Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: Jl8t+Bb2WpPrReao9SkotCjFxq2HVHdd8vHRiB+B9Fs=
Subject key identifier: FE:95:6B:E3:D7:D6:D3:10:0D:02:18:5F:D4:FB:39:AA:41:22:D6:9D
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 019D2816F800BC66572018015708134C9862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 08A0
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: kQx/Cy17iiU2pQcNXXbj2fH1VWQlEGXOc+LFfTvwZHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f8:00:bc:66:57:20:18:01:57:08:13:4c:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=fe956be3d7d6d3100d02185fd4fb39aa4122d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:85:18:d4:d4:66:9c:2c:94:31:fb:30:fd:
d9:fb:43:50:d5:a1:ef:cd:f6:7a:82:e8:17:ee:4d:
45:99:1a:1e:26:45:89:0f:1f:94:ec:5b:1b:8e:99:
c8:ff:8a:87:e0:37:fa:95:47:f2:f6:dc:03:43:bf:
87:2d:bb:7c:66:71:cd:89:c0:c4:f0:aa:c4:0d:4a:
d0:21:fe:be:a0:2d:dc:4c:b3:00:d6:88:89:ed:f3:
7f:26:c2:95:03:b3:3f:fc:70:b5:e7:da:da:c3:95:
70:c5:b7:a2:2c:3d:d2:05:22:cb:3e:72:c5:04:88:
d3:a6:9f:c3:cd:44:2a:b8:20:d1:9c:69:99:4b:10:
bb:7b:9f:5d:3d:94:6e:37:1f:2c:12:5e:02:5a:dc:
f5:23:69:e3:28:ff:0f:01:6e:83:f2:19:e9:9c:7f:
a5:74:87:fe:ac:d0:87:a5:e6:65:57:2a:42:23:21:
0c:bc:5d:2c:09:6a:70:36:88:fc:ef:24:d3:d2:62:
7a:f3:9d:29:b7:51:d4:22:04:fd:88:2c:30:96:08:
be:10:23:6f:75:1c:1e:3a:e3:37:0f:78:cf:35:e4:
7d:f5:28:b1:37:f2:e9:cd:4a:27:83:61:8c:ac:8c:
3a:9d:71:b1:5d:32:29:21:e8:b7:99:62:48:71:08:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:6B:E3:D7:D6:D3:10:0D:02:18:5F:D4:FB:39:AA:41:22:D6:9D
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a1:be:2f:c2:6d:73:c0:df:b8:63:f9:91:33:7e:ac:b7:f7:
5a:6e:29:39:49:b8:fa:82:f4:e9:39:49:08:e0:bd:0f:94:31:
19:02:04:81:19:a1:17:d4:fe:b6:3e:c7:b0:86:86:b2:d6:60:
93:ed:04:1f:99:a1:33:06:34:bb:a3:b1:fc:f8:35:3e:f2:0c:
87:bc:30:b6:7b:14:a5:fa:fa:fd:79:41:eb:58:c6:ec:5d:c7:
55:0a:cc:eb:3a:88:c3:c3:48:5d:69:0c:4a:e1:c0:28:ec:5d:
65:df:49:ba:d0:42:6d:8b:fd:fb:8a:f4:7c:04:3a:c9:50:6e:
a4:a7:82:cc:3f:1e:e4:15:a1:96:03:25:1f:d1:0a:88:93:2f:
8c:0a:11:78:33:77:8a:88:45:15:31:98:b5:ce:02:bd:2d:cf:
ee:08:75:68:71:a4:50:ae:96:f7:61:2c:4d:3a:78:41:c9:1b:
36:16:be:b2:f3:52:a3:06:eb:45:f7:f7:d7:93:a0:04:40:7d:
94:58:ae:27:1f:db:94:75:04:25:3c:6d:1c:a3:4b:55:f0:aa:
88:76:7d:fe:38:f5:5d:7b:5b:5e:93:2d:8a:65:cd:29:47:95:
70:43:47:3a:35:db:99:ba:30:f1:60:d4:fb:71:3e:52:ea:db:
19:96:1d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvgAvGZXIBgBVwgTTJhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk
ZDJjOWUwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
EyhmZTk1NmJlM2Q3ZDZkMzEwMGQwMjE4NWZkNGZiMzlhYTQxMjJkNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuimFGNTUZpwslDH7MP3Z+0NQ1aHv
zfZ6gugX7k1FmRoeJkWJDx+U7FsbjpnI/4qH4Df6lUfy9twDQ7+HLbt8ZnHNicDE
8KrEDUrQIf6+oC3cTLMA1oiJ7fN/JsKVA7M//HC159raw5VwxbeiLD3SBSLLPnLF
BIjTpp/DzUQquCDRnGmZSxC7e59dPZRuNx8sEl4CWtz1I2njKP8PAW6D8hnpnH+l
dIf+rNCHpeZlVypCIyEMvF0sCWpwNoj87yTT0mJ6850pt1HUIgT9iCwwlgi+ECNv
dRweOuM3D3jPNeR99SixN/LpzUong2GMrIw6nXGxXTIpIei3mWJIcQjzjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6Va+PX1tMQDQIYX9T7OapBItadMB8GA1UdIwQY
MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt
MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz
LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6G+L8Jt
c8DfuGP5kTN+rLf3Wm4pOUm4+oL06TlJCOC9D5QxGQIEgRmhF9T+tj7HsIaGstZg
k+0EH5mhMwY0u6Ox/Pg1PvIMh7wwtnsUpfr6/XlB61jG7F3HVQrM6zqIw8NIXWkM
SuHAKOxdZd9JutBCbYv9+4r0fAQ6yVBupKeCzD8e5BWhlgMlH9EKiJMvjAoReDN3
iohFFTGYtc4CvS3P7gh1aHGkUK6W92EsTTp4QckbNha+svNSowbrRff315OgBEB9
lFiuJx/blHUEJTxtHKNLVfCqiHZ9/jj1XXtbXpMtimXNKUeVcENHOjXbmbow8WDU
+3E+UurbGZYdfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:29 2026 by rpki-client