bc:92:
13:47:cc:e2:e6:4d:51:c1:e1:a4:4f:ef:54:39:09:
a7:e0:75:d4:a2:81:73:df:4d:6e:a2:93:1a:d4:97:
e7:d5:8d:8e:40:55:07:da:55:50:cd:8c:97:7a:c3:
88:e5:d4:c4:7b:72:6d:3f:3b:47:f3:f6:e6:c6:11:
90:32:4a:3c:e4:22:dc:96:f1:2b:2b:9a:31:8d:61:
c3:75:58:6e:fc:c7:21:32:3c:51:81:34:95:17:8d:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:53:32:F1:B3:49:C8:15:60:50:8C:65:4F:47:9B:50:59:E5:60:4E
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:69:28:a7:40:9e:ce:2a:bb:a4:32:c6:0b:4e:0f:ce:2a:
39:8a:e1:79:af:21:50:c2:02:d0:2a:16:7a:17:05:21:3b:3f:
c6:ed:39:fd:cb:af:02:f2:a1:d1:28:17:c4:15:90:7f:4e:4e:
4b:0f:50:43:c0:36:63:d0:2d:9c:56:94:22:a9:21:51:e9:08:
9a:d3:7d:96:6b:89:d4:0e:d8:b6:fd:eb:6f:a9:82:20:d2:4e:
10:1a:fb:3e:c5:3c:eb:21:1a:3f:a7:e2:44:e7:a1:80:a3:39:
e7:85:fc:86:8e:b2:a2:49:6e:ce:82:a9:c4:a8:3f:3d:02:be:
f8:42:e1:00:c2:bb:ce:e2:78:10:d2:eb:dc:33:8c:d3:f1:86:
e8:f0:50:9b:b4:93:3b:08:7d:5f:20:67:c6:c4:9f:28:45:8e:
5f:e5:f2:32:68:ba:11:9e:f5:04:0a:9d:5f:8e:a9:ff:ff:96:
ae:4c:08:2f:e8:d1:42:3c:1f:b1:a3:03:54:65:89:5c:36:69:
3a:2e:85:a4:75:0d:ca:9a:0e:93:0c:89:c8:7d:64:81:23:65:
08:09:0e:7f:59:18:13:a8:dc:32:9c:f5:d5:e4:b9:31:14:a7:
82:92:d0:65:07:f3:11:05:47:50:e2:a4:46:42:a9:5b:ce:a8:
44:07:17:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ciiy5VKeJPDloE5yEi/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODYxMWI1MTc5OTE4OTkzMWUzMGFlMWJlOTVhY2RhODFl
M2UxY2MwHhcNMjYwMzI5MTAwMTAwWhcNMjYwMzMwMTAwMTAwWjAzMTEwLwYDVQQD
Eyg2NTUzMzJmMWIzNDljODE1NjA1MDhjNjU0ZjQ3OWI1MDU5ZTU2MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjmEJRNUq+DTdDE3vVClydE7IPuo
qat7m6Q6g7LpI/Qp+QTekPU5FsVQ3xatMROGcTef42DUhESGsZj7j0JilpydWgW9
nP+aqf3+e52LhTLimRXAfDtQQhsHlEvu3aOXn3gSqfQ7/Z8YXg3uw2C2cahH4BC2
9TXgmA4U6GN5YB27VyPPw3x7vdQ4xA7z0NxpbHN43j33qiteJQjwUj6Jw79WvJIT
R8zi5k1RweGkT+9UOQmn4HXUooFz301uopMa1Jfn1Y2OQFUH2lVQzYyXesOI5dTE
e3JtPztH8/bmxhGQMko85CLclvErK5oxjWHDdVhu/MchMjxRgTSVF41ERQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVTMvGzScgVYFCMZU9Hm1BZ5WBOMB8GA1UdIwQY
MBaAFA2GEbUXmRiZMeMK4b6VrNqB4+HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMt
ZmQzMWUxZTNmNWI5LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMtZmQzMWUxZTNmNWI5
LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjdpKKdA
ns4qu6QyxgtOD84qOYrhea8hUMIC0CoWehcFITs/xu05/cuvAvKh0SgXxBWQf05O
Sw9QQ8A2Y9AtnFaUIqkhUekImtN9lmuJ1A7Ytv3rb6mCINJOEBr7PsU86yEaP6fi
ROehgKM554X8ho6yokluzoKpxKg/PQK++ELhAMK7zuJ4ENLr3DOM0/GG6PBQm7ST
Owh9XyBnxsSfKEWOX+XyMmi6EZ71BAqdX46p//+WrkwIL+jRQjwfsaMDVGWJXDZp
Oi6FpHUNypoOkwyJyH1kgSNlCAkOf1kYE6jcMpz11eS5MRSngpLQZQfzEQVHUOKk
RkKpW86oRAcXdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:51 2026 by rpki-client