Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 0O055zJ9YlTPTa2PDQECNv40z44uk3b6WfI8QM0ilTo=
Subject key identifier: 16:DE:3D:3F:EA:51:22:43:12:58:F6:A5:47:CD:E6:1F:2D:7D:21:6D
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019D2695C2A76490E98A8208E7AC20237227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 13CA
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: Dl+kINZulY7FJBDF0pgYEdKN4FuDIAPQeyQyj8axyfE=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c2:a7:64:90:e9:8a:82:08:e7:ac:20:23:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=16de3d3fea5122431258f6a547cde61f2d7d216d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:83:44:9f:d5:6e:10:66:f7:73:ed:f8:cf:
44:b3:e6:ef:a5:d0:5d:5d:9e:78:37:28:b3:b9:dc:
3b:08:76:9b:70:57:7a:ea:f3:37:7c:9c:de:78:f9:
91:58:13:bc:c6:9f:b2:ac:b9:24:15:f4:4e:e1:a4:
e2:da:7c:df:8c:5e:3b:be:d7:7a:9e:38:ae:c2:6b:
f6:94:46:d1:53:1d:d2:b0:9d:ff:24:a3:2b:13:79:
64:f2:fd:9b:a6:3f:b8:1f:7a:79:be:14:9a:6e:7f:
c4:54:ab:08:ed:43:87:81:34:c0:f5:25:35:e7:c5:
77:b3:da:d6:ba:7c:9e:1d:3d:74:af:34:5a:13:da:
6d:91:a9:75:14:d4:42:5f:92:3f:28:20:53:d7:4b:
6b:1e:08:bf:74:ec:70:17:2e:40:d9:5d:72:91:4a:
f5:f6:1a:8f:26:56:7b:c9:61:44:69:b6:04:d3:fe:
ef:52:de:d5:80:f3:b2:94:41:ac:b2:55:6d:bf:bc:
d0:ef:42:dd:4f:27:3e:1d:68:a8:76:70:f2:cc:ea:
e1:23:79:78:b1:d7:50:ff:8e:f1:b5:8b:92:27:bf:
3c:c0:59:94:74:73:32:03:30:3a:1a:e0:32:8e:49:
10:7e:86:d8:80:69:a2:0b:fe:9d:84:76:95:75:5f:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:3D:3F:EA:51:22:43:12:58:F6:A5:47:CD:E6:1F:2D:7D:21:6D
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d2:22:34:26:ff:af:3a:cd:bd:f3:59:fd:2c:26:ae:19:f7:
b1:98:ee:73:02:7c:15:a5:b0:61:cf:6a:e8:b8:66:65:69:60:
0f:96:e1:91:a2:69:a4:e6:28:02:74:5b:f3:8e:b9:81:0f:92:
bb:53:71:b7:6a:39:c2:6a:e5:94:82:72:59:a7:d1:9b:d4:bc:
0b:1e:19:aa:bf:2f:33:3a:99:12:50:fb:3a:cb:55:4c:6f:5b:
23:a1:09:7c:0b:bc:c0:b2:2f:eb:9d:40:e3:55:97:37:bc:ac:
11:27:bd:9e:f3:85:96:05:31:33:87:9b:85:1d:c3:72:bc:e6:
b9:52:a5:ed:7e:a2:03:50:99:d5:f5:5e:1d:6e:5d:7b:17:61:
d8:37:1e:a3:b9:c1:9d:87:d5:90:d5:eb:f9:d7:4a:46:ea:e2:
08:45:fd:10:0e:14:ec:91:b5:8a:62:99:8b:c6:f6:7a:48:46:
7e:87:73:06:c4:ca:fd:2d:6e:b3:e2:1d:78:65:e2:88:0a:52:
a1:ef:1f:57:71:cd:ea:71:93:ac:53:2f:46:32:53:85:b6:27:
a1:cd:26:78:b8:d5:03:87:a2:85:c9:d2:ce:86:f3:86:99:eb:
e8:00:02:24:2a:03:b6:2e:48:02:c1:04:5d:2b:85:a0:1f:4c:
d5:1f:5f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcKnZJDpioII56wgI3InMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy
ZWZmZTIwHhcNMjYwMzI1MjAwMDQyWhcNMjYwMzI2MjAwMDQyWjAzMTEwLwYDVQQD
EygxNmRlM2QzZmVhNTEyMjQzMTI1OGY2YTU0N2NkZTYxZjJkN2QyMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/GDRJ/VbhBm93Pt+M9Es+bvpdBd
XZ54Nyizudw7CHabcFd66vM3fJzeePmRWBO8xp+yrLkkFfRO4aTi2nzfjF47vtd6
njiuwmv2lEbRUx3SsJ3/JKMrE3lk8v2bpj+4H3p5vhSabn/EVKsI7UOHgTTA9SU1
58V3s9rWunyeHT10rzRaE9ptkal1FNRCX5I/KCBT10trHgi/dOxwFy5A2V1ykUr1
9hqPJlZ7yWFEabYE0/7vUt7VgPOylEGsslVtv7zQ70LdTyc+HWiodnDyzOrhI3l4
sddQ/47xtYuSJ788wFmUdHMyAzA6GuAyjkkQfobYgGmiC/6dhHaVdV/eQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbePT/qUSJDElj2pUfN5h8tfSFtMB8GA1UdIwQY
MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt
MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz
LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdIiNCb/
rzrNvfNZ/Swmrhn3sZjucwJ8FaWwYc9q6LhmZWlgD5bhkaJppOYoAnRb8465gQ+S
u1Nxt2o5wmrllIJyWafRm9S8Cx4Zqr8vMzqZElD7OstVTG9bI6EJfAu8wLIv651A
41WXN7ysESe9nvOFlgUxM4ebhR3DcrzmuVKl7X6iA1CZ1fVeHW5dexdh2Dceo7nB
nYfVkNXr+ddKRuriCEX9EA4U7JG1imKZi8b2ekhGfodzBsTK/S1us+IdeGXiiApS
oe8fV3HN6nGTrFMvRjJThbYnoc0meLjVA4eihcnSzobzhpnr6AACJCoDti5IAsEE
XSuFoB9M1R9fLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:03 2026 by rpki-client