Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: qHmp8kI0lkRNPFiQvPZhpxZRHAY/hhshKqyXWbn5+Gc=
Subject key identifier: EF:21:39:3F:20:DF:46:DA:0E:E9:79:4A:D1:9F:48:E2:24:B6:49:12
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019D27A8E0E8B39001A1E78FB1B75B46B000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: Rn3UHqinKbD/xjGhhig69KnoD0OJYZm2V4jGmXqEprA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e0:e8:b3:90:01:a1:e7:8f:b1:b7:5b:46:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=ef21393f20df46da0ee9794ad19f48e224b64912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:88:f4:18:bc:7f:4b:8f:f5:68:22:8a:76:
07:db:9c:a4:37:b6:65:d6:47:92:a3:51:17:54:20:
79:ee:fd:2f:c7:32:50:e3:6d:1c:8a:e9:b6:9b:1a:
25:17:b7:e3:a1:69:68:af:92:e4:19:71:98:9c:60:
64:9f:94:02:4e:b5:7d:ec:6a:a3:b6:32:b1:29:29:
c3:1a:0f:a6:4d:ba:c3:0b:71:f6:83:46:61:41:a9:
bd:92:37:01:02:7c:1e:51:78:03:44:d8:e0:2d:c8:
a9:e0:21:48:cc:35:96:ea:b4:13:44:e7:9d:f4:c6:
4a:12:dc:a6:40:5e:55:3a:7b:73:fe:ed:be:a7:c7:
f2:09:29:e7:62:de:8b:1c:b5:ee:47:71:ea:12:f4:
3e:fc:0b:b5:ac:3d:e2:39:9e:62:ab:ed:48:80:d4:
55:3e:62:95:cf:9c:70:01:16:56:99:e4:c5:c0:57:
21:64:57:15:41:cd:38:6a:ce:f4:92:fe:0b:1a:a5:
bd:17:fc:dc:1a:1c:4d:4f:1b:cc:89:2f:0f:e3:6d:
38:8a:7d:c6:c5:4e:29:61:5b:56:27:3c:83:a3:97:
14:e7:66:23:0c:ae:b5:20:7c:15:f4:d2:70:aa:ad:
ee:b6:b5:91:04:2e:4b:22:e3:6b:3a:c0:0a:07:8d:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:39:3F:20:DF:46:DA:0E:E9:79:4A:D1:9F:48:E2:24:B6:49:12
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ca:28:8c:95:3f:ce:74:ae:cb:13:ec:62:39:c0:f6:fb:f4:
0d:f8:7d:27:bc:ae:48:f1:e4:cc:02:a0:0b:bb:36:05:6a:54:
c1:4e:89:98:84:25:99:02:6b:f3:61:6b:df:5d:dc:cb:bb:de:
bf:03:af:b6:42:7a:33:c4:7d:c2:50:1c:b9:8a:14:d6:67:a8:
d1:d2:6d:f7:dd:e4:00:0c:2e:04:39:22:ee:e3:10:f1:c5:a0:
3a:d1:b7:40:db:f1:cc:1c:ec:7d:79:b7:12:fe:d4:62:fa:60:
54:46:4c:a7:99:b5:96:a5:6b:2d:b6:1a:ab:a0:cc:3d:2d:24:
9a:02:b9:d3:63:1b:c9:4c:a9:d1:1c:65:84:38:2f:45:25:31:
47:34:20:df:40:f7:77:ce:30:70:9c:c0:c2:74:b9:ec:2f:62:
b0:3e:40:7c:82:85:3d:10:7c:85:aa:a5:41:b5:7f:48:bc:a6:
ef:d7:c9:ee:55:93:f3:da:7f:d1:d7:4e:da:63:c7:77:f1:c3:
2a:3e:13:85:0c:f7:50:19:3f:9e:be:30:09:a5:9b:26:6b:37:
6b:a5:8c:94:1c:02:a8:c5:b8:de:40:ba:8d:67:2e:86:4d:0a:
99:a8:b1:f3:3b:f7:13:c2:94:92:cb:0b:1d:57:ab:a3:96:44:
a3:c2:cd:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqODos5ABoeePsbdbRrAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMWExODE2ZGQzNjhiNzdjZjMyYmQyMWE5ZTBiYWQ1ZGY2
Y2RmZjAwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
EyhlZjIxMzkzZjIwZGY0NmRhMGVlOTc5NGFkMTlmNDhlMjI0YjY0OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNeI9Bi8f0uP9WgiinYH25ykN7Zl
1keSo1EXVCB57v0vxzJQ420cium2mxolF7fjoWlor5LkGXGYnGBkn5QCTrV97Gqj
tjKxKSnDGg+mTbrDC3H2g0ZhQam9kjcBAnweUXgDRNjgLcip4CFIzDWW6rQTROed
9MZKEtymQF5VOntz/u2+p8fyCSnnYt6LHLXuR3HqEvQ+/Au1rD3iOZ5iq+1IgNRV
PmKVz5xwARZWmeTFwFchZFcVQc04as70kv4LGqW9F/zcGhxNTxvMiS8P4204in3G
xU4pYVtWJzyDo5cU52YjDK61IHwV9NJwqq3utrWRBC5LIuNrOsAKB43Y8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8hOT8g30baDul5StGfSOIktkkSMB8GA1UdIwQY
MBaAFA8aGBbdNot3zzK9IangutXfbN/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEt
NzIzMTE0NmQxNTZmLzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEtNzIzMTE0NmQxNTZm
LzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMoojJU/
znSuyxPsYjnA9vv0Dfh9J7yuSPHkzAKgC7s2BWpUwU6JmIQlmQJr82Fr313cy7ve
vwOvtkJ6M8R9wlAcuYoU1meo0dJt993kAAwuBDki7uMQ8cWgOtG3QNvxzBzsfXm3
Ev7UYvpgVEZMp5m1lqVrLbYaq6DMPS0kmgK502MbyUyp0RxlhDgvRSUxRzQg30D3
d84wcJzAwnS57C9isD5AfIKFPRB8haqlQbV/SLym79fJ7lWT89p/0ddO2mPHd/HD
Kj4ThQz3UBk/nr4wCaWbJms3a6WMlBwCqMW43kC6jWcuhk0Kmaix8zv3E8KUkssL
HVero5ZEo8LNGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:36 2026 by rpki-client