Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
File: dJm8fW4g9ytAmz-7qsGDSAyekNc.mft (raw, json)
Hash identifier: iNLcF6X9evA2roWlsctvcuearjNPsdnzwZSRSupQzcQ=
Subject key identifier: 07:BC:F9:31:06:C8:05:46:0F:7E:81:F5:5C:84:A0:DF:82:CC:2C:A9
Authority key identifier: 74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
Certificate issuer: /CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Certificate serial: 019D265F0D5E9DFED27A916E2EC400EA6722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
Manifest number: 033C
Signing time: Wed 25 Mar 2026 19:00:56 +0000
Manifest this update: Wed 25 Mar 2026 19:00:56 +0000
Manifest next update: Thu 26 Mar 2026 19:00:56 +0000
Files and hashes: 1: dJm8fW4g9ytAmz-7qsGDSAyekNc.crl (hash: RQM/QPKrKkubHFX4Vl63DfAzEr7rL8CNoKWKqY4cFSk=)
2: p4IcGr2Kbk3YpLFbWxqrp2GGq3I.roa (hash: zic93FYpv4JmN5qugD4sl1BP2AiTBmHYPCAXafwINy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0d:5e:9d:fe:d2:7a:91:6e:2e:c4:00:ea:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Validity
Not Before: Mar 25 19:00:56 2026 GMT
Not After : Mar 26 19:00:56 2026 GMT
Subject: CN=07bcf93106c805460f7e81f55c84a0df82cc2ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:dc:21:17:6b:11:cf:8d:b3:56:25:60:92:
27:0a:d9:e0:a3:bf:ef:e1:95:76:26:36:4d:68:98:
d2:d5:2d:8e:38:52:b7:62:b8:66:a0:41:a2:ca:b3:
7f:c0:f2:d7:9c:c8:cd:df:81:2b:4b:1a:b3:ad:a2:
c4:1c:50:fc:cd:d2:84:b8:ac:f3:f0:64:5d:34:d0:
fa:9b:c8:53:81:18:68:0e:8a:0f:e5:06:8f:1e:14:
de:cf:c2:e1:f9:bc:47:6c:b2:ee:ea:2e:63:d1:e7:
f0:92:c2:4c:92:35:35:12:a9:b9:77:41:c8:fe:67:
94:95:39:e1:1e:94:5c:52:bb:df:cc:ce:26:e3:89:
09:70:c4:5e:fa:9a:eb:6f:70:19:19:8d:0d:fe:01:
6d:69:74:5a:5d:a2:fe:94:6e:4c:03:fb:50:2f:89:
c2:b3:36:53:91:07:e4:b0:a2:bd:9e:df:48:a0:96:
15:32:a2:37:63:46:68:0e:59:43:0b:87:fc:cb:13:
d7:ff:19:db:88:93:7f:b1:08:bb:51:6d:37:e2:89:
21:4a:0b:ce:cb:e6:e2:62:16:dd:40:fe:54:6f:87:
02:a0:bf:5a:5b:97:48:6a:eb:4a:87:58:19:c7:51:
d3:ac:19:3a:90:86:0f:0b:e4:c9:80:c3:b7:99:d8:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BC:F9:31:06:C8:05:46:0F:7E:81:F5:5C:84:A0:DF:82:CC:2C:A9
X509v3 Authority Key Identifier:
keyid:74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:95:b5:6e:76:2a:84:e1:df:c1:12:ef:ff:d5:df:92:51:
e2:8b:2d:63:f1:18:b3:4f:d3:b5:d6:c7:15:67:e2:20:aa:76:
44:8c:33:b0:45:c6:e8:2d:5c:aa:20:1f:e3:f5:75:80:0b:8d:
f0:de:5a:3a:a9:94:82:d6:a5:18:ca:84:6d:33:1c:d3:18:15:
3d:61:38:f4:c2:2f:23:72:26:3b:db:c2:d8:35:b4:31:34:b0:
8e:46:f3:5e:1d:f3:e9:0b:c6:69:e0:60:f4:5b:02:cf:e5:bb:
64:80:05:ec:4f:42:ab:93:95:cc:41:cd:bc:05:9e:09:0a:59:
18:4f:05:73:27:01:5a:75:04:a0:f5:20:27:44:c5:39:c7:eb:
b4:ba:54:4c:6a:20:c4:3a:0b:5b:58:eb:85:2d:b4:2b:a4:64:
a7:8a:5a:e6:6e:13:e9:22:42:e9:a8:c6:e8:23:ad:f7:48:94:
55:c3:9c:db:1d:17:f1:69:ca:a3:2d:ba:05:48:7a:bf:d5:73:
84:91:d9:d1:d2:a5:32:50:d4:c4:2d:d9:e5:6f:8e:16:e2:75:
33:2f:d5:9c:e3:59:f3:0f:62:9b:c1:7a:00:53:d7:14:19:a6:
85:0e:aa:df:96:ef:c1:e0:a3:42:36:45:b8:47:11:bb:6a:90:
64:c1:ac:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXw1enf7SepFuLsQA6mciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTliYzdkNmUyMGY3MmI0MDliM2ZiYmFhYzE4MzQ4MGM5
ZTkwZDcwHhcNMjYwMzI1MTkwMDU2WhcNMjYwMzI2MTkwMDU2WjAzMTEwLwYDVQQD
EygwN2JjZjkzMTA2YzgwNTQ2MGY3ZTgxZjU1Yzg0YTBkZjgyY2MyY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfDcIRdrEc+Ns1YlYJInCtngo7/v
4ZV2JjZNaJjS1S2OOFK3YrhmoEGiyrN/wPLXnMjN34ErSxqzraLEHFD8zdKEuKzz
8GRdNND6m8hTgRhoDooP5QaPHhTez8Lh+bxHbLLu6i5j0efwksJMkjU1Eqm5d0HI
/meUlTnhHpRcUrvfzM4m44kJcMRe+prrb3AZGY0N/gFtaXRaXaL+lG5MA/tQL4nC
szZTkQfksKK9nt9IoJYVMqI3Y0ZoDllDC4f8yxPX/xnbiJN/sQi7UW034okhSgvO
y+biYhbdQP5Ub4cCoL9aW5dIautKh1gZx1HTrBk6kIYPC+TJgMO3mdjCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe8+TEGyAVGD36B9VyEoN+CzCypMB8GA1UdIwQY
MBaAFHSZvH1uIPcrQJs/u6rBg0gMnpDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMt
YzZkYmI1OWFmYjRiLzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMtYzZkYmI1OWFmYjRi
LzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmguVtW52
KoTh38ES7//V35JR4ostY/EYs0/TtdbHFWfiIKp2RIwzsEXG6C1cqiAf4/V1gAuN
8N5aOqmUgtalGMqEbTMc0xgVPWE49MIvI3ImO9vC2DW0MTSwjkbzXh3z6QvGaeBg
9FsCz+W7ZIAF7E9Cq5OVzEHNvAWeCQpZGE8FcycBWnUEoPUgJ0TFOcfrtLpUTGog
xDoLW1jrhS20K6Rkp4pa5m4T6SJC6ajG6COt90iUVcOc2x0X8WnKoy26BUh6v9Vz
hJHZ0dKlMlDUxC3Z5W+OFuJ1My/VnONZ8w9im8F6AFPXFBmmhQ6q35bvweCjQjZF
uEcRu2qQZMGs8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:49 2026 by rpki-client