Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: rqiln1mYUEbGfwLpHULm7elAGeW/4wXOsPj29UjdXsM=
Subject key identifier: 58:CB:03:E1:8D:6E:1E:99:C2:CB:90:57:1F:CC:C0:E8:58:D5:7D:90
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019D37C09D28F73A4D334C21DB37B64B9BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: 7KK7NM9gASih7PFjV9tfD1cNvqrOgA6EdslEaTfT9Kc=)
2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9d:28:f7:3a:4d:33:4c:21:db:37:b6:4b:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=58cb03e18d6e1e99c2cb90571fccc0e858d57d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:28:83:01:dd:f0:40:85:ff:d0:87:fe:b6:
61:2d:21:f1:09:b5:76:b6:96:e5:a4:90:43:74:ca:
97:06:0b:90:8b:37:df:05:9d:b7:05:b7:4d:9d:44:
22:63:06:1a:5c:c9:bd:cd:2e:73:4c:09:f4:5b:d2:
af:52:ac:f4:28:92:b8:f9:89:af:b1:77:b0:8e:24:
85:1a:ea:51:08:df:bd:ae:d7:01:2b:2b:22:1e:a7:
03:89:bb:47:70:bd:81:47:1a:54:cc:0e:e2:22:a8:
ae:01:92:8b:19:f0:73:67:81:3d:be:eb:db:dd:94:
8d:9c:1a:84:c8:3d:ec:e4:41:3d:05:46:6e:82:f7:
67:c4:57:de:1d:bf:fe:15:0f:71:31:d6:fe:ff:3e:
29:54:eb:fb:57:70:e3:cf:d4:76:50:80:66:01:64:
05:b4:7c:62:4e:7e:02:e6:8b:44:a3:ab:cb:7e:00:
bc:93:05:52:10:d7:86:b7:7a:e6:3a:ed:d2:e9:ce:
ef:25:21:7f:43:d7:22:24:5f:f1:b0:30:49:46:80:
39:8f:a6:ba:ad:af:74:06:30:a7:e6:52:f3:77:7f:
e9:29:14:32:a8:55:02:1e:f8:ef:42:95:80:7f:ce:
a4:9c:a9:43:40:11:ef:01:83:4e:a8:75:8c:0b:22:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:03:E1:8D:6E:1E:99:C2:CB:90:57:1F:CC:C0:E8:58:D5:7D:90
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:a9:dc:15:65:d1:06:f5:36:61:4e:01:12:80:04:ee:81:
f6:5a:e1:7a:08:49:6e:f3:c0:a8:c3:c8:5a:7e:34:e4:34:f2:
3c:66:40:47:87:2f:a2:8b:20:26:cf:cc:46:09:22:cf:21:6d:
95:c0:77:03:9b:f2:a8:3e:7b:f6:cb:f2:e9:61:1a:cd:e6:53:
d6:62:8d:03:5e:89:e1:ef:a7:aa:7f:e9:26:d8:e2:95:78:7a:
78:91:a1:44:e2:45:2d:48:6a:ff:07:f0:b5:08:75:4c:50:14:
0c:3c:9a:58:99:bb:e6:41:9c:ea:93:16:ff:94:af:cf:70:f9:
45:bb:ea:fd:e2:33:c8:7a:42:70:e3:c4:35:8a:fc:06:bd:f2:
89:ed:dd:09:52:f5:45:b9:e1:ea:49:dd:f5:61:35:e6:de:c9:
67:38:a4:ee:ee:ee:74:42:78:14:04:e1:b3:9e:a4:14:10:01:
27:ff:5a:4c:32:73:c4:e0:f0:9b:dc:f4:95:1c:d0:7e:0b:a5:
b1:9c:83:a2:a9:a5:cd:50:8d:aa:ba:65:fb:9a:dd:d4:dc:67:
89:79:b7:db:24:98:d3:f0:ed:84:3c:b5:34:20:9e:78:a2:86:
f8:b0:0f:6d:1c:46:72:e6:e2:e9:ff:f8:d8:e4:01:79:ce:54:
ba:34:cd:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJ0o9zpNM0wh2ze2S5v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDVlNmNlYTRiMzkzNDVjZTI5MDJjOTdhMWRiYWJjYjQ2
ZDJhM2IwHhcNMjYwMzI5MDQwMTAzWhcNMjYwMzMwMDQwMTAzWjAzMTEwLwYDVQQD
Eyg1OGNiMDNlMThkNmUxZTk5YzJjYjkwNTcxZmNjYzBlODU4ZDU3ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrgogwHd8ECF/9CH/rZhLSHxCbV2
tpblpJBDdMqXBguQizffBZ23BbdNnUQiYwYaXMm9zS5zTAn0W9KvUqz0KJK4+Ymv
sXewjiSFGupRCN+9rtcBKysiHqcDibtHcL2BRxpUzA7iIqiuAZKLGfBzZ4E9vuvb
3ZSNnBqEyD3s5EE9BUZugvdnxFfeHb/+FQ9xMdb+/z4pVOv7V3Djz9R2UIBmAWQF
tHxiTn4C5otEo6vLfgC8kwVSENeGt3rmOu3S6c7vJSF/Q9ciJF/xsDBJRoA5j6a6
ra90BjCn5lLzd3/pKRQyqFUCHvjvQpWAf86knKlDQBHvAYNOqHWMCyJgnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjLA+GNbh6ZwsuQVx/MwOhY1X2QMB8GA1UdIwQY
MBaAFA4F5s6ks5NFzikCyXodury0bSo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEt
NzdlZWFiMjhiZTI2LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEtNzdlZWFiMjhiZTI2
LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFSp3BVl
0Qb1NmFOARKABO6B9lrheghJbvPAqMPIWn405DTyPGZAR4cvoosgJs/MRgkizyFt
lcB3A5vyqD579svy6WEazeZT1mKNA16J4e+nqn/pJtjilXh6eJGhROJFLUhq/wfw
tQh1TFAUDDyaWJm75kGc6pMW/5Svz3D5Rbvq/eIzyHpCcOPENYr8Br3yie3dCVL1
Rbnh6knd9WE15t7JZzik7u7udEJ4FAThs56kFBABJ/9aTDJzxODwm9z0lRzQfgul
sZyDoqmlzVCNqrpl+5rd1NxniXm32ySY0/DthDy1NCCeeKKG+LAPbRxGcubi6f/4
2OQBec5UujTNQw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:35 2026 by rpki-client