Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: g/k2bF/LFtJgRpdHxOR9QO0AYfVZgE03ET11qTs3TV4=
Subject key identifier: CD:86:DF:70:2D:B0:3F:00:09:36:9D:29:E2:C6:74:5D:75:66:9C:5F
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 019D3A1C43B106423EC5D7B06C87CD7AF3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0E58
Signing time: Sun 29 Mar 2026 15:00:23 +0000
Manifest this update: Sun 29 Mar 2026 15:00:23 +0000
Manifest next update: Mon 30 Mar 2026 15:00:23 +0000
Files and hashes: 1: Ki5vJms-JWVXQqNHEorfbuz5XjI.roa (hash: 5AUIEMOenxKdLyL4gm/joj3B8MRPpzoFh4cs7HPB6rs=)
2: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: FflkHCG+lPZbtUiAjjMONMsrEX65F6kvi4jvaCekJMo=)
3: mwVyEN1yciChxmW_Q0x3K-DTLf0.roa (hash: 2DWQTjsCCu0McKSPCWKJ9eLeJdWuKpAg3qQ7vPTXYnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:43:b1:06:42:3e:c5:d7:b0:6c:87:cd:7a:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Mar 29 15:00:23 2026 GMT
Not After : Mar 30 15:00:23 2026 GMT
Subject: CN=cd86df702db03f0009369d29e2c6745d75669c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:0a:e4:ff:65:bb:31:72:db:f0:37:f1:7f:
66:35:fa:6a:33:0a:31:04:1b:b6:2e:62:19:40:d4:
b0:3d:f6:78:44:ea:cf:aa:d5:d6:06:e9:6d:3d:4e:
f1:40:67:bb:1c:83:c3:11:ef:2a:b4:80:c0:da:9c:
e4:83:45:a8:05:b3:9b:f7:9d:65:80:bc:1e:ef:29:
1f:6c:84:bd:0c:07:8f:1f:b6:f7:3c:39:3d:41:b4:
78:1c:3b:c5:0d:fc:ed:57:4e:e3:b6:6c:b2:f5:b8:
be:6b:62:a1:4d:9d:29:3c:26:e6:61:3f:86:22:08:
a8:83:1c:e4:59:8c:c3:f6:23:01:f6:c7:f2:ec:1f:
cb:54:bb:3e:9e:ca:71:de:a9:c9:2c:1e:59:f7:8b:
6b:f7:f0:0a:c0:8f:53:ef:36:bf:53:0e:24:19:f2:
49:8b:c5:28:dd:d5:f4:9a:92:d9:e6:47:4e:21:91:
97:5e:10:66:20:09:70:e6:f1:c1:58:a9:46:fb:fd:
e4:5d:ca:a0:a4:96:25:c5:ef:54:ad:87:ae:3a:ae:
7a:6a:95:8e:6c:0d:57:8b:80:1f:39:68:1b:25:71:
a6:e9:31:cc:10:6f:53:13:2f:76:7c:b0:21:e7:ec:
90:85:70:08:d2:72:0e:4a:c6:9c:16:4c:f5:ad:39:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:DF:70:2D:B0:3F:00:09:36:9D:29:E2:C6:74:5D:75:66:9C:5F
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:db:6c:04:24:d1:ad:3c:91:71:9d:3e:19:14:72:20:7d:a9:
dc:df:f6:26:5b:36:74:c9:32:a3:bf:c4:36:c7:ee:33:bf:b7:
c4:49:f7:ae:31:05:5b:03:d0:83:14:79:34:ab:11:0d:fd:03:
27:df:72:3f:cc:5c:03:1d:c7:11:27:4d:40:af:da:63:ce:8f:
a8:13:18:30:e3:e9:01:da:1a:53:ee:7a:8c:01:36:e9:f4:3a:
8f:ff:83:4c:b8:8c:f6:2c:e2:aa:97:e6:08:86:f7:a3:ef:5c:
9c:1e:d5:ec:79:2a:49:a3:ce:14:2e:bc:55:91:a1:d1:d6:7f:
38:3f:4f:5d:db:c7:5e:b1:f2:c8:f6:f1:20:de:f0:f1:0a:8d:
25:28:97:29:fb:9c:f4:42:43:c6:f5:00:8d:36:d3:d4:42:31:
d4:f6:b5:c6:dc:b5:41:44:c7:d7:1c:f3:d9:0a:25:cb:e5:f5:
93:79:97:7e:a4:cb:fb:13:e2:ce:56:77:80:5f:3d:87:2f:fd:
da:28:95:43:3b:2a:47:c6:ee:95:f6:dd:1b:38:44:7b:28:53:
0c:3c:9b:7d:01:2a:2e:5b:d3:0b:f7:86:2e:4d:54:ab:04:8d:
60:90:aa:a5:e5:a4:a9:f1:34:06:6a:11:c3:eb:ca:d4:3b:46:
65:0c:2d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HEOxBkI+xdewbIfNevP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh
ZGFlNWUwHhcNMjYwMzI5MTUwMDIzWhcNMjYwMzMwMTUwMDIzWjAzMTEwLwYDVQQD
EyhjZDg2ZGY3MDJkYjAzZjAwMDkzNjlkMjllMmM2NzQ1ZDc1NjY5YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5YK5P9luzFy2/A38X9mNfpqMwox
BBu2LmIZQNSwPfZ4ROrPqtXWBultPU7xQGe7HIPDEe8qtIDA2pzkg0WoBbOb951l
gLwe7ykfbIS9DAePH7b3PDk9QbR4HDvFDfztV07jtmyy9bi+a2KhTZ0pPCbmYT+G
IgiogxzkWYzD9iMB9sfy7B/LVLs+nspx3qnJLB5Z94tr9/AKwI9T7za/Uw4kGfJJ
i8Uo3dX0mpLZ5kdOIZGXXhBmIAlw5vHBWKlG+/3kXcqgpJYlxe9UrYeuOq56apWO
bA1Xi4AfOWgbJXGm6THMEG9TEy92fLAh5+yQhXAI0nIOSsacFkz1rTmerwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2G33AtsD8ACTadKeLGdF11ZpxfMB8GA1UdIwQY
MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct
N2M3NDBlZjhhYTk1LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1
LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMttsBCTR
rTyRcZ0+GRRyIH2p3N/2Jls2dMkyo7/ENsfuM7+3xEn3rjEFWwPQgxR5NKsRDf0D
J99yP8xcAx3HESdNQK/aY86PqBMYMOPpAdoaU+56jAE26fQ6j/+DTLiM9iziqpfm
CIb3o+9cnB7V7HkqSaPOFC68VZGh0dZ/OD9PXdvHXrHyyPbxIN7w8QqNJSiXKfuc
9EJDxvUAjTbT1EIx1Pa1xty1QUTH1xzz2Qoly+X1k3mXfqTL+xPizlZ3gF89hy/9
2iiVQzsqR8bulfbdGzhEeyhTDDybfQEqLlvTC/eGLk1UqwSNYJCqpeWkqfE0BmoR
w+vK1DtGZQwtqg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:03 2026 by rpki-client