Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json)
Hash identifier: vj2+J92dywGYtK74blv2AtBeNwldEBR20mOPBdl9IWc=
Subject key identifier: 9C:75:FA:01:B0:57:51:71:CB:F5:3C:1D:13:66:84:7A:E8:30:E6:A3
Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Certificate serial: 019E1CEBD4BC9C0E7CF52E0BCE46359D30CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
Manifest number: 023E
Signing time: Tue 12 May 2026 16:01:17 +0000
Manifest this update: Tue 12 May 2026 16:01:17 +0000
Manifest next update: Wed 13 May 2026 16:01:17 +0000
Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: 0qG5f6Ap1ne0y2FKGxGELq/CzPCCAcFemDC8saaLt2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d4:bc:9c:0e:7c:f5:2e:0b:ce:46:35:9d:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Validity
Not Before: May 12 16:01:17 2026 GMT
Not After : May 13 16:01:17 2026 GMT
Subject: CN=9c75fa01b0575171cbf53c1d1366847ae830e6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:fd:16:a4:11:ea:92:74:35:b7:21:52:8a:
08:d1:9b:03:18:d4:f0:b4:64:60:c3:ec:10:13:3c:
ee:d3:97:83:09:f4:77:32:46:d9:bb:03:fd:bf:8a:
26:8c:cd:2a:ef:89:4e:8e:72:ae:40:bc:ce:1d:87:
2e:01:2c:37:53:b1:6a:9b:ff:b5:84:f9:0d:c4:81:
42:bf:df:ca:43:f3:d6:69:0d:ce:21:c8:d0:8f:b4:
72:27:d0:22:a3:1a:8e:d0:31:0c:2d:9c:f0:2a:38:
0d:99:de:8e:76:14:61:dc:f7:3b:99:ab:9f:ca:02:
c3:31:b3:15:be:3b:aa:fa:34:50:91:81:1c:f1:2b:
22:d6:2b:45:64:a0:d4:1c:c2:2f:c6:84:26:2f:cc:
42:b5:6d:0b:d8:01:7a:45:73:cf:24:3d:20:a2:35:
76:d1:7f:85:bb:ea:7c:7a:78:03:0c:8d:bf:57:b5:
06:a6:aa:b3:50:0a:f1:bf:b7:ea:22:4e:94:85:6f:
6b:97:21:ab:36:ef:06:1c:b6:51:d2:1f:2d:d5:2e:
9b:f3:71:8d:de:9c:7a:02:f9:60:10:d2:09:7e:51:
be:f9:56:e2:3e:79:b1:b1:6f:27:da:b6:da:62:b6:
89:27:5e:f6:53:d2:a8:56:26:ae:1e:e5:84:ae:44:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:FA:01:B0:57:51:71:CB:F5:3C:1D:13:66:84:7A:E8:30:E6:A3
X509v3 Authority Key Identifier:
keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c8:ec:8f:d4:b7:dc:9b:2a:fa:cb:1e:56:43:d9:1d:4b:a0:
18:33:6b:c6:f3:46:c0:e8:b1:9d:60:b2:17:8c:0b:08:90:ae:
23:bf:06:0f:a1:09:14:a4:7f:26:23:e6:b3:01:af:ce:28:0b:
67:07:b8:c5:cc:e9:63:d9:81:21:73:26:0a:59:fe:d1:6d:a1:
3a:b2:91:6c:21:17:1f:b9:f4:51:13:b1:10:88:79:e5:e2:91:
72:35:ae:ae:4b:d3:71:5d:28:54:41:2f:e1:03:12:cf:bc:5c:
d7:d7:c0:8a:89:82:08:66:56:cf:01:4a:46:1a:ff:e5:41:a7:
19:7e:3f:d7:bb:2a:90:ae:f7:f6:95:e9:4e:1d:24:26:23:d8:
88:af:6f:cd:bc:47:d3:82:d6:b5:92:d4:2b:91:33:0e:d5:f6:
62:c5:6b:69:19:c7:a8:8f:8f:b9:93:7f:9e:c0:4a:21:d3:a5:
0a:5f:e2:96:00:7d:52:89:9a:dc:e3:62:d2:a5:1e:3e:8a:f5:
fa:1d:f4:0b:98:f1:7f:36:1b:72:db:c8:c0:b5:84:de:7d:d2:
fd:9f:bb:e9:da:89:6f:8f:79:8e:cc:b5:05:7e:03:7b:91:c9:
4e:5c:ff:5f:df:84:50:a4:de:b1:b9:56:61:2a:e0:e0:6e:6f:
f9:6f:cd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c69S8nA589S4LzkY1nTDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzFiMjg1YjZjN2YyYmYwNGM5OThkZTg5MmI0MzZmMTBk
MzRkYzAwHhcNMjYwNTEyMTYwMTE3WhcNMjYwNTEzMTYwMTE3WjAzMTEwLwYDVQQD
Eyg5Yzc1ZmEwMWIwNTc1MTcxY2JmNTNjMWQxMzY2ODQ3YWU4MzBlNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8P9FqQR6pJ0NbchUooI0ZsDGNTw
tGRgw+wQEzzu05eDCfR3MkbZuwP9v4omjM0q74lOjnKuQLzOHYcuASw3U7Fqm/+1
hPkNxIFCv9/KQ/PWaQ3OIcjQj7RyJ9AioxqO0DEMLZzwKjgNmd6OdhRh3Pc7mauf
ygLDMbMVvjuq+jRQkYEc8Ssi1itFZKDUHMIvxoQmL8xCtW0L2AF6RXPPJD0gojV2
0X+Fu+p8engDDI2/V7UGpqqzUArxv7fqIk6UhW9rlyGrNu8GHLZR0h8t1S6b83GN
3px6AvlgENIJflG++VbiPnmxsW8n2rbaYraJJ172U9KoViauHuWErkSPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx1+gGwV1Fxy/U8HRNmhHroMOajMB8GA1UdIwQY
MBaAFA3BsoW2x/K/BMmY3okrQ28Q003AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQt
ZWNhYTVkZGQxZDBmLzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQtZWNhYTVkZGQxZDBm
LzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8jsj9S3
3Jsq+sseVkPZHUugGDNrxvNGwOixnWCyF4wLCJCuI78GD6EJFKR/JiPmswGvzigL
Zwe4xczpY9mBIXMmCln+0W2hOrKRbCEXH7n0UROxEIh55eKRcjWurkvTcV0oVEEv
4QMSz7xc19fAiomCCGZWzwFKRhr/5UGnGX4/17sqkK739pXpTh0kJiPYiK9vzbxH
04LWtZLUK5EzDtX2YsVraRnHqI+PuZN/nsBKIdOlCl/ilgB9Uoma3ONi0qUePor1
+h30C5jxfzYbctvIwLWE3n3S/Z+76dqJb495jsy1BX4De5HJTlz/X9+EUKTesblW
YSrg4G5v+W/N/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 00:16:28 2026 by rpki-client