Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: yv3iprnVaFo1RjjNN/e+iL5NcgU01BE0JmHPtfnyayk=
Subject key identifier: 84:F5:5F:60:8C:4B:6C:3A:5B:23:00:03:27:BE:38:0E:C8:4B:A4:36
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019D273AB222758B842FD3F7A953087AE15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 1526
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: agpNtlUEFNOTUT/8mNAQ31dismeB44Xb1kLfMY50dME=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b2:22:75:8b:84:2f:d3:f7:a9:53:08:7a:e1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=84f55f608c4b6c3a5b23000327be380ec84ba436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:23:3b:d9:f1:6a:fa:59:1e:d5:92:ad:9a:
f3:cd:ae:dc:0f:c5:60:b3:3c:22:5c:e1:c1:c7:85:
5d:53:03:18:34:85:aa:55:ac:a1:5b:06:76:b0:b0:
b6:25:e4:ab:9e:c4:d3:07:e4:88:f0:d9:22:40:8f:
49:6a:2e:5c:85:c3:e3:c5:33:a3:fa:ad:46:25:da:
c2:bc:f7:73:dc:2e:10:d9:c1:8c:ed:19:14:04:06:
fe:19:6f:d9:42:f9:31:40:48:e3:41:60:96:e0:4a:
21:98:23:7c:c4:96:90:37:01:fd:83:04:ca:a8:a1:
f9:88:bf:1a:58:57:e9:f4:4c:3f:90:1c:34:2c:eb:
a4:80:cd:1b:26:ad:cf:04:f2:fd:08:5e:25:af:6e:
fc:83:d2:a6:4f:2a:a2:a1:f1:c6:09:72:85:c5:e7:
60:2c:9f:c1:e8:e2:ee:e0:8f:06:b3:f5:e6:0e:b9:
06:db:e0:fd:78:df:f2:62:02:8f:7d:c9:2a:ab:72:
d3:cc:5a:28:98:48:91:09:a9:32:b1:c5:98:9f:d5:
a2:ea:8d:d2:af:50:60:43:36:cc:53:12:8f:c5:38:
e3:a6:3d:dd:67:44:c8:6f:6d:d1:28:3a:9b:00:2f:
cd:96:b2:25:49:e3:93:0f:18:5d:92:4a:6e:76:61:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:5F:60:8C:4B:6C:3A:5B:23:00:03:27:BE:38:0E:C8:4B:A4:36
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:63:54:92:99:3f:9a:d3:ce:0c:a7:19:8e:69:d9:76:f5:
f9:0b:6c:4b:96:c1:cd:f1:ec:06:71:56:a6:51:cf:f1:2f:c2:
6b:8c:8d:33:83:63:0e:82:90:87:57:7a:3d:4e:25:47:53:dc:
81:02:76:81:07:00:ef:7a:fd:85:d0:f0:d1:1f:b3:61:9f:19:
6e:9b:9d:2f:08:83:a5:95:a2:ae:dd:e2:1e:81:28:d2:65:67:
f0:cb:1f:0c:bc:6a:01:d2:c8:b6:9a:4f:ae:17:ff:88:0e:8a:
a7:27:9e:59:61:eb:10:c3:49:8b:56:78:f2:bc:b0:7c:34:aa:
11:7d:98:ac:ec:33:2c:5b:95:03:46:8e:c8:5b:85:cd:29:d6:
7d:fb:5a:a9:88:b3:0d:e8:ed:5b:bd:dd:d3:7b:36:37:af:74:
35:2c:76:31:ae:9e:61:45:f5:be:68:52:88:fa:ce:78:85:7d:
68:ce:a1:1c:e0:aa:e6:b3:80:7a:e9:72:7e:4a:92:2b:a0:ab:
91:f0:a4:3c:84:cd:a3:25:db:f1:ef:59:c9:56:06:80:3b:db:
13:7e:5d:b8:ae:5b:17:cb:09:9d:ca:10:0a:77:99:60:02:b7:
80:f3:62:30:70:63:e6:71:9f:9b:50:d4:ce:d5:05:75:1f:d9:
90:96:cc:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOrIidYuEL9P3qVMIeuFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2
YTU2MTEwHhcNMjYwMzI1MjMwMDUxWhcNMjYwMzI2MjMwMDUxWjAzMTEwLwYDVQQD
Eyg4NGY1NWY2MDhjNGI2YzNhNWIyMzAwMDMyN2JlMzgwZWM4NGJhNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQjO9nxavpZHtWSrZrzza7cD8Vg
szwiXOHBx4VdUwMYNIWqVayhWwZ2sLC2JeSrnsTTB+SI8NkiQI9Jai5chcPjxTOj
+q1GJdrCvPdz3C4Q2cGM7RkUBAb+GW/ZQvkxQEjjQWCW4EohmCN8xJaQNwH9gwTK
qKH5iL8aWFfp9Ew/kBw0LOukgM0bJq3PBPL9CF4lr278g9KmTyqiofHGCXKFxedg
LJ/B6OLu4I8Gs/XmDrkG2+D9eN/yYgKPfckqq3LTzFoomEiRCakyscWYn9Wi6o3S
r1BgQzbMUxKPxTjjpj3dZ0TIb23RKDqbAC/NlrIlSeOTDxhdkkpudmG6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1X2CMS2w6WyMAAye+OA7IS6Q2MB8GA1UdIwQY
MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt
YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4
LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVxjVJKZ
P5rTzgynGY5p2Xb1+QtsS5bBzfHsBnFWplHP8S/Ca4yNM4NjDoKQh1d6PU4lR1Pc
gQJ2gQcA73r9hdDw0R+zYZ8ZbpudLwiDpZWirt3iHoEo0mVn8MsfDLxqAdLItppP
rhf/iA6KpyeeWWHrEMNJi1Z48rywfDSqEX2YrOwzLFuVA0aOyFuFzSnWfftaqYiz
DejtW73d03s2N690NSx2Ma6eYUX1vmhSiPrOeIV9aM6hHOCq5rOAeulyfkqSK6Cr
kfCkPITNoyXb8e9ZyVYGgDvbE35duK5bF8sJncoQCneZYAK3gPNiMHBj5nGfm1DU
ztUFdR/ZkJbMxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:07 2026 by rpki-client