Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: YqIev8MFyc00MVecg5UwzkWLAf1QLtg9bgPTm+Mi9vM=
Subject key identifier: FA:13:57:D6:10:20:E2:E3:C5:7A:C9:BF:D6:D3:5B:3A:34:33:CC:95
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019D322C498B4435BD939E5DFDBF4393C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: DE
Signing time: Sat 28 Mar 2026 02:00:56 +0000
Manifest this update: Sat 28 Mar 2026 02:00:56 +0000
Manifest next update: Sun 29 Mar 2026 02:00:56 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: Aae73hof6AoBrW0f6Cb/lOg5RPSmF4RUhfBZYlNJK+Q=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:49:8b:44:35:bd:93:9e:5d:fd:bf:43:93:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Mar 28 02:00:56 2026 GMT
Not After : Mar 29 02:00:56 2026 GMT
Subject: CN=fa1357d61020e2e3c57ac9bfd6d35b3a3433cc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:c7:1c:2f:c8:3f:36:de:e6:8a:8d:ea:3c:
20:82:62:82:45:45:5c:31:99:63:03:42:5b:28:5d:
bb:3c:7b:b3:55:ac:00:2a:09:68:f5:c1:71:2e:96:
91:fb:71:84:5e:af:ec:4c:9b:bc:96:32:3d:15:20:
75:3a:ec:dc:14:3d:9d:f6:b4:a7:b0:c1:65:6d:6f:
c0:30:16:14:5d:9f:6d:3b:73:ff:eb:f8:be:50:db:
25:8f:41:55:aa:b6:f9:f3:14:96:aa:01:ab:53:c4:
31:bb:e7:ae:71:eb:eb:12:e8:98:40:49:f9:f1:58:
b0:25:6a:4f:3e:d5:24:7a:5b:45:e6:bb:b6:2b:0a:
a5:00:d9:03:0c:07:08:98:ac:66:29:58:fb:32:47:
a4:96:d4:a7:67:7f:e8:3a:f5:da:e9:c7:c4:ae:73:
4f:0e:84:d4:90:5b:a5:5f:76:f2:6c:cc:cd:25:82:
9f:c1:14:d4:25:32:48:06:de:61:e0:c8:1f:ce:cc:
00:83:8f:9e:34:de:42:cc:04:75:f8:51:7d:95:d4:
99:79:48:1d:74:98:cf:2f:55:aa:19:52:16:83:ac:
0b:60:1e:66:8d:2e:3b:da:04:04:1d:3d:e4:fb:a9:
6a:2d:b5:68:cc:54:84:8f:50:5a:7f:4c:35:11:67:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:57:D6:10:20:E2:E3:C5:7A:C9:BF:D6:D3:5B:3A:34:33:CC:95
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:12:2c:50:9d:17:54:92:a6:6a:bd:16:38:5c:56:85:b8:3c:
2f:6c:86:20:04:de:56:60:20:de:d4:cc:ea:b3:ac:80:4e:47:
f2:32:65:28:ec:2b:da:ca:f9:18:42:ca:f6:14:48:3e:a0:c4:
23:a0:c9:44:10:9e:56:fc:f2:44:4f:bd:c8:d7:73:e2:38:5c:
5e:6f:05:bc:50:e3:97:bd:c0:d7:ef:7b:fa:22:cf:b8:a3:7a:
d1:ca:d7:f9:13:17:d9:d4:94:37:07:9f:91:fa:4c:9a:f7:d1:
17:cc:fc:7c:66:44:62:fb:dd:9e:fd:49:d3:eb:e2:24:6a:df:
4b:e3:1d:e9:90:95:75:fd:95:4d:63:b4:d5:62:d2:43:b8:77:
f8:f0:70:9e:e5:1a:02:65:f2:d8:c9:25:ae:54:2d:c3:2f:f7:
4d:1c:83:67:81:24:40:f2:a6:69:ba:f8:9c:7f:43:bc:1f:f0:
62:cd:a0:ae:cf:a3:0c:9a:45:94:bf:61:c4:0a:89:d8:c7:cc:
05:25:b8:4d:d9:50:10:7e:63:70:64:5f:8e:30:73:60:8e:9a:
07:53:34:fe:e0:75:01:e4:46:0a:f6:c2:06:20:98:be:49:9b:
d7:7c:4f:70:ad:11:28:e1:e9:c9:80:1c:23:29:64:2a:1d:3f:
23:58:c8:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLEmLRDW9k55d/b9Dk8aGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz
MjBmMTYwHhcNMjYwMzI4MDIwMDU2WhcNMjYwMzI5MDIwMDU2WjAzMTEwLwYDVQQD
EyhmYTEzNTdkNjEwMjBlMmUzYzU3YWM5YmZkNmQzNWIzYTM0MzNjYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNfHHC/IPzbe5oqN6jwggmKCRUVc
MZljA0JbKF27PHuzVawAKglo9cFxLpaR+3GEXq/sTJu8ljI9FSB1OuzcFD2d9rSn
sMFlbW/AMBYUXZ9tO3P/6/i+UNslj0FVqrb58xSWqgGrU8Qxu+eucevrEuiYQEn5
8ViwJWpPPtUkeltF5ru2KwqlANkDDAcImKxmKVj7MkekltSnZ3/oOvXa6cfErnNP
DoTUkFulX3bybMzNJYKfwRTUJTJIBt5h4MgfzswAg4+eNN5CzAR1+FF9ldSZeUgd
dJjPL1WqGVIWg6wLYB5mjS472gQEHT3k+6lqLbVozFSEj1Baf0w1EWdNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoTV9YQIOLjxXrJv9bTWzo0M8yVMB8GA1UdIwQY
MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct
MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm
LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRIsUJ0X
VJKmar0WOFxWhbg8L2yGIATeVmAg3tTM6rOsgE5H8jJlKOwr2sr5GELK9hRIPqDE
I6DJRBCeVvzyRE+9yNdz4jhcXm8FvFDjl73A1+97+iLPuKN60crX+RMX2dSUNwef
kfpMmvfRF8z8fGZEYvvdnv1J0+viJGrfS+Md6ZCVdf2VTWO01WLSQ7h3+PBwnuUa
AmXy2MklrlQtwy/3TRyDZ4EkQPKmabr4nH9DvB/wYs2grs+jDJpFlL9hxAqJ2MfM
BSW4TdlQEH5jcGRfjjBzYI6aB1M0/uB1AeRGCvbCBiCYvkmb13xPcK0RKOHpyYAc
IylkKh0/I1jI4g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:32 2026 by rpki-client