
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: +trAktew04VIIXtkqf9sCjGzMDJTgQCLPURgMUZfZTo=
Subject key identifier: DF:F3:DA:B2:4F:00:F4:11:09:AA:54:5A:3E:C3:51:5E:0B:92:10:A2
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 019D2695F2D832660284878856766D7E99D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: jz5x6ax3ED0k8JvyAtl5GC6F0e8EK0sfqw0omPzmKz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f2:d8:32:66:02:84:87:88:56:76:6d:7e:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=dff3dab24f00f41109aa545a3ec3515e0b9210a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:93:9a:5e:95:7e:59:64:0b:54:6b:72:05:
69:14:16:9a:f4:22:75:7e:26:58:c7:8a:5f:fd:37:
a4:cd:8a:fa:2d:be:db:16:f5:e8:57:eb:1a:43:98:
bd:32:47:90:5e:35:e0:94:67:ea:5d:f0:51:d9:1a:
b6:3f:9a:d5:3c:2a:24:22:ab:15:b7:ae:f0:4d:49:
d9:53:c7:71:9e:96:b6:29:a2:81:28:85:f0:e3:5c:
f1:a0:69:a5:17:cd:80:31:2d:c7:54:ce:3f:4b:71:
2a:90:87:a8:cf:7a:31:ad:24:c0:be:a2:07:95:56:
9c:04:7c:e8:61:ac:75:f0:eb:4f:3b:11:38:95:55:
6a:e2:0a:c6:c6:c1:6a:8e:0b:6e:f3:9d:10:8a:5f:
c2:7e:e0:07:58:43:7d:01:b4:34:cf:b4:87:67:29:
0b:fe:56:b2:4e:44:6b:56:40:cf:b9:9b:26:a1:6a:
2e:b5:39:94:54:1a:d3:47:5e:be:fa:92:65:62:dc:
47:0c:a1:58:40:9c:aa:f5:a8:80:99:89:67:42:3a:
a7:9d:d0:bf:71:23:3c:88:1c:9f:36:2b:12:ab:c1:
a9:b2:41:91:4c:bb:12:e9:da:f1:c0:3a:c7:85:04:
65:ff:26:bf:7c:5d:8f:ec:38:a8:05:80:d2:ef:46:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:DA:B2:4F:00:F4:11:09:AA:54:5A:3E:C3:51:5E:0B:92:10:A2
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:f8:0a:9e:3a:14:55:cf:ce:83:07:51:2f:97:97:e9:06:
bd:5d:0b:02:8c:f3:82:c1:3d:55:de:2e:2d:5e:5c:2a:e5:e7:
35:80:82:e9:3f:59:16:bb:d1:dd:bc:9e:95:9a:4b:64:5a:21:
97:43:bf:1a:97:9e:53:a6:0e:b4:0f:18:72:91:58:53:36:83:
d6:e3:46:cf:47:8a:aa:54:6e:54:6e:81:41:d9:2e:74:99:80:
85:eb:16:70:2e:f8:7c:a1:8d:20:34:af:f8:d2:2e:b5:70:90:
d4:03:18:10:51:29:42:cf:8a:28:a7:bb:32:fd:5c:6d:29:05:
d6:14:6b:a0:8f:32:f2:5c:36:a9:14:96:4a:3a:38:59:d9:16:
a5:a6:24:a2:f1:d3:b1:60:37:49:93:c8:08:d1:10:45:69:b4:
ba:a6:cb:a8:7c:3a:e0:d8:52:80:0b:3d:40:1a:e9:f7:91:a1:
d4:2f:20:34:fd:85:9b:87:79:80:3a:a1:1e:35:79:05:19:8e:
75:c5:f0:08:da:ad:25:7c:f2:5e:f5:33:31:50:02:2a:0c:d8:
15:75:c3:78:57:99:99:2d:f7:8c:46:1f:f1:dc:c4:ab:8c:f5:
b3:f6:26:40:e0:d1:e7:d1:40:76:49:40:db:94:58:35:a1:23:
59:69:30:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfLYMmYChIeIVnZtfpnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0
ZjhhZTgwHhcNMjYwMzI1MjAwMDU0WhcNMjYwMzI2MjAwMDU0WjAzMTEwLwYDVQQD
EyhkZmYzZGFiMjRmMDBmNDExMDlhYTU0NWEzZWMzNTE1ZTBiOTIxMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRSTml6VfllkC1RrcgVpFBaa9CJ1
fiZYx4pf/TekzYr6Lb7bFvXoV+saQ5i9MkeQXjXglGfqXfBR2Rq2P5rVPCokIqsV
t67wTUnZU8dxnpa2KaKBKIXw41zxoGmlF82AMS3HVM4/S3EqkIeoz3oxrSTAvqIH
lVacBHzoYax18OtPOxE4lVVq4grGxsFqjgtu850Qil/CfuAHWEN9AbQ0z7SHZykL
/layTkRrVkDPuZsmoWoutTmUVBrTR16++pJlYtxHDKFYQJyq9aiAmYlnQjqnndC/
cSM8iByfNisSq8GpskGRTLsS6drxwDrHhQRl/ya/fF2P7DioBYDS70aHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/z2rJPAPQRCapUWj7DUV4LkhCiMB8GA1UdIwQY
MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt
ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk
LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7v4Cp46
FFXPzoMHUS+Xl+kGvV0LAozzgsE9Vd4uLV5cKuXnNYCC6T9ZFrvR3byelZpLZFoh
l0O/GpeeU6YOtA8YcpFYUzaD1uNGz0eKqlRuVG6BQdkudJmAhesWcC74fKGNIDSv
+NIutXCQ1AMYEFEpQs+KKKe7Mv1cbSkF1hRroI8y8lw2qRSWSjo4WdkWpaYkovHT
sWA3SZPICNEQRWm0uqbLqHw64NhSgAs9QBrp95Gh1C8gNP2Fm4d5gDqhHjV5BRmO
dcXwCNqtJXzyXvUzMVACKgzYFXXDeFeZmS33jEYf8dzEq4z1s/YmQODR59FAdklA
25RYNaEjWWkw8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:01 2026 by rpki-client