Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: KcTVo93siN2LyzgyfCHn5jFGSChMSFODeTKAjgx93Bs=
Subject key identifier: 48:CC:81:0E:F8:06:25:97:17:8B:38:61:65:7A:1B:D1:C2:44:B5:17
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019D26CD7AA1B2D306EEAD27F1FAD50E7DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0FB7
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: tQXMWDl7F3KaTAeN442y6J85xU89uVvbVAeZSeRP0VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7a:a1:b2:d3:06:ee:ad:27:f1:fa:d5:0e:7d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=48cc810ef8062597178b3861657a1bd1c244b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:88:3c:17:f6:e2:bf:d5:f2:69:e3:33:ac:
97:46:4a:66:c5:3c:2c:09:fd:07:db:c2:95:3d:81:
31:a0:c7:d1:58:f7:48:ec:96:19:60:47:6a:2a:11:
30:be:ce:dd:8d:59:b8:1d:5b:06:27:fe:69:32:2d:
6e:2d:79:c2:bc:9a:a1:c3:6c:4a:b5:94:1a:c2:48:
12:b6:19:9f:8d:7e:8b:fe:5c:48:1e:a1:ce:d9:fb:
ba:da:29:e4:3d:6b:fa:4d:38:47:a3:a5:5c:da:b7:
f8:09:d5:ae:42:c4:e7:6b:17:26:9e:4e:bd:53:d4:
de:85:ac:a9:7e:11:0c:9d:12:2d:8f:4b:7e:f4:84:
95:78:b9:4c:4b:fe:d9:ce:6a:3f:76:7a:2d:f9:fb:
30:a4:c8:32:7c:12:7f:7c:2e:da:5e:55:80:4a:d8:
f1:84:c6:ff:5a:12:cf:56:12:b1:8a:e0:2b:34:d9:
47:1c:0b:b7:cc:89:a8:d0:e0:5e:cc:0c:74:4d:84:
47:aa:9b:34:bb:85:63:34:6e:73:e6:c0:2a:9c:f3:
66:c1:ab:e8:a5:0d:e6:5c:f2:97:21:16:4d:6c:8a:
b4:4b:00:0f:f5:c7:5e:ab:3c:dc:ae:98:9f:80:03:
4f:69:68:9e:5a:2e:77:c8:36:78:13:71:98:a5:a0:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:81:0E:F8:06:25:97:17:8B:38:61:65:7A:1B:D1:C2:44:B5:17
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:0c:e7:4c:c5:b7:82:7e:65:0e:04:a1:48:eb:eb:13:87:36:
48:41:17:ee:93:1c:0a:41:45:3f:3c:b1:6b:c0:7e:35:be:3d:
f6:0e:a0:9e:cd:5c:57:93:8e:c4:72:1f:64:f1:ab:d1:03:ec:
ea:51:94:e6:ea:19:a2:cc:39:bc:86:2b:6e:0c:0a:83:92:dc:
bd:34:fb:d1:f7:dd:98:7d:ab:36:c0:01:d6:0a:f2:e1:44:e1:
06:da:c4:a6:c1:5b:d8:e8:d5:3c:9b:8c:d4:69:58:7d:1d:a9:
35:7f:09:6b:e7:97:77:91:af:48:d3:75:e1:d6:5c:c5:5c:10:
42:da:b5:e5:73:11:52:e0:e7:01:7b:db:06:11:d8:fe:cb:46:
20:79:82:e9:cd:97:7c:2e:e9:da:8b:d3:e8:62:68:41:fb:57:
dd:ae:16:53:30:bf:c8:b5:37:61:31:96:24:0d:5b:d9:58:ff:
52:3b:e2:b2:8d:73:f7:c8:3e:e9:86:af:00:97:73:51:85:8e:
89:e1:29:29:13:7b:6f:23:b6:3c:be:ce:22:c1:fd:b4:dc:f7:
2f:68:52:83:ae:1f:20:d5:00:47:a2:cb:7c:ff:6b:16:9a:c2:
b5:0c:14:0d:98:2d:00:85:bc:63:d9:90:52:d6:71:17:ae:27:
02:7f:68:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXqhstMG7q0n8frVDn33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYTNjYmYxZTBlODU2ZWE0YzUzYjVhYmFlODY1OTRlYzk5
MzM5ODIwHhcNMjYwMzI1MjEwMTMzWhcNMjYwMzI2MjEwMTMzWjAzMTEwLwYDVQQD
Eyg0OGNjODEwZWY4MDYyNTk3MTc4YjM4NjE2NTdhMWJkMWMyNDRiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV6IPBf24r/V8mnjM6yXRkpmxTws
Cf0H28KVPYExoMfRWPdI7JYZYEdqKhEwvs7djVm4HVsGJ/5pMi1uLXnCvJqhw2xK
tZQawkgSthmfjX6L/lxIHqHO2fu62inkPWv6TThHo6Vc2rf4CdWuQsTnaxcmnk69
U9TehaypfhEMnRItj0t+9ISVeLlMS/7Zzmo/dnot+fswpMgyfBJ/fC7aXlWAStjx
hMb/WhLPVhKxiuArNNlHHAu3zImo0OBezAx0TYRHqps0u4VjNG5z5sAqnPNmwavo
pQ3mXPKXIRZNbIq0SwAP9cdeqzzcrpifgANPaWieWi53yDZ4E3GYpaDhHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjMgQ74BiWXF4s4YWV6G9HCRLUXMB8GA1UdIwQY
MBaAFA2jy/Hg6FbqTFO1q66GWU7JkzmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDIt
Y2VkMjk2NTBhMjgwLzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDItY2VkMjk2NTBhMjgw
LzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8AznTMW3
gn5lDgShSOvrE4c2SEEX7pMcCkFFPzyxa8B+Nb499g6gns1cV5OOxHIfZPGr0QPs
6lGU5uoZosw5vIYrbgwKg5LcvTT70ffdmH2rNsAB1gry4UThBtrEpsFb2OjVPJuM
1GlYfR2pNX8Ja+eXd5GvSNN14dZcxVwQQtq15XMRUuDnAXvbBhHY/stGIHmC6c2X
fC7p2ovT6GJoQftX3a4WUzC/yLU3YTGWJA1b2Vj/Ujviso1z98g+6YavAJdzUYWO
ieEpKRN7byO2PL7OIsH9tNz3L2hSg64fINUAR6LLfP9rFprCtQwUDZgtAIW8Y9mQ
UtZxF64nAn9oEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:34:22 2026 by rpki-client