Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier: HGmwW9hFcrwqOoowOCDKPtRLC0xTE0iEfh8o+W4k5Y4=
Subject key identifier: 58:99:4B:1F:F1:D4:93:22:86:8E:FA:88:01:77:4A:87:91:35:9F:2D
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial: 019D28F2F6E636B57F2E6B42E1667E0EE6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number: 10A5
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: vLwInbX7V9srbVZGRa8+ZKqswYnwAPFmAqcGZrSe7Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f6:e6:36:b5:7f:2e:6b:42:e1:66:7e:0e:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=58994b1ff1d49322868efa8801774a8791359f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:d0:b6:d1:f7:b3:60:0a:f4:71:6b:5a:ab:
ad:22:5d:53:74:4a:33:e9:42:f9:ee:aa:4c:91:3e:
29:27:1b:6f:c5:58:07:ea:fa:67:45:d6:58:ee:a1:
49:74:ec:5e:be:77:20:73:8c:60:89:37:78:87:20:
df:f8:dd:93:9a:ce:68:32:a6:f6:57:ab:e2:bf:0e:
72:81:16:44:6e:16:4c:98:96:c1:c8:f6:ac:88:f8:
0a:50:8a:2a:75:d1:77:14:ed:ec:71:25:22:fb:f0:
e5:80:03:b2:8e:64:05:d0:12:1c:34:57:8e:ca:30:
30:29:dd:d3:8e:ab:3c:ce:43:6a:b3:5b:59:4b:89:
fe:3b:87:8b:6b:16:df:cf:f1:d8:5a:a2:47:21:3d:
a2:db:87:94:d8:7c:0e:38:19:6b:44:ab:c4:e9:1c:
80:5b:18:bd:c7:2e:95:dd:d1:4a:29:d3:ca:59:19:
58:93:cf:8e:8e:ef:2a:e4:d7:8a:bd:ad:6d:89:81:
9f:03:41:42:78:da:49:32:23:ba:b6:79:1e:4d:f4:
e2:fd:33:1f:ff:16:a3:98:e1:8a:18:40:88:96:b3:
9c:5a:20:c2:84:2c:50:84:d7:bd:b0:0e:e7:1b:68:
0e:cc:98:70:2c:c7:80:63:e6:c8:24:f5:9c:7b:11:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:4B:1F:F1:D4:93:22:86:8E:FA:88:01:77:4A:87:91:35:9F:2D
X509v3 Authority Key Identifier:
keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:45:6a:4a:fb:69:ee:5c:21:72:9e:fc:d2:7f:e5:39:a6:
4c:b9:20:ac:f0:62:4a:a6:76:29:54:dc:d8:0f:54:37:fc:42:
d5:bd:e4:6a:19:20:e0:a1:3e:24:27:5f:2e:a8:5a:04:86:ec:
41:0e:20:91:45:1f:a9:b2:09:db:f3:18:9a:59:52:1e:c5:cf:
38:8e:44:a9:d1:f3:e3:69:08:a4:cc:55:77:76:44:18:8f:20:
1e:b8:75:6d:6a:00:35:89:e1:7f:34:f2:5b:d3:f0:f1:76:67:
3d:18:f6:9e:9a:65:7c:64:d6:15:cc:1c:f9:6a:42:88:6e:3a:
76:9e:d9:40:4e:e8:23:16:4a:b0:e5:13:26:6f:33:bd:0d:9c:
fc:8b:da:0b:86:d8:c4:af:6f:9c:c4:e4:63:97:d7:c0:3c:14:
61:0a:40:35:94:b3:2e:95:b9:e5:5f:4e:db:ed:26:75:28:38:
63:02:87:a6:97:3d:5b:86:63:6b:fc:0b:95:00:ce:fe:1c:18:
d6:22:0a:c8:c2:58:b8:8a:b2:e8:f8:98:18:13:7b:0a:ef:db:
c2:e7:30:8c:28:df:b6:c2:4f:65:e1:ec:be:24:a0:3f:33:94:
a5:1d:28:82:25:86:0f:06:d7:7f:4b:38:4c:04:7b:78:bc:ed:
22:93:67:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vbmNrV/LmtC4WZ+Dua9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OTcwMzZkOTNiNGFjNjcwZjBmZmM1YTkwY2VhYjZhNWY4
YmMyOTUwHhcNMjYwMzI2MDcwMTQ0WhcNMjYwMzI3MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg1ODk5NGIxZmYxZDQ5MzIyODY4ZWZhODgwMTc3NGE4NzkxMzU5ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxjQttH3s2AK9HFrWqutIl1TdEoz
6UL57qpMkT4pJxtvxVgH6vpnRdZY7qFJdOxevncgc4xgiTd4hyDf+N2Tms5oMqb2
V6vivw5ygRZEbhZMmJbByPasiPgKUIoqddF3FO3scSUi+/DlgAOyjmQF0BIcNFeO
yjAwKd3Tjqs8zkNqs1tZS4n+O4eLaxbfz/HYWqJHIT2i24eU2HwOOBlrRKvE6RyA
Wxi9xy6V3dFKKdPKWRlYk8+Oju8q5NeKva1tiYGfA0FCeNpJMiO6tnkeTfTi/TMf
/xajmOGKGECIlrOcWiDChCxQhNe9sA7nG2gOzJhwLMeAY+bIJPWcexH7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiZSx/x1JMiho76iAF3SoeRNZ8tMB8GA1UdIwQY
MBaAFHaXA22TtKxnDw/8WpDOq2pfi8KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAt
ZjlkZTU5YzM3MjkxLzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAtZjlkZTU5YzM3Mjkx
LzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+VFakr7
ae5cIXKe/NJ/5TmmTLkgrPBiSqZ2KVTc2A9UN/xC1b3kahkg4KE+JCdfLqhaBIbs
QQ4gkUUfqbIJ2/MYmllSHsXPOI5EqdHz42kIpMxVd3ZEGI8gHrh1bWoANYnhfzTy
W9Pw8XZnPRj2npplfGTWFcwc+WpCiG46dp7ZQE7oIxZKsOUTJm8zvQ2c/IvaC4bY
xK9vnMTkY5fXwDwUYQpANZSzLpW55V9O2+0mdSg4YwKHppc9W4Zja/wLlQDO/hwY
1iIKyMJYuIqy6PiYGBN7Cu/bwucwjCjftsJPZeHsviSgPzOUpR0ogiWGDwbXf0s4
TAR7eLztIpNnZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:28 2026 by rpki-client