Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: ieMQySm3TR6QIAQ7nfdiPgt7R4jVuxA+GjzRkFv1a0E=
Subject key identifier: 51:E5:09:3A:FF:46:26:6C:92:F5:2A:4B:2D:7F:AD:81:82:9F:26:2D
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 019D2AA9E84F2BE86C6C1C30D05F1C9602BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:01:11 +0000
Manifest this update: Thu 26 Mar 2026 15:01:11 +0000
Manifest next update: Fri 27 Mar 2026 15:01:11 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: ZzC2OS9BL3+7yAQILrHSLNBJkJo5dkKhqCEllvMQcPE=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e8:4f:2b:e8:6c:6c:1c:30:d0:5f:1c:96:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Mar 26 15:01:11 2026 GMT
Not After : Mar 27 15:01:11 2026 GMT
Subject: CN=51e5093aff46266c92f52a4b2d7fad81829f262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:32:a7:a7:86:bf:db:a0:33:5b:d7:50:31:
02:38:3a:24:fb:2e:09:e6:d8:84:14:3c:d4:39:59:
b9:73:6f:17:42:7b:86:f2:51:45:82:28:05:ed:d5:
82:bf:a8:de:38:09:86:8e:1f:0b:f8:62:23:ea:aa:
88:1b:f1:bf:c0:cd:1d:8f:44:cf:0a:cd:14:75:2f:
08:2d:38:5d:22:d6:20:3c:30:f6:d8:cb:ef:9d:88:
80:7d:d9:e1:1d:a7:ee:8e:fd:2e:3a:6a:a4:42:b4:
86:e2:1f:ec:ed:a7:8b:09:f2:8a:a9:08:d4:94:bd:
a2:7e:49:01:43:ff:8e:75:43:a7:15:15:1c:be:f3:
82:2e:e3:1f:8f:0c:71:72:5b:65:ab:db:00:1f:d7:
53:ef:11:15:1a:4a:56:33:3d:f9:39:a1:5f:43:e1:
ec:0d:27:2f:0c:c7:58:cd:0e:2c:38:2d:ad:b2:d4:
61:95:bc:cd:ca:5e:eb:4d:98:83:51:bf:5e:46:e9:
ab:26:06:09:1e:48:23:8c:63:9c:3b:a4:c2:e8:14:
8b:af:6c:72:42:91:3a:d1:5f:36:e4:06:30:67:82:
31:90:59:e0:77:1a:c7:b0:24:9c:85:97:d7:c4:d2:
dc:f0:43:29:8c:49:cf:31:69:f9:84:8d:b1:39:db:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:09:3A:FF:46:26:6C:92:F5:2A:4B:2D:7F:AD:81:82:9F:26:2D
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:28:bf:63:35:d7:78:51:15:6f:5e:1c:55:18:9f:78:6e:
eb:27:92:78:a3:1f:fc:d5:6c:8e:d2:f5:70:50:79:81:bc:70:
e4:a4:8c:cf:97:a8:ae:1b:a1:f2:c4:be:ca:54:aa:20:07:95:
ca:b2:2a:b1:0e:1c:e4:9c:c6:71:f0:e1:45:f8:df:17:97:fe:
e8:36:21:32:9c:86:1e:c9:0b:23:36:98:b5:9b:e2:04:60:47:
2f:f5:d6:03:29:22:f0:7f:5a:c8:8b:66:74:bd:fb:1a:00:24:
e4:46:5c:24:e5:47:39:f6:91:0f:5a:c7:96:d7:da:28:3e:c7:
4a:aa:54:55:59:0e:e9:1c:1e:39:9e:17:65:af:f2:6a:33:b9:
67:56:55:e6:d5:97:be:fd:5d:95:eb:5a:7f:73:73:17:04:c2:
5e:ef:04:7a:17:5a:3e:be:72:4a:10:1c:47:4c:40:76:23:fc:
27:e0:a0:76:ce:ea:10:fc:a1:2e:af:12:14:d1:70:5d:4d:c6:
e0:85:87:c8:31:4f:a8:51:a6:95:a6:89:db:e0:a5:22:05:68:
cd:94:f3:ba:24:1c:d6:26:63:7e:8b:42:71:4b:3a:f0:56:ba:
b7:59:ee:d7:01:e1:38:b1:e5:7e:61:67:da:d9:af:8f:19:21:
be:c4:e6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqehPK+hsbBww0F8clgK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz
MTIwZDIwHhcNMjYwMzI2MTUwMTExWhcNMjYwMzI3MTUwMTExWjAzMTEwLwYDVQQD
Eyg1MWU1MDkzYWZmNDYyNjZjOTJmNTJhNGIyZDdmYWQ4MTgyOWYyNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxswyp6eGv9ugM1vXUDECODok+y4J
5tiEFDzUOVm5c28XQnuG8lFFgigF7dWCv6jeOAmGjh8L+GIj6qqIG/G/wM0dj0TP
Cs0UdS8ILThdItYgPDD22MvvnYiAfdnhHafujv0uOmqkQrSG4h/s7aeLCfKKqQjU
lL2ifkkBQ/+OdUOnFRUcvvOCLuMfjwxxcltlq9sAH9dT7xEVGkpWMz35OaFfQ+Hs
DScvDMdYzQ4sOC2tstRhlbzNyl7rTZiDUb9eRumrJgYJHkgjjGOcO6TC6BSLr2xy
QpE60V825AYwZ4IxkFngdxrHsCSchZfXxNLc8EMpjEnPMWn5hI2xOdtGXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHlCTr/RiZskvUqSy1/rYGCnyYtMB8GA1UdIwQY
MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt
MDA0ZmU0MzNjN2M4LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4
LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc8ov2M1
13hRFW9eHFUYn3hu6yeSeKMf/NVsjtL1cFB5gbxw5KSMz5eorhuh8sS+ylSqIAeV
yrIqsQ4c5JzGcfDhRfjfF5f+6DYhMpyGHskLIzaYtZviBGBHL/XWAyki8H9ayItm
dL37GgAk5EZcJOVHOfaRD1rHltfaKD7HSqpUVVkO6RweOZ4XZa/yajO5Z1ZV5tWX
vv1dletaf3NzFwTCXu8EehdaPr5yShAcR0xAdiP8J+Cgds7qEPyhLq8SFNFwXU3G
4IWHyDFPqFGmlaaJ2+ClIgVozZTzuiQc1iZjfotCcUs68Fa6t1nu1wHhOLHlfmFn
2tmvjxkhvsTmrA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:19 2026 by rpki-client