Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File: Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier: 0IKEoSexRS6eqGr+CK9VAtFTnLu7nnF1JyIz26agX1E=
Subject key identifier: 0F:8D:D5:08:F3:6F:E3:F2:08:9A:A4:E3:93:A7:56:16:EB:B0:F8:89
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 019D37C0EE2AF173006586426A9ABE605519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: SY3D0uS5VIAAOrEOZNUbNcVJebz6W8R/5NJCTJj6EMk=)
2: DzslbHixmzBYrsPf_coOdi4vCac.roa (hash: VreYJplCemlpCEq1mBOMn3xaebIevlMt/pCSqFrimOU=)
3: ROslS2q2gassZHFsPyNfMnp6lnQ.roa (hash: KypsIjFPEkDmNdlDZHjTDjD0J5MLcaB0s63R8Glt4Zo=)
4: iglWtYkBC9ngDdbZompM_rZYncA.roa (hash: nTTJKP/icYG9HF3qJuhxJ0nRjLYKtjmOl9gPDGv0VMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ee:2a:f1:73:00:65:86:42:6a:9a:be:60:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=0f8dd508f36fe3f2089aa4e393a75616ebb0f889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:82:87:3a:61:b0:9c:66:72:30:32:49:8f:
76:c2:b8:90:4d:42:85:9c:5c:21:03:18:a9:4b:de:
19:e0:27:85:9e:64:cf:aa:1f:c7:af:31:af:b0:7c:
e9:13:e1:6b:5b:c9:21:97:75:be:78:d1:ee:6c:88:
ad:83:28:24:9a:74:d5:88:f0:08:76:09:07:90:0f:
41:7c:44:8c:fa:d9:aa:dc:0a:9d:fd:f1:d8:12:24:
ff:ab:13:c3:76:bb:84:c6:b5:d4:ac:35:c9:86:07:
f1:d7:b4:3d:3d:0a:c1:d4:4d:92:f3:ef:10:30:32:
ef:94:8b:b4:ad:1f:9f:89:95:c1:97:af:c8:87:52:
e6:25:5a:4d:88:34:f8:15:2b:87:4c:e8:e1:7a:94:
aa:7a:31:4a:1b:d1:a5:70:35:95:af:80:b5:8c:4c:
f2:bd:1d:a3:49:a2:5f:24:bf:ee:d6:a0:ce:a3:fb:
18:6a:33:bf:9e:2f:88:4a:aa:22:85:e2:86:f8:81:
98:3c:c9:ef:1f:14:33:2a:ab:ca:91:00:5e:c4:cd:
40:93:c4:99:b7:54:4d:b8:fb:97:c1:fd:7e:cf:09:
d8:cb:83:d9:0c:77:45:43:07:7d:30:f0:bd:f8:d2:
c0:bc:1d:1a:ac:0d:d8:27:9d:7c:09:45:11:2a:a8:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:D5:08:F3:6F:E3:F2:08:9A:A4:E3:93:A7:56:16:EB:B0:F8:89
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:23:62:6b:6d:a0:0b:d3:95:22:6d:79:45:44:b5:fd:e0:
82:55:64:5b:f3:e4:61:5d:5c:6b:59:34:61:c2:b6:dc:69:73:
d0:d9:79:f9:57:7c:cb:3d:18:19:fe:b6:55:20:e1:d0:5b:cc:
31:2b:26:35:35:80:25:a2:91:14:3d:c6:ef:33:4f:20:ff:f1:
5c:ec:27:fe:3f:db:9a:30:46:e6:5c:f3:3c:e7:1f:b8:77:e1:
75:c9:dd:f0:43:89:a6:b4:66:33:cc:5d:ed:a8:16:75:9c:50:
1c:fd:85:d2:2b:ae:56:cb:49:25:c9:a4:92:b4:1d:8d:1d:45:
48:fc:9e:dd:5b:36:89:b6:49:50:30:fe:66:c5:b5:09:50:ca:
3c:2f:72:d0:c0:5e:21:29:d3:1b:d1:67:7a:2d:46:d9:bf:68:
9a:7d:65:4f:43:73:be:3e:b4:02:34:66:21:dd:f4:49:3b:4b:
92:a5:e7:59:18:d8:09:28:76:9f:4f:8d:e6:94:33:9e:05:6c:
2e:60:d4:55:78:08:38:fa:c1:5f:61:7f:7a:3a:3f:19:68:99:
73:75:15:53:51:6e:5e:2a:f5:5c:c5:07:de:b7:29:6b:56:1a:
c5:fd:65:bc:12:11:8b:e3:88:a4:a6:b9:8d:c6:4a:68:f5:94:
a2:bf:0b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wO4q8XMAZYZCapq+YFUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjYwMzI5MDQwMTIzWhcNMjYwMzMwMDQwMTIzWjAzMTEwLwYDVQQD
EygwZjhkZDUwOGYzNmZlM2YyMDg5YWE0ZTM5M2E3NTYxNmViYjBmODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy02ChzphsJxmcjAySY92wriQTUKF
nFwhAxipS94Z4CeFnmTPqh/HrzGvsHzpE+FrW8khl3W+eNHubIitgygkmnTViPAI
dgkHkA9BfESM+tmq3Aqd/fHYEiT/qxPDdruExrXUrDXJhgfx17Q9PQrB1E2S8+8Q
MDLvlIu0rR+fiZXBl6/Ih1LmJVpNiDT4FSuHTOjhepSqejFKG9GlcDWVr4C1jEzy
vR2jSaJfJL/u1qDOo/sYajO/ni+ISqoiheKG+IGYPMnvHxQzKqvKkQBexM1Ak8SZ
t1RNuPuXwf1+zwnYy4PZDHdFQwd9MPC9+NLAvB0arA3YJ518CUURKqhHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+N1Qjzb+PyCJqk45OnVhbrsPiJMB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSEjYmtt
oAvTlSJteUVEtf3gglVkW/PkYV1ca1k0YcK23Glz0Nl5+Vd8yz0YGf62VSDh0FvM
MSsmNTWAJaKRFD3G7zNPIP/xXOwn/j/bmjBG5lzzPOcfuHfhdcnd8EOJprRmM8xd
7agWdZxQHP2F0iuuVstJJcmkkrQdjR1FSPye3Vs2ibZJUDD+ZsW1CVDKPC9y0MBe
ISnTG9Fnei1G2b9omn1lT0Nzvj60AjRmId30STtLkqXnWRjYCSh2n0+N5pQzngVs
LmDUVXgIOPrBX2F/ejo/GWiZc3UVU1FuXir1XMUH3rcpa1Yaxf1lvBIRi+OIpKa5
jcZKaPWUor8LHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:45 2026 by rpki-client