Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: CVt5Cf6C5YbrcLBWArt0EiKwgdgpte2It8vUw8HUDmQ=
Subject key identifier: AC:58:C8:00:6A:CD:88:2B:49:90:71:C8:35:60:DF:CA:E3:9A:19:81
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019D37C0426CAF2A0484F32321AAA3A25859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: lcxc9ST8AEbhPbnLcIyKTwKXKK4sNKSQCLlQwUVsbI4=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:42:6c:af:2a:04:84:f3:23:21:aa:a3:a2:58:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=ac58c8006acd882b499071c83560dfcae39a1981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:13:68:4e:2e:9f:75:bd:90:0a:76:80:dd:
85:a4:b6:2a:70:6a:28:63:06:d3:9b:fb:2d:47:0c:
83:3c:3d:bf:45:8b:fa:07:5c:b6:71:e7:77:af:52:
12:f7:a4:96:f1:e2:f3:21:d3:a3:90:c0:f2:53:1a:
0d:aa:2f:54:5e:7d:38:ff:17:44:2d:95:66:0b:77:
1a:e1:14:7f:f3:1a:17:57:ea:64:5b:01:85:50:62:
a8:a7:09:25:e6:b9:03:06:47:3a:46:c8:18:72:85:
a2:31:c6:41:d1:eb:13:77:64:18:29:2e:da:fe:38:
32:e5:7d:1c:d5:83:30:15:d6:a8:51:fb:c3:44:b4:
85:5b:80:52:7f:eb:86:a3:15:e5:1a:38:42:49:c4:
74:3b:70:f7:45:4f:8c:c1:7c:f2:44:43:dc:aa:82:
be:b5:29:5b:ec:96:13:91:e9:7c:0d:32:aa:b9:8e:
56:83:67:56:c1:da:8d:fb:43:e7:d8:9d:8e:17:8c:
43:77:d6:b7:60:3f:ee:f9:a4:c3:17:30:9f:94:35:
43:94:9f:99:ad:50:36:15:a2:31:80:ef:e7:69:36:
2c:82:05:6c:e4:53:c9:1e:13:37:d6:e9:50:f1:24:
66:ef:f1:bc:1e:fa:ac:15:fd:54:08:53:97:85:2c:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:C8:00:6A:CD:88:2B:49:90:71:C8:35:60:DF:CA:E3:9A:19:81
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:18:7a:bb:57:29:82:c6:7b:d9:7f:3e:7a:88:a7:b5:a3:b0:
09:73:7e:3b:63:18:12:2e:db:a5:68:75:75:8d:49:24:71:eb:
b6:e9:45:e1:f0:69:21:0e:ac:dc:91:e9:a9:fd:73:73:5e:21:
19:69:83:88:f6:1e:c8:a2:43:f4:99:55:3c:f5:a2:9b:91:91:
df:e8:99:bf:27:db:21:9e:37:cb:5c:c3:3d:08:c2:ba:e4:91:
af:4e:62:e1:57:1b:b7:ec:18:05:3b:e0:fa:17:d0:f1:9b:6f:
18:1c:7b:96:86:d2:e3:c2:4a:89:af:47:45:4a:8c:26:ae:c5:
9c:24:54:b2:bf:56:88:d9:dc:d1:f4:dc:b4:5e:2c:f7:7f:3f:
a6:8a:a8:22:66:61:3f:ed:96:ac:d5:83:af:8f:87:67:1f:a7:
ac:74:1a:18:67:a1:44:84:1c:03:97:ad:6c:64:5f:df:cb:ed:
20:5d:eb:3f:97:ea:27:c6:cd:79:61:65:64:3e:1d:73:36:6a:
c8:b1:2f:e8:53:f8:e2:15:ab:01:46:f6:f5:d7:1e:fd:27:e2:
07:d1:5f:57:8c:56:6a:55:47:6f:f2:fc:5f:40:9b:ac:2a:ac:
f5:df:60:30:44:85:ef:a8:5e:57:01:6b:b8:31:4a:cf:de:a9:
2d:8a:58:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEJsryoEhPMjIaqjolhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj
MmM2OGIwHhcNMjYwMzI5MDQwMDM5WhcNMjYwMzMwMDQwMDM5WjAzMTEwLwYDVQQD
EyhhYzU4YzgwMDZhY2Q4ODJiNDk5MDcxYzgzNTYwZGZjYWUzOWExOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHoTaE4un3W9kAp2gN2FpLYqcGoo
YwbTm/stRwyDPD2/RYv6B1y2ced3r1IS96SW8eLzIdOjkMDyUxoNqi9UXn04/xdE
LZVmC3ca4RR/8xoXV+pkWwGFUGKopwkl5rkDBkc6RsgYcoWiMcZB0esTd2QYKS7a
/jgy5X0c1YMwFdaoUfvDRLSFW4BSf+uGoxXlGjhCScR0O3D3RU+MwXzyREPcqoK+
tSlb7JYTkel8DTKquY5Wg2dWwdqN+0Pn2J2OF4xDd9a3YD/u+aTDFzCflDVDlJ+Z
rVA2FaIxgO/naTYsggVs5FPJHhM31ulQ8SRm7/G8HvqsFf1UCFOXhSzFYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxYyABqzYgrSZBxyDVg38rjmhmBMB8GA1UdIwQY
MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt
OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1
LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBh6u1cp
gsZ72X8+eointaOwCXN+O2MYEi7bpWh1dY1JJHHrtulF4fBpIQ6s3JHpqf1zc14h
GWmDiPYeyKJD9JlVPPWim5GR3+iZvyfbIZ43y1zDPQjCuuSRr05i4Vcbt+wYBTvg
+hfQ8ZtvGBx7lobS48JKia9HRUqMJq7FnCRUsr9WiNnc0fTctF4s938/poqoImZh
P+2WrNWDr4+HZx+nrHQaGGehRIQcA5etbGRf38vtIF3rP5fqJ8bNeWFlZD4dczZq
yLEv6FP44hWrAUb29dce/SfiB9FfV4xWalVHb/L8X0CbrCqs9d9gMESF76heVwFr
uDFKz96pLYpY/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:35 2026 by rpki-client