Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: vW+WqHWaBMyytK1vZfvtLJ01lSPNgaRrxZhZSgO1DB0=
Subject key identifier: 50:67:24:E2:CF:29:45:17:05:A9:B6:45:EB:9C:63:71:CD:DA:E2:BD
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019D26CCFC929B25A9C8F2160B0FE8AC8F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0579
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: DDQ6AXWlU1FCtLZuFWq2Vj0sH8Q7DnWyYkQwfNJCeVA=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fc:92:9b:25:a9:c8:f2:16:0b:0f:e8:ac:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=506724e2cf29451705a9b645eb9c6371cddae2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:14:e4:3e:0f:c1:0c:a7:fc:7f:98:d0:fa:
e0:99:d0:c5:25:20:d3:ee:7a:b5:fe:ce:f0:f6:ff:
4a:fe:0e:21:bf:8c:de:b9:e0:46:d5:b1:a7:7f:dc:
4a:ad:c8:4f:87:af:b3:57:a1:e3:e4:e2:23:d8:90:
b0:76:4b:ca:80:38:69:34:03:f6:9e:e3:d9:90:cf:
99:c8:9d:0f:60:65:92:08:56:c1:2f:7f:55:e6:5b:
c8:e8:44:bc:71:4e:dc:1c:d1:99:b6:34:40:be:8f:
af:5e:0e:92:e9:db:36:b9:e1:a4:15:b0:1e:0b:29:
04:98:59:fb:d8:ed:77:ae:c5:1d:f6:c2:72:5e:36:
d9:9c:e9:0d:f8:09:29:2d:3b:48:9a:44:15:6c:e9:
ca:48:c9:0c:cc:19:5e:e0:4b:8e:fd:f6:c0:d4:e4:
f6:f1:83:00:5c:24:50:21:62:0d:fc:06:86:22:8b:
c4:57:51:95:a5:2b:f1:bd:a4:b4:8b:52:85:a4:c9:
96:c4:4a:94:f6:60:f2:8b:d2:d5:ed:90:0d:c9:4b:
95:69:9d:37:72:cf:01:79:6e:41:b4:25:3e:42:56:
29:75:06:33:d2:08:64:dc:16:dc:25:ad:19:ec:5d:
bf:1f:40:5a:99:09:d5:47:9a:fb:91:13:11:00:19:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:24:E2:CF:29:45:17:05:A9:B6:45:EB:9C:63:71:CD:DA:E2:BD
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:e6:6d:9c:d3:71:ba:ce:ac:e9:1b:75:af:af:04:f2:48:
03:4b:69:2d:eb:44:e2:ee:6c:ef:1d:01:d6:77:7f:8f:d5:31:
f5:48:3e:86:39:b4:7f:6e:98:c3:78:77:68:5c:56:40:04:e8:
1b:a8:35:aa:47:e8:29:3d:3d:50:ff:85:ab:5c:7d:7f:7a:01:
ae:57:0f:89:d1:16:3b:8b:cf:cd:0a:ed:5b:ec:6d:c4:60:b8:
71:fe:48:22:b0:81:bd:a5:c9:29:21:11:e2:a1:91:08:7b:de:
7f:bc:97:d7:0d:0d:f8:9b:95:0a:80:05:3b:30:49:8d:b2:ca:
34:bd:32:1a:7e:eb:27:67:c5:78:52:44:77:d8:00:95:f4:2b:
7f:5d:e9:46:c0:f6:03:e6:53:cb:be:ab:ca:c5:ca:1b:a1:36:
aa:22:d3:74:97:69:34:c7:7c:5b:cf:dd:b4:6f:2a:08:5d:36:
cb:31:7c:b6:13:8b:f7:f2:14:bf:d9:85:0e:e7:e4:cd:ed:87:
74:d7:ca:05:96:b5:6b:29:58:b5:21:6b:8b:a3:6e:1a:1e:8e:
18:ca:2c:70:a2:17:b4:1b:d9:c7:4d:3d:ce:80:7d:55:58:91:
2b:57:b9:e5:c0:84:c1:f9:3b:8e:bd:c3:6a:52:15:80:2c:05:
fc:4c:30:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPySmyWpyPIWCw/orI8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjYwMzI1MjEwMTAxWhcNMjYwMzI2MjEwMTAxWjAzMTEwLwYDVQQD
Eyg1MDY3MjRlMmNmMjk0NTE3MDVhOWI2NDVlYjljNjM3MWNkZGFlMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvEU5D4PwQyn/H+Y0PrgmdDFJSDT
7nq1/s7w9v9K/g4hv4zeueBG1bGnf9xKrchPh6+zV6Hj5OIj2JCwdkvKgDhpNAP2
nuPZkM+ZyJ0PYGWSCFbBL39V5lvI6ES8cU7cHNGZtjRAvo+vXg6S6ds2ueGkFbAe
CykEmFn72O13rsUd9sJyXjbZnOkN+AkpLTtImkQVbOnKSMkMzBle4EuO/fbA1OT2
8YMAXCRQIWIN/AaGIovEV1GVpSvxvaS0i1KFpMmWxEqU9mDyi9LV7ZANyUuVaZ03
cs8BeW5BtCU+QlYpdQYz0ghk3BbcJa0Z7F2/H0BamQnVR5r7kRMRABnkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBnJOLPKUUXBam2ReucY3HN2uK9MB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsXmbZzT
cbrOrOkbda+vBPJIA0tpLetE4u5s7x0B1nd/j9Ux9Ug+hjm0f26Yw3h3aFxWQATo
G6g1qkfoKT09UP+Fq1x9f3oBrlcPidEWO4vPzQrtW+xtxGC4cf5IIrCBvaXJKSER
4qGRCHvef7yX1w0N+JuVCoAFOzBJjbLKNL0yGn7rJ2fFeFJEd9gAlfQrf13pRsD2
A+ZTy76rysXKG6E2qiLTdJdpNMd8W8/dtG8qCF02yzF8thOL9/IUv9mFDufkze2H
dNfKBZa1aylYtSFri6NuGh6OGMoscKIXtBvZx009zoB9VViRK1e55cCEwfk7jr3D
alIVgCwF/EwwLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:01 2026 by rpki-client