Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: 1b5nfZW5I4eGiyfXbnGYgTJlzvJXjGtw1xITVVGPoXw=
Subject key identifier: 07:58:E2:0B:97:C1:38:64:2E:31:4D:45:0C:95:27:2B:45:7C:59:2B
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019D28F2316212326C0EDC3197EC1302C8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:00:54 +0000
Manifest this update: Thu 26 Mar 2026 07:00:54 +0000
Manifest next update: Fri 27 Mar 2026 07:00:54 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: YBJd4bePzsV71DYWq79ssEC5NFkQ8goOZixaK+IQBSw=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:31:62:12:32:6c:0e:dc:31:97:ec:13:02:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Mar 26 07:00:54 2026 GMT
Not After : Mar 27 07:00:54 2026 GMT
Subject: CN=0758e20b97c138642e314d450c95272b457c592b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:8a:cf:7e:3f:f2:1b:9d:af:89:f3:56:fe:
aa:52:8b:98:38:0f:a6:a1:01:db:f3:08:b6:c1:76:
11:83:86:71:92:21:93:72:73:55:91:01:6b:37:aa:
30:5a:a3:50:a4:62:1d:f8:55:92:60:7d:fb:9f:b1:
b2:c4:1e:7a:cb:8d:ce:a0:3d:db:c3:3f:e7:b1:02:
61:f4:b3:fc:1c:9a:c1:a5:7d:96:39:d5:da:23:df:
ad:37:91:66:59:97:28:35:3e:3e:74:a9:da:10:f5:
d0:62:ca:b1:17:83:38:3f:a1:67:eb:06:18:07:c4:
fd:63:c7:0b:20:c9:f8:2f:31:f5:9d:43:b3:b6:87:
c6:11:91:b6:e0:bd:51:5e:8c:f9:61:e0:e0:0c:e4:
38:6e:87:15:9b:50:2d:bb:89:62:c0:5e:19:b1:3c:
28:73:50:49:33:b3:93:e5:1b:c8:f5:0c:4b:8b:ec:
40:35:39:b1:a9:af:1c:d4:56:fc:c3:4c:f6:73:7a:
15:59:d2:6b:d2:54:21:c3:84:de:50:42:71:51:91:
99:aa:12:8e:05:01:0a:74:9c:60:b2:b1:f4:bc:77:
ea:a0:f6:9b:1d:a8:ec:d7:78:30:cf:6c:20:3c:36:
67:85:56:0a:bd:01:6a:65:4a:f0:a3:a4:2f:27:00:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:E2:0B:97:C1:38:64:2E:31:4D:45:0C:95:27:2B:45:7C:59:2B
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:38:b5:44:13:b4:45:b1:f9:ff:c0:f0:45:1f:79:05:16:e1:
c9:b1:82:b4:0c:f0:b1:a1:98:6b:76:64:fa:64:5b:6d:27:0a:
cb:cc:7f:01:02:60:94:60:0c:6b:fd:96:47:6c:84:82:56:c8:
d0:ff:19:a2:3b:84:8e:35:af:41:88:ad:fa:99:84:b0:97:ca:
be:26:1f:8a:65:35:62:e9:5a:bf:8c:d5:78:bd:81:43:7f:fb:
87:74:af:2c:da:be:81:38:d2:7e:c3:d4:5e:fc:8d:b3:dd:03:
b2:1a:ef:db:49:72:95:93:02:87:93:73:aa:c7:37:2b:cc:a8:
d3:c0:d6:a4:c4:ba:b8:90:55:9b:71:f0:cb:98:c9:78:64:30:
88:20:b6:ed:c8:ca:cc:f2:82:22:71:9c:e4:8c:52:df:8e:88:
8d:87:e6:b4:cb:5b:86:42:b9:6c:c4:8e:83:62:32:10:34:99:
d9:16:d9:f9:1a:88:91:7f:3e:8f:fd:7a:63:d7:d0:0f:e2:63:
6c:44:e1:a6:24:0c:53:51:8e:66:7b:26:59:cd:2e:f7:c0:63:
0e:d5:67:8d:4d:e0:ff:e5:8a:b1:7e:cb:b3:3b:10:7c:9b:68:
c3:51:42:3b:a6:01:1c:67:e2:46:e9:13:fc:a3:8b:89:76:f8:
ab:21:d2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jFiEjJsDtwxl+wTAsjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm
Y2JlODEwHhcNMjYwMzI2MDcwMDU0WhcNMjYwMzI3MDcwMDU0WjAzMTEwLwYDVQQD
EygwNzU4ZTIwYjk3YzEzODY0MmUzMTRkNDUwYzk1MjcyYjQ1N2M1OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp+Kz34/8hudr4nzVv6qUouYOA+m
oQHb8wi2wXYRg4ZxkiGTcnNVkQFrN6owWqNQpGId+FWSYH37n7GyxB56y43OoD3b
wz/nsQJh9LP8HJrBpX2WOdXaI9+tN5FmWZcoNT4+dKnaEPXQYsqxF4M4P6Fn6wYY
B8T9Y8cLIMn4LzH1nUOztofGEZG24L1RXoz5YeDgDOQ4bocVm1Atu4liwF4ZsTwo
c1BJM7OT5RvI9QxLi+xANTmxqa8c1Fb8w0z2c3oVWdJr0lQhw4TeUEJxUZGZqhKO
BQEKdJxgsrH0vHfqoPabHajs13gwz2wgPDZnhVYKvQFqZUrwo6QvJwAM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdY4guXwThkLjFNRQyVJytFfFkrMB8GA1UdIwQY
MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt
ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh
LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTi1RBO0
RbH5/8DwRR95BRbhybGCtAzwsaGYa3Zk+mRbbScKy8x/AQJglGAMa/2WR2yEglbI
0P8ZojuEjjWvQYit+pmEsJfKviYfimU1Yulav4zVeL2BQ3/7h3SvLNq+gTjSfsPU
XvyNs90Dshrv20lylZMCh5Nzqsc3K8yo08DWpMS6uJBVm3Hwy5jJeGQwiCC27cjK
zPKCInGc5IxS346IjYfmtMtbhkK5bMSOg2IyEDSZ2RbZ+RqIkX8+j/16Y9fQD+Jj
bEThpiQMU1GOZnsmWc0u98BjDtVnjU3g/+WKsX7LszsQfJtow1FCO6YBHGfiRukT
/KOLiXb4qyHSpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:30 2026 by rpki-client