Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: iGLsoyF6a6vA/KroPUSir0HT0LLFLJcgeAntRzwFqVI=
Subject key identifier: 3B:15:91:88:AB:F5:23:9C:D4:3E:68:CC:97:81:AE:64:7A:2E:2F:36
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 019D2703D3987D7D27F4092FB925F86AF511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0DCC
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: x9XHDDbD8a/vQBqW0adzmHANPmr3Tq9DAEixDFQVrsE=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d3:98:7d:7d:27:f4:09:2f:b9:25:f8:6a:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=3b159188abf5239cd43e68cc9781ae647a2e2f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:03:d5:8e:61:78:04:4b:d8:12:37:57:df:
98:8d:a3:9a:30:e5:b6:12:0b:fd:7b:31:b9:1b:18:
b8:65:b0:a1:06:2c:bc:12:19:4c:11:85:ba:e7:0e:
68:4a:9e:76:4c:24:fc:4e:43:bf:de:dc:7d:3e:03:
ab:07:40:51:0c:92:ba:3e:3e:38:a6:80:07:7f:5b:
69:5f:80:e0:5e:7e:45:b6:aa:d8:a0:20:1e:da:fd:
07:89:c6:06:8c:a0:09:06:70:dd:20:a7:23:84:52:
ca:c9:38:58:e6:46:9e:46:95:e9:e4:b2:b2:cf:1f:
6b:80:dd:22:33:96:fd:1d:e3:7d:35:37:83:91:a8:
70:44:79:38:8a:7a:6c:48:7d:6c:b9:f8:3d:05:ca:
63:c0:db:a1:b8:8c:25:ca:d7:0b:07:4c:ca:52:98:
d4:39:2d:0f:c7:f1:65:36:5c:ab:41:b8:ea:f9:e6:
42:40:02:ac:4d:f8:46:df:1c:99:1b:2b:33:0e:a1:
83:47:42:ed:ea:80:22:a5:97:87:4c:7c:94:92:6d:
ad:4c:de:9d:91:20:84:0d:1d:8d:70:35:a5:71:4d:
5b:49:47:c5:45:3d:d7:97:77:ef:67:00:eb:c4:2b:
2e:17:f8:9a:84:c5:c8:21:5e:18:4a:b1:e5:9f:2a:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:91:88:AB:F5:23:9C:D4:3E:68:CC:97:81:AE:64:7A:2E:2F:36
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:01:b2:b5:ca:4b:f4:11:d6:78:a6:4f:20:a2:84:f7:02:
d2:10:82:32:14:92:44:09:41:7f:da:ac:7d:4b:3a:4e:0e:27:
3f:90:bf:80:ee:1f:10:0a:69:59:85:41:22:7d:8d:19:04:11:
46:21:dd:50:04:8c:77:51:31:7e:7d:35:af:db:75:4e:57:59:
7b:f8:20:ad:d5:be:9a:d5:18:d0:1f:a9:a4:d4:ef:86:44:1b:
19:ed:a2:d1:94:c3:cb:ac:4e:cb:31:5b:93:dc:a6:4e:07:3e:
d3:05:02:44:31:41:02:ee:8f:44:59:c5:06:e6:c2:c5:85:f6:
db:72:99:82:1c:58:f6:fc:3d:56:69:44:00:77:10:2f:96:09:
7e:88:fd:f1:5f:78:8a:ae:bf:7f:a5:c1:86:67:a1:ba:44:95:
61:22:95:d2:07:4c:fe:d8:77:d6:01:5e:75:6d:43:a6:b2:d3:
03:e2:a4:50:f2:b3:db:95:39:7c:46:4b:8f:58:ac:a4:46:96:
7b:47:e5:95:47:ac:ce:db:31:39:5b:e0:9f:77:62:9d:de:a4:
c6:55:1f:ce:88:1a:36:66:ed:d6:29:28:7b:74:02:c2:3a:5d:
29:f1:bd:c1:52:2c:51:e5:da:96:0d:56:7a:49:03:23:f2:04:
3d:18:f0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9OYfX0n9AkvuSX4avURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm
ZWY2YjUwHhcNMjYwMzI1MjIwMDU1WhcNMjYwMzI2MjIwMDU1WjAzMTEwLwYDVQQD
EygzYjE1OTE4OGFiZjUyMzljZDQzZTY4Y2M5NzgxYWU2NDdhMmUyZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMAD1Y5heARL2BI3V9+YjaOaMOW2
Egv9ezG5Gxi4ZbChBiy8EhlMEYW65w5oSp52TCT8TkO/3tx9PgOrB0BRDJK6Pj44
poAHf1tpX4DgXn5FtqrYoCAe2v0HicYGjKAJBnDdIKcjhFLKyThY5kaeRpXp5LKy
zx9rgN0iM5b9HeN9NTeDkahwRHk4inpsSH1sufg9BcpjwNuhuIwlytcLB0zKUpjU
OS0Px/FlNlyrQbjq+eZCQAKsTfhG3xyZGyszDqGDR0Lt6oAipZeHTHyUkm2tTN6d
kSCEDR2NcDWlcU1bSUfFRT3Xl3fvZwDrxCsuF/iahMXIIV4YSrHlnyrnEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsVkYir9SOc1D5ozJeBrmR6Li82MB8GA1UdIwQY
MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut
ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3
LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8ABsrXK
S/QR1nimTyCihPcC0hCCMhSSRAlBf9qsfUs6Tg4nP5C/gO4fEAppWYVBIn2NGQQR
RiHdUASMd1Exfn01r9t1TldZe/ggrdW+mtUY0B+ppNTvhkQbGe2i0ZTDy6xOyzFb
k9ymTgc+0wUCRDFBAu6PRFnFBubCxYX223KZghxY9vw9VmlEAHcQL5YJfoj98V94
iq6/f6XBhmehukSVYSKV0gdM/th31gFedW1DprLTA+KkUPKz25U5fEZLj1ispEaW
e0fllUesztsxOVvgn3dind6kxlUfzogaNmbt1ikoe3QCwjpdKfG9wVIsUeXalg1W
ekkDI/IEPRjwNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:29 2026 by rpki-client