Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: GmfkzY924g2h3zIcy3MIr+CY/MJIQfJXOqEfcsPc+cg=
Subject key identifier: CC:FB:5C:5D:A6:59:C9:91:7D:68:DF:1D:11:D0:07:D0:52:33:2A:5F
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019D281642A4CD227EB07182910796549B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0CE8
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: lfozcQzNBpYjZEUDXrt1H4zsjlKikGIMdMT4lQaXEC8=)
2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:42:a4:cd:22:7e:b0:71:82:91:07:96:54:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=ccfb5c5da659c9917d68df1d11d007d052332a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:87:49:64:54:d5:0c:17:18:3b:78:f8:31:
7f:6c:1e:94:c5:e4:c1:46:80:b6:ed:4f:55:95:1c:
3e:36:23:2e:af:57:78:52:23:81:50:44:38:21:1f:
f8:c0:cb:b6:bf:75:e3:c0:ef:51:77:b6:cf:ec:0d:
8e:09:61:bd:6f:9b:b2:ab:6c:ad:9b:de:78:2c:df:
d0:69:9a:e5:b1:fe:6c:fa:13:d1:fe:03:89:9d:ee:
a4:6f:3a:91:02:6c:5b:89:83:b1:a0:b3:2c:61:8b:
a2:5a:ff:a5:86:b2:61:8e:89:41:f5:23:b3:38:7c:
29:9d:b6:b8:69:14:4d:98:cb:2a:b6:b0:68:16:3a:
a1:d9:5d:a2:3a:be:19:b5:73:db:39:c0:87:95:3c:
e6:00:4d:0f:3f:02:f6:b4:77:86:d9:33:fd:03:29:
a8:bf:7e:23:1c:d2:be:85:e8:1d:18:ae:fd:28:c3:
15:9f:0d:d4:c8:40:5b:91:23:a0:f0:19:8d:32:05:
13:bf:86:ff:b3:9d:b0:3a:02:d3:ab:32:a6:f4:46:
33:ea:3e:96:61:eb:e3:7c:ce:28:d0:73:a7:06:1c:
e9:0b:b1:d7:9e:7e:68:84:b8:61:b2:0d:d1:36:3b:
52:f0:0a:00:26:d4:c0:79:dc:fe:b2:b3:1d:0b:56:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:5C:5D:A6:59:C9:91:7D:68:DF:1D:11:D0:07:D0:52:33:2A:5F
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:26:c5:22:83:4d:8a:85:f8:c4:99:af:60:49:e6:c9:57:
6b:ab:bd:ed:ac:1d:47:4d:5e:22:4d:06:3b:0b:b9:4e:0e:64:
c5:90:5d:67:c7:d6:30:de:3d:21:c2:f3:c4:24:b4:ed:65:cb:
c9:34:da:ac:c3:d3:18:d5:69:7c:63:eb:6f:65:f7:5f:fe:af:
4d:6a:97:ed:80:78:f7:08:60:37:5a:bc:19:a1:d3:14:33:3e:
09:57:12:42:ec:48:50:e4:8d:f4:25:c6:10:0d:30:53:ed:e9:
d9:bd:43:e8:93:5d:94:5d:d7:de:88:cc:86:5e:e9:7d:f6:e4:
b2:b9:4c:6a:16:e6:4d:97:58:41:5d:74:ee:8f:51:65:f4:bf:
7e:6a:00:e5:cc:fd:1a:e2:0a:6c:93:2f:2f:a1:23:25:07:29:
24:f5:20:f2:9d:80:ba:37:d5:4f:6b:eb:4d:a9:0b:01:82:f0:
2a:f5:56:20:48:4d:32:78:a2:0b:21:ca:a2:42:f6:d1:24:3b:
2e:7c:77:06:ac:f8:c5:09:d6:68:12:af:4a:c2:a2:43:ab:fb:
60:71:f4:62:80:3b:f1:4a:80:bb:c0:23:11:d5:8b:b8:1c:c2:
a5:8d:cd:d0:9f:d7:9f:41:ce:21:8e:91:b3:72:4b:0e:16:38:
b5:0f:ab:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkKkzSJ+sHGCkQeWVJsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy
NjQwM2IwHhcNMjYwMzI2MDMwMDQwWhcNMjYwMzI3MDMwMDQwWjAzMTEwLwYDVQQD
EyhjY2ZiNWM1ZGE2NTljOTkxN2Q2OGRmMWQxMWQwMDdkMDUyMzMyYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+HSWRU1QwXGDt4+DF/bB6UxeTB
RoC27U9VlRw+NiMur1d4UiOBUEQ4IR/4wMu2v3XjwO9Rd7bP7A2OCWG9b5uyq2yt
m954LN/QaZrlsf5s+hPR/gOJne6kbzqRAmxbiYOxoLMsYYuiWv+lhrJhjolB9SOz
OHwpnba4aRRNmMsqtrBoFjqh2V2iOr4ZtXPbOcCHlTzmAE0PPwL2tHeG2TP9Aymo
v34jHNK+hegdGK79KMMVnw3UyEBbkSOg8BmNMgUTv4b/s52wOgLTqzKm9EYz6j6W
YevjfM4o0HOnBhzpC7HXnn5ohLhhsg3RNjtS8AoAJtTAedz+srMdC1Zs3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz7XF2mWcmRfWjfHRHQB9BSMypfMB8GA1UdIwQY
MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct
ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw
LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/MmxSKD
TYqF+MSZr2BJ5slXa6u97awdR01eIk0GOwu5Tg5kxZBdZ8fWMN49IcLzxCS07WXL
yTTarMPTGNVpfGPrb2X3X/6vTWqX7YB49whgN1q8GaHTFDM+CVcSQuxIUOSN9CXG
EA0wU+3p2b1D6JNdlF3X3ojMhl7pffbksrlMahbmTZdYQV107o9RZfS/fmoA5cz9
GuIKbJMvL6EjJQcpJPUg8p2AujfVT2vrTakLAYLwKvVWIEhNMniiCyHKokL20SQ7
Lnx3Bqz4xQnWaBKvSsKiQ6v7YHH0YoA78UqAu8AjEdWLuBzCpY3N0J/Xn0HOIY6R
s3JLDhY4tQ+rmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:33 2026 by rpki-client