Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: 6eb+qyHVR3I37DYd2hkGoclh+COqSitdHoS0CWgZvXc=
Subject key identifier: EE:49:39:E8:78:63:42:4D:EA:B8:9E:7A:AE:63:89:52:8C:D3:D3:9B
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 019D382E7361838A98671A20E412701F3B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 0308
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: zo4MpaLnr5AoL9ljmxBwYU1BYhhO94Kp59t/8xakRLE=)
2: r87aSMlTcvbfUcNgDrz01QCPAQA.roa (hash: 4IqazvlvJ1xS+3jpTJGpmr9Z+5iN7AeI5Qg7WLedfSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:61:83:8a:98:67:1a:20:e4:12:70:1f:3b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=ee4939e87863424deab89e7aae6389528cd3d39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:0c:7b:d9:3d:d9:af:d1:38:3e:df:80:0d:
8c:c7:4c:d3:eb:fe:d0:9a:21:9e:9b:18:a8:55:d5:
0c:21:1b:a8:91:25:9a:51:64:e5:01:e2:c6:15:e9:
59:37:cb:e0:56:47:9e:82:8b:f4:c4:68:5b:e0:73:
26:df:31:60:b6:73:65:40:fa:51:fc:26:3a:06:14:
27:1e:5e:fa:97:0f:e0:28:55:c2:28:9e:22:99:7e:
e6:c8:25:d8:51:8c:b7:c6:c7:a2:3c:53:52:87:85:
5c:da:d9:9e:11:88:10:86:46:8a:dd:ab:43:8e:40:
c7:d8:2e:a0:df:9a:1b:a7:e9:20:e8:7c:b8:bb:8b:
39:bc:4c:ec:f3:d8:71:d3:a4:8b:5f:7c:c9:17:8d:
cb:7a:bf:83:59:2d:ba:ea:4e:9b:54:d2:fd:2e:c1:
11:b4:b6:f0:0f:57:9c:9b:c8:65:e0:0b:31:33:df:
8a:c1:99:bd:1d:b4:d2:1c:06:58:a0:26:19:38:e1:
c9:dd:3e:67:0d:79:d1:3e:2a:8a:c2:66:99:b7:0f:
4a:af:84:d7:5e:5f:2d:60:17:34:bb:d2:a0:b1:5b:
3b:49:35:41:fc:c0:ce:84:8d:f9:b4:bb:1f:8a:87:
47:a7:da:e2:d0:1c:5c:9f:87:a9:84:40:10:df:a5:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:39:E8:78:63:42:4D:EA:B8:9E:7A:AE:63:89:52:8C:D3:D3:9B
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:6d:be:34:42:af:83:93:27:0f:06:99:07:2c:9f:1b:9a:
af:b5:09:e4:6a:34:c6:5a:55:04:6d:c4:ed:59:cb:f2:8f:75:
8c:a6:4e:21:fc:08:ca:61:0a:41:db:ce:b1:f2:a8:20:40:c6:
ff:40:1f:2c:8b:0c:f5:b6:28:83:38:33:fd:8d:71:f9:33:c9:
d4:6f:d8:5c:e2:b8:85:58:37:c1:fd:e4:2b:40:38:ef:11:e7:
10:ab:37:5a:80:c9:3a:63:c1:a8:16:3c:c8:60:87:78:04:37:
a9:81:e8:a7:3a:e4:09:d9:ef:6b:f3:b8:db:4b:d3:24:ce:36:
7f:a7:89:a7:16:6a:9d:66:ce:c8:8b:19:9d:e1:39:59:b0:43:
dc:79:2d:6e:f2:1a:4a:d7:67:5a:aa:f4:d8:cf:cc:e4:85:37:
8c:98:8a:e5:66:ba:45:23:92:dc:2b:83:3f:2f:57:f6:93:a4:
25:6c:9c:c1:1d:bd:ee:49:90:e7:b0:79:99:d2:41:36:81:aa:
b6:0c:2c:f9:cd:a0:1b:5c:39:38:07:1e:ce:db:fc:74:4f:48:
06:34:4b:b7:4a:83:af:eb:48:e9:b3:12:72:b6:cf:de:01:17:
40:f4:5c:be:e5:e5:11:48:69:31:8e:63:c6:80:f5:1d:6a:a5:
e6:e1:6f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnNhg4qYZxog5BJwHztlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNWUzMmZmMjA3YzMyZjVhNjk4OTRiYWVhYjU2YmY2MzNk
YmFhMWUwHhcNMjYwMzI5MDYwMTAxWhcNMjYwMzMwMDYwMTAxWjAzMTEwLwYDVQQD
EyhlZTQ5MzllODc4NjM0MjRkZWFiODllN2FhZTYzODk1MjhjZDNkMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR8Me9k92a/ROD7fgA2Mx0zT6/7Q
miGemxioVdUMIRuokSWaUWTlAeLGFelZN8vgVkeegov0xGhb4HMm3zFgtnNlQPpR
/CY6BhQnHl76lw/gKFXCKJ4imX7myCXYUYy3xseiPFNSh4Vc2tmeEYgQhkaK3atD
jkDH2C6g35obp+kg6Hy4u4s5vEzs89hx06SLX3zJF43Ler+DWS266k6bVNL9LsER
tLbwD1ecm8hl4AsxM9+KwZm9HbTSHAZYoCYZOOHJ3T5nDXnRPiqKwmaZtw9Kr4TX
Xl8tYBc0u9KgsVs7STVB/MDOhI35tLsfiodHp9ri0Bxcn4ephEAQ36Uy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5JOeh4Y0JN6rieeq5jiVKM09ObMB8GA1UdIwQY
MBaAFA5eMv8gfDL1ppiUuuq1a/Yz26oeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0Mzct
NGJhOGNiMTUwMWZkLzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0MzctNGJhOGNiMTUwMWZk
LzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3ptvjRC
r4OTJw8GmQcsnxuar7UJ5Go0xlpVBG3E7VnL8o91jKZOIfwIymEKQdvOsfKoIEDG
/0AfLIsM9bYogzgz/Y1x+TPJ1G/YXOK4hVg3wf3kK0A47xHnEKs3WoDJOmPBqBY8
yGCHeAQ3qYHopzrkCdnva/O420vTJM42f6eJpxZqnWbOyIsZneE5WbBD3HktbvIa
StdnWqr02M/M5IU3jJiK5Wa6RSOS3CuDPy9X9pOkJWycwR297kmQ57B5mdJBNoGq
tgws+c2gG1w5OAceztv8dE9IBjRLt0qDr+tI6bMScrbP3gEXQPRcvuXlEUhpMY5j
xoD1HWql5uFvyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:29 2026 by rpki-client