Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: +8dYBpR4azo95gpjy7SVB8Y61CVYvq/JYc1Ie8L4f9s=
Subject key identifier: B9:9A:C2:5D:AB:83:34:6C:2E:2E:21:73:CC:B2:0A:33:EA:85:C5:28
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019D27DF6BBED7129953A07879C7F571BDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: DKBjo3YH0lNbiEKd0FJ3ISKBuWPP7o13CHxm9bQ2R8s=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6b:be:d7:12:99:53:a0:78:79:c7:f5:71:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=b99ac25dab83346c2e2e2173ccb20a33ea85c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:59:c3:aa:14:63:99:7d:11:80:2c:b9:8a:
bd:c1:1f:d0:df:e9:46:d0:35:4d:99:93:b3:e3:34:
de:1b:6c:62:da:b6:32:91:64:d0:4f:63:7d:62:5d:
be:3a:f5:4f:54:da:54:8d:e7:4e:b3:65:c4:3c:46:
c7:5d:b9:f6:78:e6:86:2a:a5:5c:ed:51:0a:b1:ab:
a1:e5:ba:28:ae:dc:1f:4a:2f:cc:20:71:20:1f:c6:
85:0b:10:63:a1:34:b0:34:a6:a5:5e:a2:27:07:31:
d6:3b:42:6e:fe:15:b1:60:76:ea:72:e1:5d:34:25:
1a:a1:21:56:f5:36:b3:ba:b1:70:94:ec:b6:c7:a5:
08:9f:a4:55:f3:da:cc:60:ab:72:eb:7c:f1:fb:6a:
b5:17:23:bc:c6:31:40:ef:6f:8a:19:31:b2:e2:bb:
dc:ac:78:ca:73:2d:97:47:7d:68:02:d3:26:0d:77:
70:86:c3:18:13:3d:6f:4c:90:4a:e4:3b:25:83:1d:
7e:f2:a8:c1:6a:ed:1d:1b:27:83:dd:70:d5:32:06:
9e:6e:7e:48:4b:7f:13:f9:a0:4d:f3:fb:cd:4f:f3:
2c:cb:3c:2f:cc:57:19:c6:40:25:8c:ac:80:a7:95:
9e:2e:e9:6a:8b:27:f0:ad:9b:a3:cc:1e:1d:a7:4a:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:C2:5D:AB:83:34:6C:2E:2E:21:73:CC:B2:0A:33:EA:85:C5:28
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:fe:7f:66:65:72:02:39:6d:f6:64:80:62:6b:8e:7d:d6:
aa:e2:be:fd:5a:0c:73:bb:cd:f4:20:ba:58:15:b2:df:ec:00:
cc:62:b5:7e:b9:81:68:f3:cb:6b:53:fc:bd:a9:32:41:16:f6:
f7:4b:9d:08:1b:e4:ed:6a:2e:9b:71:55:43:6e:4e:24:19:89:
74:e5:4d:46:3a:c1:4d:88:65:f6:fb:df:46:db:da:5c:a7:ca:
4e:d5:83:96:9c:3e:3a:be:77:55:af:e8:2e:ef:b0:dc:7e:5d:
a0:61:3c:22:df:90:3d:75:ec:31:9d:85:b5:e4:00:7f:f1:a2:
8c:9f:94:73:09:57:9c:72:8e:00:05:6d:f1:5d:fd:45:f0:6f:
b1:85:7f:15:28:50:88:e1:ed:fc:9e:8a:0b:64:0f:35:a9:3f:
76:69:ec:4d:b0:ad:ee:97:ee:95:8b:f3:83:6b:da:c4:82:c0:
56:15:b1:02:85:fd:9d:7c:94:e5:66:1b:43:f1:10:d9:b4:52:
8d:fa:50:b8:09:fa:31:d8:8b:08:7a:9f:c3:96:dd:cf:a3:94:
bd:af:37:07:43:a7:a4:ef:ab:8a:e9:31:b3:66:5a:7f:14:6d:
cb:ed:fb:38:3d:12:ba:ff:c1:3f:36:86:57:59:bd:0c:6c:8c:
73:6c:7e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32u+1xKZU6B4ecf1cb3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4
MzJkMGMwHhcNMjYwMzI2MDIwMDQ2WhcNMjYwMzI3MDIwMDQ2WjAzMTEwLwYDVQQD
EyhiOTlhYzI1ZGFiODMzNDZjMmUyZTIxNzNjY2IyMGEzM2VhODVjNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkidZw6oUY5l9EYAsuYq9wR/Q3+lG
0DVNmZOz4zTeG2xi2rYykWTQT2N9Yl2+OvVPVNpUjedOs2XEPEbHXbn2eOaGKqVc
7VEKsauh5boortwfSi/MIHEgH8aFCxBjoTSwNKalXqInBzHWO0Ju/hWxYHbqcuFd
NCUaoSFW9TazurFwlOy2x6UIn6RV89rMYKty63zx+2q1FyO8xjFA72+KGTGy4rvc
rHjKcy2XR31oAtMmDXdwhsMYEz1vTJBK5Dslgx1+8qjBau0dGyeD3XDVMgaebn5I
S38T+aBN8/vNT/MsyzwvzFcZxkAljKyAp5WeLulqiyfwrZujzB4dp0qf/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmawl2rgzRsLi4hc8yyCjPqhcUoMB8GA1UdIwQY
MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt
NWUwYWZlYzEzNmIxLzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx
LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5f+f2Zl
cgI5bfZkgGJrjn3WquK+/VoMc7vN9CC6WBWy3+wAzGK1frmBaPPLa1P8vakyQRb2
90udCBvk7Woum3FVQ25OJBmJdOVNRjrBTYhl9vvfRtvaXKfKTtWDlpw+Or53Va/o
Lu+w3H5doGE8It+QPXXsMZ2FteQAf/GijJ+UcwlXnHKOAAVt8V39RfBvsYV/FShQ
iOHt/J6KC2QPNak/dmnsTbCt7pfulYvzg2vaxILAVhWxAoX9nXyU5WYbQ/EQ2bRS
jfpQuAn6MdiLCHqfw5bdz6OUva83B0OnpO+riukxs2ZafxRty+37OD0Suv/BPzaG
V1m9DGyMc2x+Ig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:42 2026 by rpki-client