Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: mYi62TZL00s4V/n4oB9fZWbKqx2HwvEV6IUg/X60f5c=
Subject key identifier: 03:EE:CB:71:48:BF:73:D2:B8:D7:19:27:9C:37:9E:B3:7F:7D:2A:98
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019CAB6AEDC8242E8F931936C56453263650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0EE2
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa (hash: y5H8XVjLD/jKC2BEOIJM9gDS13dnO296qUWYlA59798=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: ELbJPJG8niP6/JtSHY124zeE87yy+GlUfvVcUELY2s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ed:c8:24:2e:8f:93:19:36:c5:64:53:26:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=03eecb7148bf73d2b8d719279c379eb37f7d2a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:fb:80:5d:a7:d8:09:7f:bc:e9:44:bd:f2:
5f:50:5f:25:79:cb:53:23:34:d5:ab:cc:eb:ae:c0:
c0:51:d7:77:d8:4c:97:c1:58:d1:90:1d:69:a2:e1:
cc:2f:d7:e3:f2:c6:ad:9e:c5:5c:de:62:de:0d:65:
23:14:42:6c:71:57:28:51:73:27:fc:35:bc:1e:10:
d1:7a:26:bc:b6:2b:6b:35:1c:0e:c1:11:8e:d7:e9:
5a:88:9c:dd:fd:e0:5d:a9:50:a7:c9:ab:e5:c9:5e:
c6:7d:4f:82:91:c6:b4:d3:30:2c:1c:9d:55:32:b1:
e9:8c:80:b7:8d:4e:a9:b5:39:f6:ec:19:7c:2f:25:
e6:d7:52:72:5c:db:e9:63:c5:2c:d7:ce:1a:ce:89:
02:27:f7:a7:23:3d:ae:8c:1b:c9:48:cb:a6:4d:62:
50:c7:af:50:29:8e:2d:fc:08:84:a6:07:8b:ef:ac:
87:e9:42:0a:ee:f7:d3:a4:fa:5d:b4:9b:71:86:bb:
f9:d9:d4:02:a2:e5:a9:1d:3a:83:53:1d:65:30:6c:
56:dd:bf:6b:71:55:f3:d9:d0:cb:1b:ab:4f:6a:57:
f3:92:59:cc:ad:ca:df:8a:48:a7:f2:58:e0:85:e0:
d1:83:29:5f:8f:fa:12:cd:59:7a:4d:b5:ef:c5:25:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:CB:71:48:BF:73:D2:B8:D7:19:27:9C:37:9E:B3:7F:7D:2A:98
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:99:d9:1c:40:22:d7:7b:f3:b7:a7:37:9b:7e:1e:d6:d4:64:
91:85:0b:b5:77:ff:f6:f7:c0:00:03:a2:f6:28:54:7a:8c:5f:
05:58:d9:d1:22:9e:37:3e:69:58:81:ac:5a:2f:81:ae:22:f8:
bb:2e:3b:d4:f8:81:32:8e:c5:a6:76:12:da:50:54:03:16:0f:
1d:97:5b:58:3d:95:4f:64:54:7e:d5:63:e2:cc:20:11:fc:7f:
40:c6:7e:12:b7:10:35:0d:3b:73:fc:9c:96:84:ad:3e:3e:04:
e8:fb:56:8c:77:6c:93:ed:c7:24:f1:79:ab:4d:bd:11:46:97:
42:a4:9c:47:08:4d:4f:aa:5e:4f:b0:06:f2:d0:e5:bb:47:b5:
a3:82:9f:f5:3c:a3:a2:d1:de:00:cb:0c:0e:d5:88:2e:50:81:
7e:9a:9c:74:79:6f:26:07:eb:54:a2:e5:04:f3:8c:58:74:51:
d8:e5:d1:a2:2c:43:55:29:a5:1c:c0:93:5e:5d:1f:9a:74:a2:
b3:57:27:00:aa:e5:5f:b3:00:d8:8a:fe:12:19:e9:73:ea:b3:
eb:db:10:c2:c3:96:45:cd:fa:01:3f:c4:e8:24:cb:59:e8:d0:
18:e2:0e:5f:2e:ca:1a:c7:26:bd:32:67:fd:8f:da:6e:44:89:
96:07:4a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrau3IJC6Pkxk2xWRTJjZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjYwMzAxMjIwMDM3WhcNMjYwMzAyMjIwMDM3WjAzMTEwLwYDVQQD
EygwM2VlY2I3MTQ4YmY3M2QyYjhkNzE5Mjc5YzM3OWViMzdmN2QyYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouL7gF2n2Al/vOlEvfJfUF8lectT
IzTVq8zrrsDAUdd32EyXwVjRkB1pouHML9fj8satnsVc3mLeDWUjFEJscVcoUXMn
/DW8HhDReia8titrNRwOwRGO1+laiJzd/eBdqVCnyavlyV7GfU+Ckca00zAsHJ1V
MrHpjIC3jU6ptTn27Bl8LyXm11JyXNvpY8Us184azokCJ/enIz2ujBvJSMumTWJQ
x69QKY4t/AiEpgeL76yH6UIK7vfTpPpdtJtxhrv52dQCouWpHTqDUx1lMGxW3b9r
cVXz2dDLG6tPalfzklnMrcrfikin8ljgheDRgylfj/oSzVl6TbXvxSWobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPuy3FIv3PSuNcZJ5w3nrN/fSqYMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5nZHEAi
13vzt6c3m34e1tRkkYULtXf/9vfAAAOi9ihUeoxfBVjZ0SKeNz5pWIGsWi+BriL4
uy471PiBMo7FpnYS2lBUAxYPHZdbWD2VT2RUftVj4swgEfx/QMZ+ErcQNQ07c/yc
loStPj4E6PtWjHdsk+3HJPF5q029EUaXQqScRwhNT6peT7AG8tDlu0e1o4Kf9Tyj
otHeAMsMDtWILlCBfpqcdHlvJgfrVKLlBPOMWHRR2OXRoixDVSmlHMCTXl0fmnSi
s1cnAKrlX7MA2Ir+Ehnpc+qz69sQwsOWRc36AT/E6CTLWejQGOIOXy7KGscmvTJn
/Y/abkSJlgdKhQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:10 2026 by rpki-client