Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: y9V68imsvZ9LgCa3rpLzXIXvt2LSxXL6H+nd5i554Vg=
Subject key identifier: 37:6A:37:60:70:E2:BA:9E:7D:96:3F:FF:E4:9F:58:8C:38:12:7C:59
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019D341A537986CD8243E972CB6816899050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 095D
Signing time: Sat 28 Mar 2026 11:00:33 +0000
Manifest this update: Sat 28 Mar 2026 11:00:33 +0000
Manifest next update: Sun 29 Mar 2026 11:00:33 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: bJZhnI1q2ce9dVVgo2DW9N/nouUtpm8DZTKf/nJAl/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:53:79:86:cd:82:43:e9:72:cb:68:16:89:90:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Mar 28 11:00:33 2026 GMT
Not After : Mar 29 11:00:33 2026 GMT
Subject: CN=376a376070e2ba9e7d963fffe49f588c38127c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:2c:7c:57:67:d6:8e:e0:40:28:dd:d8:b7:
e1:75:1d:6b:7f:7b:ce:85:ba:35:dc:da:23:ca:15:
f6:23:8a:ca:4f:48:5b:3e:f2:85:61:a9:f0:bf:ea:
b4:84:93:a8:01:a2:fb:41:71:76:6c:4e:1e:bb:35:
d4:2f:d4:93:be:d4:3e:fc:c0:c2:80:29:46:f0:cc:
b9:bf:67:b8:a0:12:8e:00:1c:38:5d:7b:e4:4c:50:
60:f8:80:3e:27:b4:b2:9e:5d:ce:5f:d3:79:1e:64:
c6:ce:40:2f:d5:b9:a8:e5:13:d7:be:e1:b2:44:da:
ff:66:7a:3c:ee:c8:09:ca:70:44:11:d4:63:e5:e5:
b3:f4:dc:8a:3e:1e:2d:90:09:31:4e:d0:a8:99:da:
15:df:b4:71:27:88:81:30:7a:52:3d:06:91:9c:b3:
b0:cb:24:c0:b2:ed:c3:17:19:cd:9d:06:4d:a3:58:
4b:fd:90:92:e7:17:6d:78:d9:f6:3d:16:d3:f1:f4:
da:cf:18:5f:4b:4b:2c:dd:b3:21:6d:f4:14:cb:45:
a9:1c:5a:96:e1:9a:a4:21:4a:45:60:c1:96:ec:19:
f2:5b:a2:53:99:5b:cc:66:16:98:a0:71:c2:16:48:
7d:3f:77:f9:95:c0:d5:a1:e8:18:bd:ba:65:7a:ed:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:37:60:70:E2:BA:9E:7D:96:3F:FF:E4:9F:58:8C:38:12:7C:59
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:23:c2:20:55:18:ab:b4:fd:32:84:8b:9f:54:ba:65:97:
f1:67:26:9b:d6:7b:06:53:75:e6:a1:97:dc:7a:69:b8:fc:09:
ef:61:1c:ee:55:12:50:5e:c1:f4:ba:bf:fe:2b:6e:5a:80:5c:
9f:c7:cc:d1:72:a5:85:8d:24:51:4d:1a:06:98:39:5e:95:10:
c8:63:13:a6:bf:c2:0c:17:b4:9c:8e:41:f3:6a:c2:da:ea:b2:
97:86:5d:58:10:d2:d3:a1:d9:d6:07:86:f8:95:ff:d0:00:e8:
e2:af:cc:7f:20:e3:8b:3c:4f:2e:0b:a4:1d:68:6d:1d:9a:67:
0e:ca:87:fe:5d:da:b1:7e:d9:84:31:d2:f2:0f:62:0a:9c:0a:
7e:50:39:55:3e:8e:da:65:d4:a1:cc:64:75:ae:45:5b:9a:83:
77:28:ca:8c:78:9d:be:3c:a7:d1:64:87:43:0c:88:e3:6b:e5:
44:f9:87:55:f0:26:4b:7b:61:68:69:cc:88:b8:88:e7:e4:43:
d1:50:b8:62:87:a8:79:79:aa:08:5c:66:f8:40:7e:54:a0:f9:
85:ba:92:7e:5d:86:35:a8:be:25:e0:7e:0c:57:bd:85:28:ad:
01:94:47:48:75:77:7c:33:e5:88:fd:fd:2d:1b:f4:b6:43:f0:
36:64:c2:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00GlN5hs2CQ+lyy2gWiZBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl
OWJmNTAwHhcNMjYwMzI4MTEwMDMzWhcNMjYwMzI5MTEwMDMzWjAzMTEwLwYDVQQD
EygzNzZhMzc2MDcwZTJiYTllN2Q5NjNmZmZlNDlmNTg4YzM4MTI3YzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37YsfFdn1o7gQCjd2LfhdR1rf3vO
hbo13NojyhX2I4rKT0hbPvKFYanwv+q0hJOoAaL7QXF2bE4euzXUL9STvtQ+/MDC
gClG8My5v2e4oBKOABw4XXvkTFBg+IA+J7Synl3OX9N5HmTGzkAv1bmo5RPXvuGy
RNr/Zno87sgJynBEEdRj5eWz9NyKPh4tkAkxTtComdoV37RxJ4iBMHpSPQaRnLOw
yyTAsu3DFxnNnQZNo1hL/ZCS5xdteNn2PRbT8fTazxhfS0ss3bMhbfQUy0WpHFqW
4ZqkIUpFYMGW7BnyW6JTmVvMZhaYoHHCFkh9P3f5lcDVoegYvbpleu1+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdqN2Bw4rqefZY//+SfWIw4EnxZMB8GA1UdIwQY
MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt
MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl
LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaMjwiBV
GKu0/TKEi59UumWX8Wcmm9Z7BlN15qGX3HppuPwJ72Ec7lUSUF7B9Lq//ituWoBc
n8fM0XKlhY0kUU0aBpg5XpUQyGMTpr/CDBe0nI5B82rC2uqyl4ZdWBDS06HZ1geG
+JX/0ADo4q/MfyDjizxPLgukHWhtHZpnDsqH/l3asX7ZhDHS8g9iCpwKflA5VT6O
2mXUocxkda5FW5qDdyjKjHidvjyn0WSHQwyI42vlRPmHVfAmS3thaGnMiLiI5+RD
0VC4YoeoeXmqCFxm+EB+VKD5hbqSfl2GNai+JeB+DFe9hSitAZRHSHV3fDPliP39
LRv0tkPwNmTCnQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:06 2026 by rpki-client