Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: Doe+SneOJKW+zfJJSz8SWYm/y7URWMFzIrovXmtJwDI=
Subject key identifier: D0:7A:85:AE:5F:2E:FF:4A:2E:92:B3:2B:0E:83:22:98:C0:CB:D7:37
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019D38663330F92074786D4970AD3D863A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0C2B
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: ifh08z2AQaNeWBBgfvzoM0eQy0sChDR9LN0kKu+YZyc=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:33:30:f9:20:74:78:6d:49:70:ad:3d:86:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=d07a85ae5f2eff4a2e92b32b0e832298c0cbd737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:13:cc:66:07:c9:f0:7f:c5:ab:fe:c9:3b:
87:9b:5b:ff:1e:dc:a0:79:a2:bb:f7:28:22:a4:42:
60:84:b1:72:ef:b8:34:28:2a:14:52:3c:dc:5c:fa:
36:f8:bd:e1:c1:61:8a:2a:6d:77:13:dd:9a:24:fc:
d5:81:f3:94:15:46:ed:55:da:91:e8:67:9f:9f:31:
fc:98:41:6d:c9:db:7a:d3:e4:9a:db:0e:cb:b8:f2:
16:2d:5f:03:67:96:82:1a:47:1c:87:6f:db:3f:7e:
86:8a:7a:56:0d:e7:ba:3b:04:62:64:3a:47:ce:69:
cd:75:b4:5f:34:69:60:9d:90:f9:0b:45:0a:46:77:
e8:33:6b:1f:6b:56:82:d6:42:bd:98:18:0c:00:7a:
15:85:fa:39:69:d8:dc:8d:90:f4:5b:a1:27:fc:34:
07:af:97:ec:9c:80:4a:13:36:17:25:f2:1a:e4:42:
ac:fc:aa:35:2d:fe:fa:8e:e0:d5:23:8a:ac:ae:aa:
0b:27:d2:fa:6f:71:ca:76:2a:7c:39:f8:dc:79:cb:
69:0a:71:2d:09:70:47:df:6c:f8:d3:d8:2c:94:80:
23:7d:a5:c1:2e:65:6b:cb:69:69:6d:a1:f6:bb:f5:
2b:2d:15:c4:fa:0a:e4:b5:91:47:03:3b:1d:81:af:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:85:AE:5F:2E:FF:4A:2E:92:B3:2B:0E:83:22:98:C0:CB:D7:37
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d2:b1:b0:78:18:9e:f3:01:c4:a7:9a:52:5f:85:aa:f4:de:
ed:dd:76:65:7d:b5:34:75:ee:bf:a1:c2:dc:ac:de:5b:b3:20:
85:74:b4:70:84:7d:1e:1d:b0:50:ae:82:f4:18:a5:6a:07:be:
60:ae:89:24:2f:d7:91:6f:65:34:4a:cf:dd:ee:27:65:0b:e1:
ba:9f:b3:ee:5d:97:d5:8d:43:3a:cf:d0:3f:1f:e6:98:0c:70:
81:72:6e:0a:16:28:fb:7e:25:7d:d3:0c:90:4e:ce:98:a4:fd:
31:99:ab:b5:2c:83:00:ba:fb:31:54:7b:49:08:19:59:8e:15:
02:c6:90:8e:35:64:0c:3d:cf:3a:03:71:95:b2:6e:20:79:89:
e6:c6:06:d5:b1:84:db:ba:13:7f:97:69:53:b7:62:e8:55:61:
c9:d0:49:c0:00:3d:e1:ce:4e:7f:ee:68:fc:78:03:f6:8f:d1:
61:7d:01:27:ea:57:0e:22:ea:77:51:8c:41:0a:7e:a3:e9:a5:
2e:23:7e:1a:e8:e5:d3:08:1e:ce:f7:c8:13:f9:3f:8e:3c:f9:
4f:aa:d5:34:61:80:41:48:0e:a7:be:d0:6a:c0:1a:68:b3:0c:
1e:4d:48:4d:fe:51:44:a6:08:f7:21:ef:9a:d2:13:3c:1b:ac:
96:9a:0b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZjMw+SB0eG1JcK09hjoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjYwMzI5MDcwMTU0WhcNMjYwMzMwMDcwMTU0WjAzMTEwLwYDVQQD
EyhkMDdhODVhZTVmMmVmZjRhMmU5MmIzMmIwZTgzMjI5OGMwY2JkNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6awTzGYHyfB/xav+yTuHm1v/Htyg
eaK79ygipEJghLFy77g0KCoUUjzcXPo2+L3hwWGKKm13E92aJPzVgfOUFUbtVdqR
6GefnzH8mEFtydt60+Sa2w7LuPIWLV8DZ5aCGkcch2/bP36GinpWDee6OwRiZDpH
zmnNdbRfNGlgnZD5C0UKRnfoM2sfa1aC1kK9mBgMAHoVhfo5adjcjZD0W6En/DQH
r5fsnIBKEzYXJfIa5EKs/Ko1Lf76juDVI4qsrqoLJ9L6b3HKdip8OfjcectpCnEt
CXBH32z409gslIAjfaXBLmVry2lpbaH2u/UrLRXE+grktZFHAzsdga8DiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB6ha5fLv9KLpKzKw6DIpjAy9c3MB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtKxsHgY
nvMBxKeaUl+FqvTe7d12ZX21NHXuv6HC3KzeW7MghXS0cIR9Hh2wUK6C9Bilage+
YK6JJC/XkW9lNErP3e4nZQvhup+z7l2X1Y1DOs/QPx/mmAxwgXJuChYo+34lfdMM
kE7OmKT9MZmrtSyDALr7MVR7SQgZWY4VAsaQjjVkDD3POgNxlbJuIHmJ5sYG1bGE
27oTf5dpU7di6FVhydBJwAA94c5Of+5o/HgD9o/RYX0BJ+pXDiLqd1GMQQp+o+ml
LiN+Gujl0wgezvfIE/k/jjz5T6rVNGGAQUgOp77QasAaaLMMHk1ITf5RRKYI9yHv
mtITPBuslpoLpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client