Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: Dd8tANM2mNBL/bFWEHzwwpwEy6tRe3kCuEqDHNUlzFU=
Subject key identifier: DB:3C:8D:C6:AE:66:FC:22:12:3C:4D:88:09:4D:8F:22:95:E9:3D:41
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 019CADFEC17413C34BEFE1D1AB7262FEAA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 052C
Signing time: Mon 02 Mar 2026 10:01:19 +0000
Manifest this update: Mon 02 Mar 2026 10:01:19 +0000
Manifest next update: Tue 03 Mar 2026 10:01:19 +0000
Files and hashes: 1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: m1dlJqzmEV9lnvc7Ks5hSmZ1bxw04eRpFL2PUaALndw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c1:74:13:c3:4b:ef:e1:d1:ab:72:62:fe:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Mar 2 10:01:19 2026 GMT
Not After : Mar 3 10:01:19 2026 GMT
Subject: CN=db3c8dc6ae66fc22123c4d88094d8f2295e93d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:21:e2:c8:40:e4:47:3b:7d:ef:bc:6f:6d:
b4:cf:4c:55:6a:f4:41:d5:fa:0c:9f:f3:85:2d:80:
1c:a6:53:fa:76:7d:85:4e:33:c4:64:9c:9f:e0:58:
d8:61:6b:71:36:4d:c2:46:64:25:60:41:10:8f:97:
94:49:bd:44:43:37:fe:26:f5:bc:86:df:38:56:e0:
60:84:41:c7:4b:a6:f0:23:fb:2e:79:7d:8b:53:9c:
e4:f8:49:47:7e:02:77:28:c0:e7:49:93:64:cb:7e:
9f:10:bf:c5:26:cb:f7:2d:a8:12:32:d8:91:ab:52:
14:a8:00:a2:76:e3:ff:22:18:b4:81:4c:5f:b7:c4:
8e:ea:a5:59:a1:35:72:b1:56:8f:32:16:80:88:67:
15:b5:ed:4d:e2:0a:82:0a:2c:bb:48:18:04:11:70:
4f:47:aa:60:e7:a1:2e:2a:64:b6:b5:b0:e2:36:a2:
17:5a:e8:48:4a:a2:52:c1:20:25:b8:4a:24:85:ee:
44:8c:58:50:e6:ad:1b:5c:da:e0:ac:67:b2:66:5d:
76:6e:d9:1e:94:e7:fd:9f:51:f2:ea:10:7a:f0:b3:
65:85:17:41:66:12:98:4a:00:b4:46:ea:3d:b8:50:
f4:e2:b2:19:b2:03:cc:bf:a7:cd:f5:7d:a2:1a:da:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3C:8D:C6:AE:66:FC:22:12:3C:4D:88:09:4D:8F:22:95:E9:3D:41
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:30:d2:b1:2a:4e:52:70:0d:45:9e:a1:63:71:61:a2:17:
88:5a:52:f4:92:6a:57:88:77:5c:bc:b7:ca:41:18:6e:04:16:
86:3e:ed:7c:87:d5:66:d0:21:ca:27:36:2b:8c:a1:8d:86:ba:
49:60:35:6a:57:6c:22:a5:e0:40:dd:04:4a:56:46:be:56:2b:
77:58:3b:64:7c:1a:bc:1b:38:d4:6d:9e:78:75:85:23:91:51:
c1:17:6c:6d:7a:11:35:b6:f8:c3:77:db:d4:48:c1:69:4d:d0:
44:47:3d:e8:4c:1c:02:12:4b:0f:cd:ad:4f:2e:49:27:f6:64:
f7:1c:52:a3:e2:7c:62:f2:e9:1b:d1:5c:bf:fb:79:50:56:34:
9b:df:51:6c:33:c5:a2:37:dc:c2:a1:19:19:fa:d3:7d:83:47:
cc:02:f7:9e:da:25:ab:1f:84:24:94:aa:0d:07:d9:0e:31:46:
48:6b:c0:29:8b:81:4f:70:00:fc:c3:bd:15:94:ad:87:a0:aa:
31:11:36:f1:f4:b4:29:34:4a:17:3f:74:51:14:fa:2f:85:ac:
dd:97:5d:64:1b:2f:20:63:62:6a:72:47:ca:96:15:5b:24:3a:
55:12:d1:aa:b1:46:db:f7:4d:11:40:52:82:8a:1f:02:f3:9a:
c6:68:2d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/sF0E8NL7+HRq3Ji/qoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2
MTZlM2IwHhcNMjYwMzAyMTAwMTE5WhcNMjYwMzAzMTAwMTE5WjAzMTEwLwYDVQQD
EyhkYjNjOGRjNmFlNjZmYzIyMTIzYzRkODgwOTRkOGYyMjk1ZTkzZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm8h4shA5Ec7fe+8b220z0xVavRB
1foMn/OFLYAcplP6dn2FTjPEZJyf4FjYYWtxNk3CRmQlYEEQj5eUSb1EQzf+JvW8
ht84VuBghEHHS6bwI/sueX2LU5zk+ElHfgJ3KMDnSZNky36fEL/FJsv3LagSMtiR
q1IUqACiduP/Ihi0gUxft8SO6qVZoTVysVaPMhaAiGcVte1N4gqCCiy7SBgEEXBP
R6pg56EuKmS2tbDiNqIXWuhISqJSwSAluEokhe5EjFhQ5q0bXNrgrGeyZl12btke
lOf9n1Hy6hB68LNlhRdBZhKYSgC0Ruo9uFD04rIZsgPMv6fN9X2iGtru2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs8jcauZvwiEjxNiAlNjyKV6T1BMB8GA1UdIwQY
MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt
Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl
LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxkw0rEq
TlJwDUWeoWNxYaIXiFpS9JJqV4h3XLy3ykEYbgQWhj7tfIfVZtAhyic2K4yhjYa6
SWA1aldsIqXgQN0ESlZGvlYrd1g7ZHwavBs41G2eeHWFI5FRwRdsbXoRNbb4w3fb
1EjBaU3QREc96EwcAhJLD82tTy5JJ/Zk9xxSo+J8YvLpG9Fcv/t5UFY0m99RbDPF
ojfcwqEZGfrTfYNHzAL3ntolqx+EJJSqDQfZDjFGSGvAKYuBT3AA/MO9FZSth6Cq
MRE28fS0KTRKFz90URT6L4Ws3ZddZBsvIGNianJHypYVWyQ6VRLRqrFG2/dNEUBS
goofAvOaxmgtyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:34 2026 by rpki-client