Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: Y1QOfykn55hPZ1ih/xeJhENrQPxIP4yqMPuPLAiPaIY=
Subject key identifier: B7:33:E5:90:1F:F0:54:60:5E:5F:23:F7:A9:40:B6:25:26:5C:EF:3F
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019D371B37F8BF957503392D2CEEDCFA049F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1780
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: IdKLgAcgrHLlJ/65B3h5KkAyE1Lda2QnPDW55fAk86c=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:37:f8:bf:95:75:03:39:2d:2c:ee:dc:fa:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=b733e5901ff054605e5f23f7a940b625265cef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:5c:4c:c2:0f:80:df:ec:d0:58:f6:70:df:
6c:e4:7b:d1:08:47:39:7d:f0:30:ff:81:34:50:3d:
9c:cf:b7:cb:e6:07:2b:15:60:4d:f4:68:2b:34:5f:
87:d3:40:63:97:5e:e5:2b:13:65:60:66:88:72:10:
8e:0b:a3:bd:42:1a:10:6a:22:5f:d9:81:b2:33:4b:
0c:b0:b1:ba:f5:21:97:5f:81:2a:fd:d0:df:7c:e5:
23:5c:c0:dc:5d:74:c5:71:c6:be:04:ab:70:56:f0:
b1:ac:f2:e0:c7:23:18:60:d9:a9:c3:7f:eb:32:24:
b9:ef:96:81:3f:d7:df:6c:46:8e:91:fb:e4:e4:7a:
92:00:34:d6:cf:74:cf:49:e4:53:c8:1e:59:c8:29:
ba:23:12:a6:75:e8:29:94:75:bc:ab:30:03:53:11:
e9:44:89:0a:e2:a3:90:fa:e7:f1:ed:a4:e1:d0:c3:
4c:fc:4a:1a:a2:1a:28:c1:80:d1:fc:59:d0:42:2d:
c3:41:fb:3b:5e:97:d8:b3:c5:db:9b:64:a5:f8:8f:
ca:11:11:5f:3b:5a:e9:98:c1:94:33:bd:06:24:f5:
e9:02:f2:aa:f9:b0:81:f2:23:ef:87:65:0b:34:5b:
78:c5:21:b3:61:07:87:01:ac:2f:3b:83:b0:d9:ba:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:E5:90:1F:F0:54:60:5E:5F:23:F7:A9:40:B6:25:26:5C:EF:3F
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:44:9d:34:86:66:72:61:ab:1d:ab:d9:a6:6d:98:cb:66:
fb:e0:81:48:0e:ae:67:31:8e:ab:36:3a:f8:f3:34:ab:f4:89:
62:f0:18:ac:8a:c7:9a:91:06:44:4d:cd:68:63:bf:1c:18:e8:
6a:3a:0b:aa:81:42:56:68:a0:37:13:b9:b6:8d:a7:73:94:5f:
c3:79:db:b7:17:bc:f4:a4:b8:db:6e:41:4e:3e:01:6a:fb:91:
fd:02:e9:b2:f4:3e:5f:b7:4d:62:8c:92:04:1f:87:00:c4:db:
46:c9:3b:c1:73:0f:d9:24:6e:56:dc:3a:dd:31:af:29:f1:94:
f1:5e:89:b4:29:37:64:d9:e9:36:20:b5:f6:ef:e7:4d:7a:2d:
3f:27:14:07:67:a1:68:59:6c:ae:21:47:66:47:30:9f:c7:5b:
73:42:b3:5d:74:4c:30:13:4a:c5:b8:04:8b:f0:da:10:bd:1d:
3c:96:20:55:88:dc:40:d5:c4:31:27:18:13:07:99:d4:6c:d7:
a6:da:4f:68:d5:46:7a:41:9e:42:0c:27:8d:c7:18:69:ce:6f:
b7:0e:0e:1c:28:97:f7:af:35:18:9e:5b:95:74:ee:38:1f:bc:
a2:58:eb:35:72:85:63:07:92:b4:1a:cb:57:74:77:01:c6:4c:
7b:57:74:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Gzf4v5V1AzktLO7c+gSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjYwMzI5MDEwMDIzWhcNMjYwMzMwMDEwMDIzWjAzMTEwLwYDVQQD
EyhiNzMzZTU5MDFmZjA1NDYwNWU1ZjIzZjdhOTQwYjYyNTI2NWNlZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MhcTMIPgN/s0Fj2cN9s5HvRCEc5
ffAw/4E0UD2cz7fL5gcrFWBN9GgrNF+H00Bjl17lKxNlYGaIchCOC6O9QhoQaiJf
2YGyM0sMsLG69SGXX4Eq/dDffOUjXMDcXXTFcca+BKtwVvCxrPLgxyMYYNmpw3/r
MiS575aBP9ffbEaOkfvk5HqSADTWz3TPSeRTyB5ZyCm6IxKmdegplHW8qzADUxHp
RIkK4qOQ+ufx7aTh0MNM/EoaohoowYDR/FnQQi3DQfs7XpfYs8Xbm2Sl+I/KERFf
O1rpmMGUM70GJPXpAvKq+bCB8iPvh2ULNFt4xSGzYQeHAawvO4Ow2bp2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcz5ZAf8FRgXl8j96lAtiUmXO8/MB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeldEnTSG
ZnJhqx2r2aZtmMtm++CBSA6uZzGOqzY6+PM0q/SJYvAYrIrHmpEGRE3NaGO/HBjo
ajoLqoFCVmigNxO5to2nc5Rfw3nbtxe89KS4225BTj4BavuR/QLpsvQ+X7dNYoyS
BB+HAMTbRsk7wXMP2SRuVtw63TGvKfGU8V6JtCk3ZNnpNiC19u/nTXotPycUB2eh
aFlsriFHZkcwn8dbc0KzXXRMMBNKxbgEi/DaEL0dPJYgVYjcQNXEMScYEweZ1GzX
ptpPaNVGekGeQgwnjccYac5vtw4OHCiX9681GJ5blXTuOB+8oljrNXKFYweStBrL
V3R3AcZMe1d0bw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:27 2026 by rpki-client