Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
File: dHnfUKMVAp6AqhlHr-EtselIYos.mft (raw, json)
Hash identifier: vHubWKh05ceVa73uJdEQ34EUpG+8KaAgazqQ4/0kdSw=
Subject key identifier: FC:06:CE:96:35:89:10:CC:B8:D5:2E:0C:90:34:E7:23:87:4F:05:86
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 019D26283BCCFF1B5345425208F796E6297D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
Manifest number: 1189
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: BXcJyeoWgagdd3V31mwsVCcQbpE.roa (hash: yQn1/FtH4uOfCzrJXuLEmscMEDI0/UDWaQ5VY5MFs4U=)
2: dHnfUKMVAp6AqhlHr-EtselIYos.crl (hash: FXDu1Kd1qogm0N7GuF7m1gCm8PIORYhhaDF71aTx1I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3b:cc:ff:1b:53:45:42:52:08:f7:96:e6:29:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=fc06ce96358910ccb8d52e0c9034e723874f0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:fd:f0:a4:42:fe:ba:af:3a:ae:e2:0e:c0:
cb:d9:d8:fa:b6:8f:d6:eb:c9:d2:5a:bc:ed:ce:7d:
2b:e0:84:40:29:18:9e:2b:6c:84:52:41:ba:a6:f9:
f8:16:2a:1c:3e:ee:07:c5:60:17:9c:72:38:6c:98:
8e:2b:b2:b4:3b:d2:fa:c3:c1:de:c3:d8:b9:e2:ef:
30:aa:c5:bd:1e:a7:b6:9c:67:57:83:59:3b:20:51:
b5:93:43:97:da:42:1e:24:30:04:92:b1:d7:d8:0c:
b4:b1:80:e9:f7:4f:6c:91:20:5b:8f:a2:03:90:5e:
a5:86:4b:6a:a2:99:50:c8:c6:fc:78:89:90:01:de:
11:b2:db:26:c1:b5:86:99:91:9b:03:96:5e:89:03:
e8:cf:26:9c:b0:58:45:09:89:68:ca:b4:bf:02:90:
ae:04:ae:37:7a:8e:c7:34:01:f3:62:cc:13:ad:21:
ce:f2:26:e6:05:02:1b:05:81:ec:3f:f0:37:9e:cf:
67:19:af:07:78:07:30:ef:3f:6d:b3:4d:23:95:79:
a8:5f:e6:50:96:64:09:f1:9d:1e:33:12:1a:de:4a:
9e:96:2f:62:40:0f:43:26:68:05:d9:dd:6c:b1:c9:
a8:73:24:56:ea:4e:a9:70:96:72:13:3d:4e:69:36:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:CE:96:35:89:10:CC:B8:D5:2E:0C:90:34:E7:23:87:4F:05:86
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:27:47:0c:32:af:58:a0:65:24:6f:e0:bc:20:ec:7a:06:
76:cb:7e:4d:2e:c1:1f:0e:82:f0:0e:a1:a4:aa:c9:fd:12:81:
24:f2:8c:e3:dc:cd:ee:e6:97:70:90:fe:39:77:a1:92:24:8a:
25:24:06:35:ef:5b:37:58:d9:8c:13:fb:96:7b:26:c8:ab:ea:
8b:e6:4a:6f:7a:d5:a4:37:50:11:a3:ff:7a:ad:47:b8:7d:7d:
37:88:ec:38:f4:1e:6a:41:f7:1b:71:27:38:6f:d0:f9:bb:87:
5f:e6:4e:f0:cf:f0:cc:89:2b:2f:34:87:b0:24:a6:1e:e1:13:
2e:33:30:80:d3:10:8e:ff:c0:44:0c:f0:61:2b:f1:cc:77:15:
9e:f1:ea:b6:8c:fa:c8:32:34:17:30:93:75:92:3b:77:3e:ba:
58:07:d5:ff:33:5a:6e:ba:ee:73:df:4d:8c:27:16:8a:f1:68:
f2:6d:f9:b2:2f:c9:72:e9:0d:4f:85:05:29:d0:5e:62:77:e9:
c8:8f:4f:70:ca:e9:30:40:04:d7:df:f4:1e:a9:28:d2:28:5c:
4f:8c:a3:9e:e7:75:0b:85:d1:a9:e2:82:07:6e:93:51:9f:e5:
92:5a:4c:34:22:85:13:14:99:8e:0b:88:18:15:6e:c1:b3:cf:
ac:ad:f3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDvM/xtTRUJSCPeW5il9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzlkZjUwYTMxNTAyOWU4MGFhMTk0N2FmZTEyZGIxZTk0
ODYyOGIwHhcNMjYwMzI1MTgwMTA0WhcNMjYwMzI2MTgwMTA0WjAzMTEwLwYDVQQD
EyhmYzA2Y2U5NjM1ODkxMGNjYjhkNTJlMGM5MDM0ZTcyMzg3NGYwNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0an98KRC/rqvOq7iDsDL2dj6to/W
68nSWrztzn0r4IRAKRieK2yEUkG6pvn4FiocPu4HxWAXnHI4bJiOK7K0O9L6w8He
w9i54u8wqsW9Hqe2nGdXg1k7IFG1k0OX2kIeJDAEkrHX2Ay0sYDp909skSBbj6ID
kF6lhktqoplQyMb8eImQAd4RstsmwbWGmZGbA5ZeiQPozyacsFhFCYloyrS/ApCu
BK43eo7HNAHzYswTrSHO8ibmBQIbBYHsP/A3ns9nGa8HeAcw7z9ts00jlXmoX+ZQ
lmQJ8Z0eMxIa3kqeli9iQA9DJmgF2d1sscmocyRW6k6pcJZyEz1OaTaAPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwGzpY1iRDMuNUuDJA05yOHTwWGMB8GA1UdIwQY
MBaAFHR531CjFQKegKoZR6/hLbHpSGKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEt
OTdiYTM3MzQ1YWE4LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEtOTdiYTM3MzQ1YWE4
LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZEnRwwy
r1igZSRv4Lwg7HoGdst+TS7BHw6C8A6hpKrJ/RKBJPKM49zN7uaXcJD+OXehkiSK
JSQGNe9bN1jZjBP7lnsmyKvqi+ZKb3rVpDdQEaP/eq1HuH19N4jsOPQeakH3G3En
OG/Q+buHX+ZO8M/wzIkrLzSHsCSmHuETLjMwgNMQjv/ARAzwYSvxzHcVnvHqtoz6
yDI0FzCTdZI7dz66WAfV/zNabrruc99NjCcWivFo8m35si/JcukNT4UFKdBeYnfp
yI9PcMrpMEAE19/0Hqko0ihcT4yjnud1C4XRqeKCB26TUZ/lklpMNCKFExSZjguI
GBVuwbPPrK3zcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:13 2026 by rpki-client