Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: +WVfcwlUJuFl7m6fQsPELpP601LMBh9V6pX4ygPlyIQ=
Subject key identifier: 12:8A:2E:20:DF:AB:BA:23:81:0C:D3:46:B7:36:A2:0E:4E:B6:0B:7B
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019CC82C5CF1FF8BF67EE83FD76A895D904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0F86
Signing time: Sat 07 Mar 2026 12:01:16 +0000
Manifest this update: Sat 07 Mar 2026 12:01:16 +0000
Manifest next update: Sun 08 Mar 2026 12:01:16 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: BzvEklJChbHaR7z18uOZEF7glLeYoe4TwycmVUcOOIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2c:5c:f1:ff:8b:f6:7e:e8:3f:d7:6a:89:5d:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Mar 7 12:01:16 2026 GMT
Not After : Mar 8 12:01:16 2026 GMT
Subject: CN=128a2e20dfabba23810cd346b736a20e4eb60b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:5f:b4:a4:d2:25:6b:b7:28:d8:20:c2:f8:
da:80:15:01:a4:40:a4:41:00:68:c8:08:d6:3e:c6:
ee:8e:8b:d5:d0:d3:ea:e3:0d:f7:78:26:5d:9f:94:
2a:c8:2f:4a:cc:6f:a1:cc:4e:d6:3b:0f:14:2e:8d:
b2:98:ca:4b:ac:48:e9:06:67:cf:1f:a5:24:d6:16:
0c:e4:64:75:bb:92:31:b5:79:db:61:9d:d8:8b:f1:
eb:01:22:86:ba:29:b4:eb:e2:6b:4a:e3:34:4a:6d:
9d:9b:c0:db:e9:40:c3:a7:fb:fa:77:0f:98:7a:d9:
14:20:bd:f3:ba:50:5c:ed:8e:c7:b2:b0:f4:75:72:
07:bb:37:d1:c2:9a:db:58:58:73:e1:8a:94:80:33:
99:90:02:db:dd:de:cb:af:54:ca:95:ad:5a:cb:3a:
e9:86:3a:61:71:73:b6:fd:0f:1e:50:1a:6b:f1:26:
fb:ae:50:39:26:f8:db:ad:8a:38:f6:2a:0c:76:c8:
cc:5a:f4:bc:46:53:85:e8:b4:99:98:4b:dd:86:1e:
cc:48:f4:d9:24:7b:09:5e:9d:ab:15:a3:a7:f0:00:
62:3b:43:1a:e1:ac:54:4a:e6:28:8c:94:64:0a:c6:
99:45:79:c9:36:e6:8b:89:a3:68:0b:ad:04:cd:d0:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:2E:20:DF:AB:BA:23:81:0C:D3:46:B7:36:A2:0E:4E:B6:0B:7B
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9b:82:b5:a6:28:7f:e4:41:51:02:23:01:ef:7a:43:36:0a:
00:6d:45:19:bc:16:81:22:65:e7:ed:d2:b4:34:6f:2f:c2:33:
de:19:92:9e:2d:bc:37:68:45:a5:10:05:29:cc:8a:28:7f:a8:
4d:0f:a9:fb:67:40:b4:ad:1c:0e:02:ff:ee:dd:26:8f:0e:eb:
93:4e:30:73:8f:c5:dc:80:c9:a1:24:67:df:25:d4:e2:40:76:
25:f1:20:f0:53:82:75:c7:83:72:ea:54:8d:4f:a8:67:a5:3e:
19:4e:da:36:07:0d:bd:23:7b:8b:23:ac:db:f6:16:1e:51:b7:
26:22:76:86:fb:83:2d:d6:1d:08:11:a1:f9:1f:63:ab:89:28:
b6:41:6d:45:37:b7:79:6c:be:04:25:b3:56:a0:19:ab:7b:39:
cb:26:b2:f1:6f:14:ef:62:61:81:25:43:7c:9c:10:bd:06:ec:
09:89:35:8b:af:bc:15:16:69:d0:d4:89:78:bc:3d:bc:3f:7d:
61:7f:b6:11:ed:03:26:2d:0a:4b:a2:68:19:8c:89:a8:c5:06:
be:fc:03:89:58:ec:e3:3f:65:5c:95:a4:c9:81:c2:84:7e:52:
ce:dd:11:8d:e4:30:8d:72:28:af:0b:f9:26:d9:cc:fb:ff:bd:
6c:bb:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:30:55 2026 by rpki-client