Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
File: dnmIT2MwtlBg7cQcysDlRtOApQQ.mft (raw, json)
Hash identifier: c7f24e1y6bOHxpEBO92rtrvsUzoKBqiQL2CsuckCZsE=
Subject key identifier: F9:D9:38:E2:C6:49:87:43:0C:DF:4C:80:15:D8:DF:CD:3A:9F:EA:9F
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial: 019D33AC94130DACB38BE8FDDA236DD24EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
Manifest number: 0240
Signing time: Sat 28 Mar 2026 09:00:41 +0000
Manifest this update: Sat 28 Mar 2026 09:00:41 +0000
Manifest next update: Sun 29 Mar 2026 09:00:41 +0000
Files and hashes: 1: MMWaV_EwT3XXaEY4uovqJFOWcj0.roa (hash: yrPylmFzsrZ4DI6lNgXuVhkgMOQp14n/urzO52FiVXM=)
2: dnmIT2MwtlBg7cQcysDlRtOApQQ.crl (hash: LCgdS0t44Ie7yNL1CzSjwgfxs5UrSjT4WAo4MxOO9sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:94:13:0d:ac:b3:8b:e8:fd:da:23:6d:d2:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
Validity
Not Before: Mar 28 09:00:41 2026 GMT
Not After : Mar 29 09:00:41 2026 GMT
Subject: CN=f9d938e2c64987430cdf4c8015d8dfcd3a9fea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:32:62:80:ad:9b:17:c3:64:61:0a:6c:b6:
f7:b6:d9:65:a5:80:51:b0:d7:4a:a7:6d:18:d2:29:
66:67:99:50:71:d0:e3:ac:8f:70:12:f8:cd:c9:cd:
02:26:c0:f0:92:bc:b9:eb:6f:da:d0:1c:5c:e0:79:
45:be:71:39:3c:6c:7a:40:0d:77:cf:5a:48:99:5d:
c7:26:06:c2:de:94:89:d0:81:42:34:95:cc:1e:11:
7b:33:1a:c6:3a:82:63:d1:3b:cb:f6:9b:08:50:97:
de:95:30:a2:38:32:26:bc:45:27:1e:d5:78:fc:b4:
b0:44:a8:e9:b1:c7:34:c2:95:0d:0d:78:45:a0:63:
ce:4c:2a:39:fd:ce:3b:66:01:7f:14:fb:e4:eb:a6:
e9:cb:ae:02:c5:1d:37:a9:1b:8d:9d:33:82:d3:7a:
5b:bf:b9:5e:4c:d6:32:87:da:e3:7d:7c:a9:50:d1:
96:df:4d:0a:0a:97:d4:ca:9f:a7:e8:4f:ef:be:72:
b1:82:eb:48:da:99:2f:86:54:79:71:2c:e0:39:ef:
bf:74:e6:ca:bb:f7:fc:ea:22:38:a6:44:53:8e:38:
d2:48:5b:f8:11:25:82:4a:6b:65:2a:73:29:91:f9:
ad:1f:01:2b:c9:6d:a0:da:6c:34:63:5a:57:2f:f2:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:38:E2:C6:49:87:43:0C:DF:4C:80:15:D8:DF:CD:3A:9F:EA:9F
X509v3 Authority Key Identifier:
keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:bb:cb:6e:c7:ba:d9:73:51:92:7a:b1:3e:47:e4:db:f2:
cc:fd:a0:aa:71:c5:8f:2e:75:07:aa:d3:ea:8f:26:96:13:ab:
56:8e:fe:0c:12:f6:46:f5:11:3a:16:73:f2:53:f8:e7:d5:fb:
69:c8:df:1a:45:32:54:46:43:82:36:94:87:f6:dc:90:b7:df:
dd:e3:d4:e7:d2:af:05:31:b5:7e:73:51:cf:42:b6:32:46:8a:
f8:ac:60:2d:30:dd:26:1f:80:b9:f2:80:22:97:cc:5c:7b:b0:
1d:5d:b0:5f:7b:d3:79:88:f5:98:03:3e:59:7e:37:6b:e7:3a:
7f:3e:60:1d:45:e9:65:f0:2e:bc:48:8d:91:51:89:d7:60:79:
29:63:76:ed:4d:e6:f7:e8:f1:c1:b1:ec:d7:47:b6:d2:09:cd:
1e:c2:02:d6:e8:f2:e9:0b:f7:94:2d:f7:5d:11:8e:29:6e:10:
28:8b:da:d7:9f:d3:b4:09:f2:84:16:0f:ab:13:23:5b:98:60:
21:e1:db:86:ce:6e:8e:23:13:c9:08:df:34:58:8a:b0:13:1e:
f0:24:6d:eb:a2:11:75:10:16:64:f2:89:20:dd:fc:82:a9:59:
b1:31:6f:83:54:44:41:fa:31:f8:ab:f5:97:44:83:13:41:23:
54:11:b3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrJQTDayzi+j92iNt0k67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Nzk4ODRmNjMzMGI2NTA2MGVkYzQxY2NhYzBlNTQ2ZDM4
MGE1MDQwHhcNMjYwMzI4MDkwMDQxWhcNMjYwMzI5MDkwMDQxWjAzMTEwLwYDVQQD
EyhmOWQ5MzhlMmM2NDk4NzQzMGNkZjRjODAxNWQ4ZGZjZDNhOWZlYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxgyYoCtmxfDZGEKbLb3ttllpYBR
sNdKp20Y0ilmZ5lQcdDjrI9wEvjNyc0CJsDwkry562/a0Bxc4HlFvnE5PGx6QA13
z1pImV3HJgbC3pSJ0IFCNJXMHhF7MxrGOoJj0TvL9psIUJfelTCiODImvEUnHtV4
/LSwRKjpscc0wpUNDXhFoGPOTCo5/c47ZgF/FPvk66bpy64CxR03qRuNnTOC03pb
v7leTNYyh9rjfXypUNGW300KCpfUyp+n6E/vvnKxgutI2pkvhlR5cSzgOe+/dObK
u/f86iI4pkRTjjjSSFv4ESWCSmtlKnMpkfmtHwEryW2g2mw0Y1pXL/K5VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnZOOLGSYdDDN9MgBXY3806n+qfMB8GA1UdIwQY
MBaAFHZ5iE9jMLZQYO3EHMrA5UbTgKUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAt
OTllNzZjMjczOWZiLzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAtOTllNzZjMjczOWZi
LzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuq7y27H
utlzUZJ6sT5H5NvyzP2gqnHFjy51B6rT6o8mlhOrVo7+DBL2RvUROhZz8lP459X7
acjfGkUyVEZDgjaUh/bckLff3ePU59KvBTG1fnNRz0K2MkaK+KxgLTDdJh+AufKA
IpfMXHuwHV2wX3vTeYj1mAM+WX43a+c6fz5gHUXpZfAuvEiNkVGJ12B5KWN27U3m
9+jxwbHs10e20gnNHsIC1ujy6Qv3lC33XRGOKW4QKIva15/TtAnyhBYPqxMjW5hg
IeHbhs5ujiMTyQjfNFiKsBMe8CRt66IRdRAWZPKJIN38gqlZsTFvg1REQfox+Kv1
l0SDE0EjVBGztg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:35 2026 by rpki-client