Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: ibKNp7qfr+SCXDyCgZRLeP2Tge7kyqNUubdkEGos1iQ=
Subject key identifier: 8A:C8:8F:1F:0E:01:C3:43:6B:4A:52:01:A9:2A:58:79:D3:E9:E0:CA
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 019D2A3BB5ABBB36B7A2F2130B6ECB95D023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0C96
Signing time: Thu 26 Mar 2026 13:00:49 +0000
Manifest this update: Thu 26 Mar 2026 13:00:49 +0000
Manifest next update: Fri 27 Mar 2026 13:00:49 +0000
Files and hashes: 1: EN7XiEfKlFXBlZqtNN-oRqqWPD8.roa (hash: hOsYakPKoUo+w1ZXynrtNEWFAogAYXmthy1G2XJLeXc=)
2: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: 5wLxrHVb4q1MlcHA0PEtLl/R7XaGPqVhLHj49NouCd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b5:ab:bb:36:b7:a2:f2:13:0b:6e:cb:95:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Mar 26 13:00:49 2026 GMT
Not After : Mar 27 13:00:49 2026 GMT
Subject: CN=8ac88f1f0e01c3436b4a5201a92a5879d3e9e0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:9c:06:ac:68:fb:0e:8d:cf:58:22:30:6c:
b5:22:e4:ac:0f:e8:e3:a8:c2:7d:84:80:be:41:3f:
c5:12:e1:46:cc:44:cc:70:49:ce:a5:08:09:38:7c:
7e:0d:15:42:9c:2d:3e:97:47:2b:00:33:bc:e7:a9:
d8:79:dc:26:09:0a:de:59:51:c4:dd:ba:7b:e5:05:
c0:99:c0:01:24:93:4f:37:29:03:d4:8f:da:1d:cf:
57:41:a6:49:30:9a:1a:61:e9:1a:66:76:2a:d5:df:
6f:28:06:e2:f4:06:89:e2:91:eb:d2:7d:00:ef:a3:
75:31:70:23:ee:df:85:86:95:3a:5e:52:a8:dc:15:
1f:cb:d0:c9:ac:e5:ca:9d:a5:0d:05:d4:ef:f4:18:
7b:d3:a4:0e:15:ab:69:c5:ba:e1:54:c6:a1:84:b5:
e8:c7:51:67:ae:99:29:61:fe:79:8e:2d:2c:a8:e2:
30:02:b2:fe:c9:d6:fd:74:30:48:39:7c:8f:de:14:
82:b2:10:90:b2:38:6d:95:4b:66:d1:99:c1:21:0f:
e6:d5:06:cd:74:0f:18:e5:33:5b:3f:24:2d:7b:bd:
fb:94:22:8b:e9:31:c2:b6:65:af:4d:b5:9b:5b:be:
58:56:a0:29:ff:79:b8:c0:96:d6:b0:64:6c:dc:da:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:8F:1F:0E:01:C3:43:6B:4A:52:01:A9:2A:58:79:D3:E9:E0:CA
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cb:e4:56:ed:bc:72:36:12:11:4b:7b:51:14:46:f6:42:5f:
4e:58:e0:14:f2:b6:e5:f5:39:d4:ef:96:ba:ca:ba:ce:c3:79:
1c:0f:68:01:57:d9:eb:b6:5b:f5:9b:70:5f:33:5f:5f:84:39:
c9:25:67:37:c1:1f:09:99:ed:56:64:7c:ec:cd:25:3d:1b:5a:
ba:99:27:7d:28:de:35:f8:15:d3:18:5e:09:d3:2a:41:21:65:
78:60:7f:a1:9f:73:a9:39:e2:65:e2:9f:8b:80:de:3c:49:16:
5c:a5:7d:0d:ee:f0:cf:67:cd:2b:34:29:e9:49:7e:8a:c2:db:
85:40:60:e3:f8:37:61:fc:0e:34:b0:9e:54:e4:e8:72:e3:7a:
b7:14:f3:0d:8d:24:1b:50:84:be:58:22:0c:01:3c:de:13:92:
e5:1c:45:26:e1:62:db:c1:16:c9:47:1b:80:75:e2:19:f2:38:
9a:1a:7d:83:cf:ea:58:42:63:ec:9d:ef:ae:0a:8b:24:64:61:
76:64:f6:e3:c0:3e:f2:7d:b0:d2:dc:0f:03:9a:84:e9:a2:1b:
75:10:c1:ed:cc:0e:b4:8e:df:14:02:0a:a6:87:fa:55:e2:6b:
61:26:5c:75:eb:0d:5b:ac:95:61:74:5e:a3:81:fc:dd:1e:8b:
0f:55:75:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO7Wruza3ovITC27LldAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWEwZWQxMzU5MWQ0Yjg0Y2E3OWE4ZWI1NzcyMjYwNzY2
NTFhMTQwHhcNMjYwMzI2MTMwMDQ5WhcNMjYwMzI3MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg4YWM4OGYxZjBlMDFjMzQzNmI0YTUyMDFhOTJhNTg3OWQzZTllMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqducBqxo+w6Nz1giMGy1IuSsD+jj
qMJ9hIC+QT/FEuFGzETMcEnOpQgJOHx+DRVCnC0+l0crADO856nYedwmCQreWVHE
3bp75QXAmcABJJNPNykD1I/aHc9XQaZJMJoaYekaZnYq1d9vKAbi9AaJ4pHr0n0A
76N1MXAj7t+FhpU6XlKo3BUfy9DJrOXKnaUNBdTv9Bh706QOFatpxbrhVMahhLXo
x1FnrpkpYf55ji0sqOIwArL+ydb9dDBIOXyP3hSCshCQsjhtlUtm0ZnBIQ/m1QbN
dA8Y5TNbPyQte737lCKL6THCtmWvTbWbW75YVqAp/3m4wJbWsGRs3NrntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrIjx8OAcNDa0pSAakqWHnT6eDKMB8GA1UdIwQY
MBaAFHaaDtE1kdS4TKeajrV3ImB2ZRoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMt
MmRiZTc4NTQyMmY4LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMtMmRiZTc4NTQyMmY4
LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsvkVu28
cjYSEUt7URRG9kJfTljgFPK25fU51O+Wusq6zsN5HA9oAVfZ67Zb9ZtwXzNfX4Q5
ySVnN8EfCZntVmR87M0lPRtaupknfSjeNfgV0xheCdMqQSFleGB/oZ9zqTniZeKf
i4DePEkWXKV9De7wz2fNKzQp6Ul+isLbhUBg4/g3YfwONLCeVOTocuN6txTzDY0k
G1CEvlgiDAE83hOS5RxFJuFi28EWyUcbgHXiGfI4mhp9g8/qWEJj7J3vrgqLJGRh
dmT248A+8n2w0twPA5qE6aIbdRDB7cwOtI7fFAIKpof6VeJrYSZcdesNW6yVYXRe
o4H83R6LD1V1lA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:25 2026 by rpki-client