Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: 6FwNCEtf5cDzPBHeVul1/WQm+eEZpxZlM8PPxSO8UYc=
Subject key identifier: C2:44:E7:42:B8:5C:99:22:B0:9D:70:38:BE:7E:9F:E3:5A:13:80:A6
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 019D30E266D07EFBC0EBEC808F771711863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1896
Signing time: Fri 27 Mar 2026 20:00:36 +0000
Manifest this update: Fri 27 Mar 2026 20:00:36 +0000
Manifest next update: Sat 28 Mar 2026 20:00:36 +0000
Files and hashes: 1: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: FqY43hjrWdo0AwBOLpCyeXu1FU5MyXGbP8/ti2reyag=)
2: UfUS4AgweibzcI9ivSjuopIuKmo.roa (hash: wv3d+e5BddXcUFyrDf2j3FXenz2r8zUlWN+AJi8VvhU=)
3: pPcIWWSPfdU72r-bpp2XUpFdTuM.roa (hash: Dc0DQiOpnTVZj1ZdwmmStzGkXc32vT49ag5ce63zJ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:e2:66:d0:7e:fb:c0:eb:ec:80:8f:77:17:11:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Mar 27 20:00:36 2026 GMT
Not After : Mar 28 20:00:36 2026 GMT
Subject: CN=c244e742b85c9922b09d7038be7e9fe35a1380a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:c2:82:81:e0:b8:af:6e:a1:c7:ad:b5:28:
d0:4f:4b:b0:09:74:4d:6f:54:83:47:7b:1a:bf:69:
6b:ad:79:34:67:37:bb:82:8c:53:26:7f:76:2e:6f:
91:ec:a6:6c:73:0a:d4:9d:0a:ec:bd:94:ca:30:e3:
4f:73:33:ec:d7:96:f1:4c:e4:99:3c:34:57:cd:fe:
10:61:31:8b:32:11:77:97:fe:78:55:15:68:f9:0a:
8b:16:85:3a:68:3f:3e:c7:87:f8:8e:e4:68:e4:9b:
33:fb:6d:bc:ec:fb:48:4b:93:5b:5d:66:c4:fc:d8:
ed:78:16:70:cc:9a:e5:b5:50:9b:5d:39:2e:ad:07:
73:6d:0f:14:04:a3:af:e8:24:21:00:7e:ed:14:01:
71:7e:8e:6e:d7:fe:49:21:d2:99:da:ac:e2:8e:d7:
bf:97:f7:c8:ad:fa:a3:03:db:cb:36:21:d1:51:6d:
4c:65:7f:8d:57:dd:ac:40:79:ca:08:c7:2c:79:da:
af:f4:6d:29:69:76:88:74:40:50:5c:40:f3:8d:78:
a0:6e:d2:23:65:30:cb:3d:86:58:00:ae:62:a4:54:
4b:9d:9b:6f:2d:ab:7b:ef:cb:ba:3d:75:14:aa:4e:
e9:f1:9e:5e:1d:65:93:ee:3f:fd:ec:23:1c:3c:50:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:E7:42:B8:5C:99:22:B0:9D:70:38:BE:7E:9F:E3:5A:13:80:A6
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:95:a1:cc:4a:c9:bf:11:8e:cd:6c:bc:fb:1b:46:3b:cf:
b1:93:6b:07:fc:d1:db:4d:f3:55:b3:57:23:ae:37:0f:37:b4:
d8:fc:c0:25:b5:f4:c9:85:0e:bc:85:6a:de:cf:38:e3:74:63:
36:97:6d:98:cb:42:87:6b:0f:06:58:bc:53:62:1d:7b:f6:1e:
0c:b4:f9:c5:47:32:16:ab:b9:eb:ad:cb:85:6c:37:44:92:48:
44:d6:8b:c0:4b:d7:e4:11:75:d7:48:d0:20:41:42:f1:65:38:
d3:b1:3f:86:58:9c:d7:39:6d:da:49:ef:d8:2b:bc:ef:a6:d3:
77:01:6c:eb:52:26:83:12:eb:11:a9:24:ee:c5:ac:9f:e6:d2:
4d:62:6b:04:ab:3b:27:73:39:13:c9:8b:9a:ed:1a:63:f3:cd:
8c:d5:f5:ab:f0:df:7a:96:f7:b5:5e:8c:f7:ed:cb:9b:f6:29:
dd:8b:72:5c:1c:14:f6:5b:f9:9b:1a:74:55:02:ed:ef:af:f7:
85:86:e9:c8:eb:86:68:d8:4c:52:1f:57:51:ca:e7:77:e1:78:
70:8a:5c:28:2e:67:60:fa:cf:ab:ab:8a:ff:9e:21:0d:b0:2f:
7a:5f:17:f0:85:69:bf:1d:5a:6e:9c:96:a5:cc:6c:85:6c:d7:
c2:55:67:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0w4mbQfvvA6+yAj3cXEYY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2ExZDViZGQ1MDM0NGZmNWVmODg0YTY2MGU4MmViYTgz
YmMwZGIwHhcNMjYwMzI3MjAwMDM2WhcNMjYwMzI4MjAwMDM2WjAzMTEwLwYDVQQD
EyhjMjQ0ZTc0MmI4NWM5OTIyYjA5ZDcwMzhiZTdlOWZlMzVhMTM4MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizzCgoHguK9uocettSjQT0uwCXRN
b1SDR3sav2lrrXk0Zze7goxTJn92Lm+R7KZscwrUnQrsvZTKMONPczPs15bxTOSZ
PDRXzf4QYTGLMhF3l/54VRVo+QqLFoU6aD8+x4f4juRo5Jsz+2287PtIS5NbXWbE
/NjteBZwzJrltVCbXTkurQdzbQ8UBKOv6CQhAH7tFAFxfo5u1/5JIdKZ2qzijte/
l/fIrfqjA9vLNiHRUW1MZX+NV92sQHnKCMcsedqv9G0paXaIdEBQXEDzjXigbtIj
ZTDLPYZYAK5ipFRLnZtvLat778u6PXUUqk7p8Z5eHWWT7j/97CMcPFBmHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJE50K4XJkisJ1wOL5+n+NaE4CmMB8GA1UdIwQY
MBaAFA7KHVvdUDRP9e+ISmYOguuoO8DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzct
N2M3ZjAwYTk1M2UxLzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzctN2M3ZjAwYTk1M2Ux
LzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0yVocxK
yb8Rjs1svPsbRjvPsZNrB/zR203zVbNXI643Dze02PzAJbX0yYUOvIVq3s8443Rj
NpdtmMtCh2sPBli8U2Ide/YeDLT5xUcyFqu5663LhWw3RJJIRNaLwEvX5BF110jQ
IEFC8WU407E/hlic1zlt2knv2Cu876bTdwFs61ImgxLrEakk7sWsn+bSTWJrBKs7
J3M5E8mLmu0aY/PNjNX1q/Dfepb3tV6M9+3Lm/Yp3YtyXBwU9lv5mxp0VQLt76/3
hYbpyOuGaNhMUh9XUcrnd+F4cIpcKC5nYPrPq6uK/54hDbAvel8X8IVpvx1abpyW
pcxshWzXwlVnOg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 04:45:25 2026 by rpki-client