Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: FjfFsoz92YI+h8B2hGKMdq8Z0j2x3jU8lxzASBQCLYI=
Subject key identifier: 70:92:20:69:83:DA:A4:69:0A:0F:11:6D:6E:05:72:76:24:3D:00:61
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 019D394167BE0C540FA18351CB6B21CCFC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: nU7s4umftAMiGN6r7wo4esT2bnk.roa (hash: L35jrGV9LS0QTr/GiGbmv85SpItryPBRv0p450JVajw=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: dSdp8+bVDMOWOI+EIt+3+BsraiCN9ZR6ppKEeW9E4OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:67:be:0c:54:0f:a1:83:51:cb:6b:21:cc:fc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=7092206983daa4690a0f116d6e057276243d0061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:8f:0e:e2:c1:45:f7:34:73:0f:72:b0:4b:
8f:43:dd:50:50:7f:48:1b:55:3c:e8:0e:12:ae:42:
e9:73:e6:0e:0c:70:ac:ea:fb:03:2d:ef:6d:d1:01:
37:7e:24:14:6e:b6:85:7a:c6:98:50:1b:dd:30:0e:
42:d6:16:e9:0a:15:bb:41:63:ef:ac:ff:55:9d:49:
ff:e4:96:b9:5d:7d:d8:4e:88:b1:6a:7b:3b:54:d5:
68:85:4a:84:54:f8:0b:d7:29:81:89:59:e6:d8:bd:
29:61:d1:36:4a:dc:43:ae:41:8a:80:94:49:96:93:
01:4d:7f:17:7b:40:fe:a1:2e:50:87:08:8f:e6:b3:
c5:6d:a4:7f:9d:a7:9f:f6:76:e7:0c:11:80:7f:b6:
b7:fb:b9:4c:e5:7e:34:31:85:f2:ed:16:69:e4:a5:
d4:74:db:22:42:9d:a7:d9:6e:56:23:a1:cd:a9:5e:
d9:e9:e6:e1:c0:3f:d4:8f:4f:5b:2c:ee:13:77:82:
0b:84:14:5b:34:f3:d1:5f:0b:24:ed:43:5d:8f:fe:
0e:7f:4d:2b:a1:7e:b9:09:d6:da:f9:01:e6:71:a9:
db:31:d9:57:73:88:71:cb:c1:cb:a0:71:8c:a3:11:
f4:e5:3c:89:b6:c0:b8:a3:fe:5e:36:d2:9d:4d:be:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:20:69:83:DA:A4:69:0A:0F:11:6D:6E:05:72:76:24:3D:00:61
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3c:95:d6:a7:d1:7f:5e:1c:5f:86:88:b3:f9:c9:e5:66:f2:
38:f0:d2:76:7f:c1:08:cb:df:62:3f:f7:5c:f0:38:d3:c3:21:
a3:88:d9:c7:eb:8e:48:c1:06:5a:73:02:b9:f3:5d:16:d5:21:
07:fe:dc:f6:0d:4b:5a:e6:ed:cf:1a:db:27:06:36:f0:54:7f:
90:0c:18:cc:11:1e:6c:96:33:f9:af:e3:86:26:63:70:e5:52:
d4:8c:79:a3:67:71:03:df:c3:c7:99:c9:42:18:94:6f:e8:26:
72:09:8f:69:1d:57:12:47:26:ee:c5:59:52:ac:d3:76:7c:4c:
1c:fd:eb:9a:ea:9d:98:17:7a:09:98:ca:f7:89:51:00:89:31:
e7:b5:b2:65:b4:78:be:84:30:71:46:1f:cd:84:f2:5f:96:45:
b2:b0:ce:29:47:56:e2:1b:9d:f4:ad:67:5c:62:8c:e0:ea:0c:
df:19:39:04:3c:d7:13:c6:8f:b6:c8:da:64:d1:5c:7d:18:50:
ea:a4:b7:90:1b:45:41:82:23:6d:d8:ef:0d:cd:85:e1:c3:de:
a4:77:c1:9f:16:bb:9e:53:b7:37:9b:f6:2b:72:12:3d:12:2f:
8a:b2:ff:53:c6:8a:eb:4a:30:ca:cb:65:18:0e:d3:0b:ad:c3:
d9:08:26:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWe+DFQPoYNRy2shzPyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw
NGZkOWMwHhcNMjYwMzI5MTEwMTIwWhcNMjYwMzMwMTEwMTIwWjAzMTEwLwYDVQQD
Eyg3MDkyMjA2OTgzZGFhNDY5MGEwZjExNmQ2ZTA1NzI3NjI0M2QwMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxCPDuLBRfc0cw9ysEuPQ91QUH9I
G1U86A4SrkLpc+YODHCs6vsDLe9t0QE3fiQUbraFesaYUBvdMA5C1hbpChW7QWPv
rP9VnUn/5Ja5XX3YToixans7VNVohUqEVPgL1ymBiVnm2L0pYdE2StxDrkGKgJRJ
lpMBTX8Xe0D+oS5QhwiP5rPFbaR/naef9nbnDBGAf7a3+7lM5X40MYXy7RZp5KXU
dNsiQp2n2W5WI6HNqV7Z6ebhwD/Uj09bLO4Td4ILhBRbNPPRXwsk7UNdj/4Of00r
oX65Cdba+QHmcanbMdlXc4hxy8HLoHGMoxH05TyJtsC4o/5eNtKdTb7rfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCSIGmD2qRpCg8RbW4FcnYkPQBhMB8GA1UdIwQY
MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt
MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw
LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTyV1qfR
f14cX4aIs/nJ5WbyOPDSdn/BCMvfYj/3XPA408Mho4jZx+uOSMEGWnMCufNdFtUh
B/7c9g1LWubtzxrbJwY28FR/kAwYzBEebJYz+a/jhiZjcOVS1Ix5o2dxA9/Dx5nJ
QhiUb+gmcgmPaR1XEkcm7sVZUqzTdnxMHP3rmuqdmBd6CZjK94lRAIkx57WyZbR4
voQwcUYfzYTyX5ZFsrDOKUdW4hud9K1nXGKM4OoM3xk5BDzXE8aPtsjaZNFcfRhQ
6qS3kBtFQYIjbdjvDc2F4cPepHfBnxa7nlO3N5v2K3ISPRIvirL/U8aK60owystl
GA7TC63D2QgmAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:40 2026 by rpki-client