Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier: PF/9S0L/9sU25ZfQNZPE558uZlIuVt0c15Hw9HMtpo8=
Subject key identifier: 6F:BF:B9:4E:09:F1:C3:14:18:35:31:B1:68:F8:8A:D4:5F:19:18:0E
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial: 019D3865CFD06FCD2FFED0AB8EEA0A40A073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: i5x1F9rf0vEjtUnOVADbH6OcUxMI6RujFfg4FsaLzDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cf:d0:6f:cd:2f:fe:d0:ab:8e:ea:0a:40:a0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=6fbfb94e09f1c314183531b168f88ad45f19180e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:e5:c8:78:cd:5a:29:88:7a:e9:34:10:0a:
d7:2a:07:fc:52:c4:84:69:4a:12:22:10:b8:a6:c9:
a3:a8:e9:39:7f:dd:61:74:b5:26:42:d4:ce:36:b6:
17:e5:13:63:4e:79:73:e9:a9:f8:a5:f0:91:86:2f:
6f:db:d0:ee:7c:85:16:3b:9f:4c:26:1e:2b:7a:20:
e6:55:3d:3f:d4:6d:b2:5d:c8:44:dd:ab:7c:08:b2:
3f:24:c1:f0:d7:fd:42:3d:04:2a:23:fc:e7:c2:f4:
35:a2:23:2a:bf:34:24:03:a7:4a:54:6d:cb:c1:43:
cc:f8:cc:20:b5:88:91:5c:b1:41:d5:9f:c4:69:36:
dc:93:8d:57:f3:d3:d1:df:86:f3:b1:08:9d:6d:08:
ba:13:ee:26:dc:82:b1:fc:02:6c:94:e7:25:d8:1f:
e0:8e:2f:68:c6:8d:23:e3:46:c6:39:a3:00:a4:49:
ec:07:21:82:f2:be:16:14:1b:ca:df:d9:1a:15:3f:
38:3a:13:8a:00:d0:69:bb:7b:2c:b4:33:cf:d8:a9:
fc:8b:23:22:79:38:e3:4d:00:2d:f2:f0:ae:67:a6:
72:22:0c:7f:55:72:52:2a:20:45:60:d7:55:57:2e:
18:3f:8c:8f:f4:69:b3:b3:39:9c:9e:4a:6e:0c:05:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:B9:4E:09:F1:C3:14:18:35:31:B1:68:F8:8A:D4:5F:19:18:0E
X509v3 Authority Key Identifier:
keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:32:8f:a6:96:57:63:60:d5:29:da:45:fe:a8:08:b6:9e:
9b:be:94:98:c6:cb:58:6a:d3:fb:46:b5:0a:fa:10:44:cc:3b:
31:d6:cf:40:39:aa:5e:4e:3f:9b:04:86:53:45:e5:12:26:51:
10:d3:ad:e7:b0:59:ba:ef:6c:a3:00:b1:5b:df:87:6d:4a:fe:
9f:72:3a:78:0c:48:69:a3:29:68:28:bc:e0:20:08:6d:bc:e6:
02:c3:7d:3e:ed:58:74:66:33:01:86:c0:9c:ce:53:de:d6:bc:
4e:d5:44:75:ba:e5:57:52:33:5d:84:61:63:34:65:dc:6b:ba:
69:f1:d4:3a:83:eb:00:f8:49:44:69:f2:8f:3f:3d:62:0e:6c:
39:85:c3:80:7d:b1:96:a1:14:da:0a:bc:9c:69:fb:ba:78:65:
bb:5c:2f:a4:b2:21:0c:db:da:f2:8f:ed:2c:58:47:2c:20:04:
3f:1a:86:25:6f:bc:31:a3:4d:e1:45:dd:13:1c:93:cd:a3:f8:
e3:9c:a8:c3:58:5f:eb:d8:8e:79:2e:11:d7:1d:6e:77:c4:9b:
1b:d2:50:7e:8e:a5:9d:2d:88:33:8e:63:ec:c6:a1:3e:40:d9:
4f:76:82:51:5a:d9:c3:e2:c1:5e:7a:da:b8:27:8c:e6:d1:3e:
04:7b:19:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zc/Qb80v/tCrjuoKQKBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmJhMTNhNDI5ZDI0NDRjOGU2YzdkODdmZWJmMTlkNTBm
ZTc1MGEwHhcNMjYwMzI5MDcwMTI5WhcNMjYwMzMwMDcwMTI5WjAzMTEwLwYDVQQD
Eyg2ZmJmYjk0ZTA5ZjFjMzE0MTgzNTMxYjE2OGY4OGFkNDVmMTkxODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4vlyHjNWimIeuk0EArXKgf8UsSE
aUoSIhC4psmjqOk5f91hdLUmQtTONrYX5RNjTnlz6an4pfCRhi9v29DufIUWO59M
Jh4reiDmVT0/1G2yXchE3at8CLI/JMHw1/1CPQQqI/znwvQ1oiMqvzQkA6dKVG3L
wUPM+MwgtYiRXLFB1Z/EaTbck41X89PR34bzsQidbQi6E+4m3IKx/AJslOcl2B/g
ji9oxo0j40bGOaMApEnsByGC8r4WFBvK39kaFT84OhOKANBpu3sstDPP2Kn8iyMi
eTjjTQAt8vCuZ6ZyIgx/VXJSKiBFYNdVVy4YP4yP9GmzszmcnkpuDAWX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+/uU4J8cMUGDUxsWj4itRfGRgOMB8GA1UdIwQY
MBaAFA5roTpCnSREyObH2H/r8Z1Q/nUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTct
MDA3ZTA4YjNhZjhmLzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTctMDA3ZTA4YjNhZjhm
LzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiwyj6aW
V2Ng1SnaRf6oCLaem76UmMbLWGrT+0a1CvoQRMw7MdbPQDmqXk4/mwSGU0XlEiZR
ENOt57BZuu9sowCxW9+HbUr+n3I6eAxIaaMpaCi84CAIbbzmAsN9Pu1YdGYzAYbA
nM5T3ta8TtVEdbrlV1IzXYRhYzRl3Gu6afHUOoPrAPhJRGnyjz89Yg5sOYXDgH2x
lqEU2gq8nGn7unhlu1wvpLIhDNva8o/tLFhHLCAEPxqGJW+8MaNN4UXdExyTzaP4
45yow1hf69iOeS4R1x1ud8SbG9JQfo6lnS2IM45j7MahPkDZT3aCUVrZw+LBXnra
uCeM5tE+BHsZfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:51 2026 by rpki-client