Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier: k+kvaBFa3e3vgXs1BjUnQM5G721X87Qt5gaXhocmnjc=
Subject key identifier: 2A:A2:38:7F:A1:1B:13:D5:2B:9B:E3:35:04:B6:35:F4:83:AA:DB:D4
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 019D2B85A3034E9B34296CD84F99B96248BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 19:01:11 +0000
Manifest this update: Thu 26 Mar 2026 19:01:11 +0000
Manifest next update: Fri 27 Mar 2026 19:01:11 +0000
Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: WI81Js3x5zINOMgY3p1RQz97EkQv3XXaMCIMmonWIeU=)
2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:a3:03:4e:9b:34:29:6c:d8:4f:99:b9:62:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Mar 26 19:01:11 2026 GMT
Not After : Mar 27 19:01:11 2026 GMT
Subject: CN=2aa2387fa11b13d52b9be33504b635f483aadbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:48:a3:2b:56:34:ec:74:5b:bb:91:d9:c8:
47:0e:67:5a:be:b2:c0:14:f8:e9:4b:f7:a8:11:7e:
db:9e:10:67:50:7a:f5:23:8d:e5:90:03:1b:f8:00:
a7:fb:89:66:55:1e:eb:a0:99:46:63:30:48:c3:10:
42:36:7d:28:ca:65:bd:20:99:e6:98:ef:b9:e0:52:
c2:b1:64:3f:3e:21:27:a9:14:fd:c0:39:39:73:71:
6e:b1:9b:26:91:a3:aa:29:f0:4d:d0:fe:7c:2d:77:
cb:07:dd:ef:0d:08:0a:d6:35:e0:81:df:e2:5a:d9:
f1:29:f1:cd:00:76:72:53:ff:57:7e:94:6d:20:88:
3b:6f:7f:a0:e3:c7:38:4c:07:a9:a8:d6:e6:e8:c5:
07:b1:b3:94:c6:98:50:de:4e:71:7d:e6:19:93:7f:
45:9e:42:f4:1f:22:ac:be:86:b8:20:8c:d6:3e:24:
76:c5:83:1b:eb:e0:1e:19:8b:82:3e:4c:25:7a:cf:
aa:14:35:48:14:da:2a:db:8a:97:b1:f9:ed:ed:2b:
9a:08:d8:41:6c:19:26:51:98:fe:4f:9a:dc:bb:2b:
f1:f1:bd:0c:3d:74:5f:6b:bf:38:f9:40:93:47:a9:
21:1c:ff:ad:00:17:18:fd:4e:43:7e:20:a6:85:fc:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:38:7F:A1:1B:13:D5:2B:9B:E3:35:04:B6:35:F4:83:AA:DB:D4
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:16:c4:f8:64:d7:71:aa:53:98:05:4f:db:ec:3c:d7:9b:
e0:98:35:ca:a2:7c:ca:ef:4c:72:9e:d8:be:90:d0:ed:5b:ef:
4f:f6:1f:02:3d:9f:14:70:2b:7c:b8:74:74:56:0f:2a:2a:46:
3b:4d:d6:54:79:f3:34:09:b4:35:52:e0:05:9c:01:6c:93:4d:
2b:02:b3:a8:98:d5:b3:4e:d1:8e:9a:96:31:b1:df:bf:43:b3:
a3:77:19:db:f4:2f:e1:d8:81:74:9b:09:2e:25:24:1b:6e:a9:
e3:e0:38:c0:d5:41:be:7a:84:28:43:57:bd:77:d2:d2:0a:62:
e4:e2:3d:3e:8a:1c:b9:57:f5:1f:38:ee:0b:c9:71:b0:d4:72:
ca:91:f1:de:38:ec:6a:84:7d:4b:a3:28:b5:78:3c:d2:54:a4:
33:70:11:c6:d7:f2:09:12:d5:86:ff:ce:9a:ae:82:76:ee:13:
1a:ec:0b:91:63:9b:67:45:cd:24:13:30:4f:d5:88:ea:38:e4:
d3:47:1f:d7:9f:18:1f:01:fe:56:2c:26:64:05:85:80:87:9a:
2b:1c:c4:e8:3a:02:a1:ad:14:6b:bf:c9:58:6d:70:bd:05:c4:
24:f5:6d:11:7a:42:87:ae:a8:30:94:66:12:e8:2a:aa:d2:77:
b0:86:37:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhaMDTps0KWzYT5m5Yki6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh
MzhmOWIwHhcNMjYwMzI2MTkwMTExWhcNMjYwMzI3MTkwMTExWjAzMTEwLwYDVQQD
EygyYWEyMzg3ZmExMWIxM2Q1MmI5YmUzMzUwNGI2MzVmNDgzYWFkYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxZIoytWNOx0W7uR2chHDmdavrLA
FPjpS/eoEX7bnhBnUHr1I43lkAMb+ACn+4lmVR7roJlGYzBIwxBCNn0oymW9IJnm
mO+54FLCsWQ/PiEnqRT9wDk5c3FusZsmkaOqKfBN0P58LXfLB93vDQgK1jXggd/i
WtnxKfHNAHZyU/9XfpRtIIg7b3+g48c4TAepqNbm6MUHsbOUxphQ3k5xfeYZk39F
nkL0HyKsvoa4IIzWPiR2xYMb6+AeGYuCPkwles+qFDVIFNoq24qXsfnt7SuaCNhB
bBkmUZj+T5rcuyvx8b0MPXRfa784+UCTR6khHP+tABcY/U5DfiCmhfzySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqiOH+hGxPVK5vjNQS2NfSDqtvUMB8GA1UdIwQY
MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt
OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx
LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdsWxPhk
13GqU5gFT9vsPNeb4Jg1yqJ8yu9Mcp7YvpDQ7VvvT/YfAj2fFHArfLh0dFYPKipG
O03WVHnzNAm0NVLgBZwBbJNNKwKzqJjVs07RjpqWMbHfv0Ozo3cZ2/Qv4diBdJsJ
LiUkG26p4+A4wNVBvnqEKENXvXfS0gpi5OI9PoocuVf1HzjuC8lxsNRyypHx3jjs
aoR9S6MotXg80lSkM3ARxtfyCRLVhv/Omq6Cdu4TGuwLkWObZ0XNJBMwT9WI6jjk
00cf158YHwH+ViwmZAWFgIeaKxzE6DoCoa0Ua7/JWG1wvQXEJPVtEXpCh66oMJRm
EugqqtJ3sIY3cg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:59:10 2026 by rpki-client