Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier: aivSxZy9H0mAIyRUKyXKiN0iN6Agv3HGVNyXIeUbQxo=
Subject key identifier: DE:57:47:E6:2B:A1:46:EA:13:76:46:6E:B4:7A:E4:00:F7:06:06:95
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial: 019D28BB8415AE5937D40277709B6B460D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: IjJLAumVqZms6Q6t1sUNu9hcdcU.roa (hash: FiezcugxBkSJwlJY68mGDzdaBaGe4t/V3htWiCfxtgw=)
2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: oeNaErwkuhEz5zqioccLnWtKS6PomkJPP6xjvW6x1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:84:15:ae:59:37:d4:02:77:70:9b:6b:46:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=de5747e62ba146ea1376466eb47ae400f7060695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:84:d4:ac:4c:4b:63:b4:80:45:bc:fb:ae:
ab:8c:73:8d:5c:e2:c8:e2:75:9a:93:b2:35:b9:f2:
81:d5:66:bc:82:1a:1a:53:92:71:04:4e:89:3d:67:
5f:46:61:f6:aa:6d:59:92:59:97:6f:cd:6f:48:bf:
0d:cf:15:e4:59:eb:15:3a:82:3b:ec:55:5e:da:03:
24:47:7e:9d:26:0b:4a:3e:c9:c9:2d:72:6c:da:9e:
2a:e6:f2:ae:b7:5f:6f:2e:3a:58:0a:d8:6c:38:d0:
15:d2:22:b6:0d:29:79:25:75:f0:10:be:14:da:60:
ab:4c:c2:3a:54:e6:a1:a5:22:3a:d8:fa:1b:92:4e:
99:8f:ec:28:dd:c8:95:92:92:c8:5f:09:6f:20:bb:
69:47:7c:fd:d8:a8:00:1c:09:c0:2f:a6:4a:78:dd:
a9:a0:ee:80:e2:22:b5:2c:68:a0:91:f6:72:b6:02:
b9:df:5e:c9:14:18:79:3c:f4:6b:95:21:a3:70:7f:
1f:59:6e:0d:08:85:98:42:d9:d0:7d:54:4b:13:8c:
0b:74:c6:7c:4c:e3:e3:8d:29:a9:fb:dd:aa:a6:84:
d4:f1:f0:f4:a9:5e:66:b7:a3:c0:d5:d4:69:ec:23:
0e:4d:02:9c:d5:2d:6d:fe:57:f0:11:3a:b6:7c:d0:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:47:E6:2B:A1:46:EA:13:76:46:6E:B4:7A:E4:00:F7:06:06:95
X509v3 Authority Key Identifier:
keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:59:cc:28:a7:b1:0a:4b:ca:c0:6c:22:68:20:95:ba:64:12:
5f:d3:52:ad:e2:9f:e1:77:36:33:37:fe:e2:a8:23:6f:1f:7b:
aa:4c:70:8d:3e:bc:6c:22:33:d7:f0:a7:7d:31:a2:77:ff:ab:
a8:a4:96:47:54:18:31:fe:4e:5e:bc:86:7d:ec:51:80:42:1e:
bf:a2:ba:62:18:09:3c:51:4a:82:f0:e8:d1:8f:b6:a8:d7:ed:
d8:db:54:c2:59:dd:a2:5a:c2:2c:a7:da:ea:86:48:a9:6b:e2:
16:d8:00:4e:39:84:7d:98:c8:c8:81:51:80:a9:34:ef:66:41:
42:44:b8:ba:a0:18:ab:6c:c1:dd:a6:cd:a3:7f:b2:f2:20:b3:
3e:9a:c0:27:fa:63:d7:0f:86:ad:fe:7b:1d:d6:00:62:20:ea:
5f:5f:30:1f:bc:e2:31:13:27:9a:f3:bc:e1:56:a7:ac:40:cb:
63:c1:b5:79:fb:45:e2:3b:a7:39:d1:53:36:63:40:49:9f:c5:
b8:2b:75:3b:f6:a7:3d:d2:e4:7c:7f:c4:88:fc:35:73:17:d6:
a7:b2:9a:9c:62:26:85:25:a6:0b:04:12:3c:69:ee:4c:ee:bb:
65:83:29:53:52:9b:bf:8e:fc:61:aa:99:96:b6:f6:a6:ee:5d:
5f:5d:52:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4QVrlk31AJ3cJtrRg07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZmIzYTZiN2ZjMjhlODY3NGU2MTFjYjA5ODA3NmYwZTRj
NTU3YzIwHhcNMjYwMzI2MDYwMTEwWhcNMjYwMzI3MDYwMTEwWjAzMTEwLwYDVQQD
EyhkZTU3NDdlNjJiYTE0NmVhMTM3NjQ2NmViNDdhZTQwMGY3MDYwNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP+E1KxMS2O0gEW8+66rjHONXOLI
4nWak7I1ufKB1Wa8ghoaU5JxBE6JPWdfRmH2qm1ZklmXb81vSL8NzxXkWesVOoI7
7FVe2gMkR36dJgtKPsnJLXJs2p4q5vKut19vLjpYCthsONAV0iK2DSl5JXXwEL4U
2mCrTMI6VOahpSI62Pobkk6Zj+wo3ciVkpLIXwlvILtpR3z92KgAHAnAL6ZKeN2p
oO6A4iK1LGigkfZytgK5317JFBh5PPRrlSGjcH8fWW4NCIWYQtnQfVRLE4wLdMZ8
TOPjjSmp+92qpoTU8fD0qV5mt6PA1dRp7CMOTQKc1S1t/lfwETq2fNDyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5XR+YroUbqE3ZGbrR65AD3BgaVMB8GA1UdIwQY
MBaAFHT7Omt/wo6GdOYRywmAdvDkxVfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAt
NzgyYzc4MGU3YzFjLzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAtNzgyYzc4MGU3YzFj
LzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalnMKKex
CkvKwGwiaCCVumQSX9NSreKf4Xc2Mzf+4qgjbx97qkxwjT68bCIz1/CnfTGid/+r
qKSWR1QYMf5OXryGfexRgEIev6K6YhgJPFFKgvDo0Y+2qNft2NtUwlndolrCLKfa
6oZIqWviFtgATjmEfZjIyIFRgKk072ZBQkS4uqAYq2zB3abNo3+y8iCzPprAJ/pj
1w+Grf57HdYAYiDqX18wH7ziMRMnmvO84VanrEDLY8G1eftF4junOdFTNmNASZ/F
uCt1O/anPdLkfH/EiPw1cxfWp7KanGImhSWmCwQSPGnuTO67ZYMpU1Kbv478YaqZ
lrb2pu5dX11STQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:24 2026 by rpki-client