Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: ijogXtz/OvaR+gTn5XiR1Dy0AvtyIryPoC4Ux2Dsj00=
Subject key identifier: D8:4B:F0:4A:AF:6C:A8:CB:B9:2F:9D:65:57:BE:03:58:EE:EC:3B:B5
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019CAB347FA3C445ED8E2F3225EE3A58295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: D28qtQeuhx0ylSI8vjYZITlcnudNtI0YFkevt19TdtQ=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7f:a3:c4:45:ed:8e:2f:32:25:ee:3a:58:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=d84bf04aaf6ca8cbb92f9d6557be0358eeec3bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:20:0c:c4:d7:5c:b1:70:29:e6:4b:37:80:
78:7b:f7:e6:e0:d1:22:85:d9:03:01:f9:b9:c4:38:
61:ca:d9:2e:56:2a:c4:74:0b:84:76:10:77:5d:fc:
06:43:52:31:4e:ee:90:84:34:42:13:4f:38:4d:ad:
bd:eb:f5:06:c2:b7:d5:68:43:f3:df:68:27:e8:84:
16:d1:32:82:74:f2:f6:74:5c:f9:dc:80:e2:c0:2d:
6d:32:a8:e2:2d:81:d3:d0:e3:66:24:71:59:a8:ce:
eb:12:40:95:18:de:58:ca:64:89:09:52:9a:e5:98:
e2:a5:24:43:3f:7b:54:b7:1c:a4:66:d9:fc:5f:d3:
08:be:0a:95:47:b6:80:ac:92:1a:6b:2b:a3:9d:b3:
e6:b7:5a:24:6f:2a:92:de:99:aa:e5:6b:1c:0c:a1:
8a:a9:8c:15:c6:08:0a:bd:0b:d3:86:9b:f8:01:20:
81:d6:f9:ae:ad:5f:2a:4c:5f:86:80:cf:01:02:56:
ca:cc:56:a3:19:88:b1:5f:ef:55:51:54:e4:87:c0:
c7:26:34:02:bc:0e:70:f0:e9:a1:7c:be:4b:73:e6:
a6:26:6b:45:66:8f:9e:1b:b0:77:eb:24:c8:04:aa:
bf:6f:62:e1:e9:29:13:b1:ed:32:bb:8b:00:37:b5:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:F0:4A:AF:6C:A8:CB:B9:2F:9D:65:57:BE:03:58:EE:EC:3B:B5
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:27:69:77:63:c8:57:65:8b:fe:14:b8:92:21:c3:54:3b:
0d:55:d9:7d:8a:c9:d9:1d:1d:20:a0:a2:f1:38:eb:ac:09:c7:
b9:d2:64:9a:dc:0d:9e:09:c6:f3:74:84:f0:06:9b:4d:e6:73:
54:16:70:0e:b2:7c:9a:5c:eb:73:c6:18:15:31:19:82:2d:9e:
cd:b8:23:b4:be:c1:53:a9:8a:3a:56:ff:fb:4b:81:e8:86:20:
e8:65:a1:d5:a1:7c:79:88:41:d0:25:20:56:b3:dc:54:81:2e:
3d:d2:03:7e:6d:40:03:8a:5b:8e:95:87:76:bc:66:92:0c:95:
4e:ce:33:6c:65:00:be:f1:0a:71:13:ff:68:6f:2d:3f:8e:f3:
ca:48:70:ea:6b:4c:b2:dc:16:c5:80:72:59:46:06:79:26:e0:
0f:77:61:7b:bd:79:c2:e3:a8:71:14:51:07:c7:64:30:62:62:
4e:f6:3a:ef:cb:0d:59:ee:6f:23:6f:97:91:ba:dd:11:24:a2:
5a:17:a9:ce:64:c5:2b:0a:b9:15:77:5e:e7:37:27:c9:33:7d:
4b:86:bd:33:e6:46:fb:e3:a4:bc:18:09:0b:0a:96:a1:d8:f5:
6a:bf:bb:a9:30:85:8d:53:f5:b3:d5:f1:96:5a:12:d3:6f:bb:
ea:bd:1f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNH+jxEXtji8yJe46WClbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx
OGUzYzAwHhcNMjYwMzAxMjEwMTEwWhcNMjYwMzAyMjEwMTEwWjAzMTEwLwYDVQQD
EyhkODRiZjA0YWFmNmNhOGNiYjkyZjlkNjU1N2JlMDM1OGVlZWMzYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEwgDMTXXLFwKeZLN4B4e/fm4NEi
hdkDAfm5xDhhytkuVirEdAuEdhB3XfwGQ1IxTu6QhDRCE084Ta296/UGwrfVaEPz
32gn6IQW0TKCdPL2dFz53IDiwC1tMqjiLYHT0ONmJHFZqM7rEkCVGN5YymSJCVKa
5ZjipSRDP3tUtxykZtn8X9MIvgqVR7aArJIaayujnbPmt1okbyqS3pmq5WscDKGK
qYwVxggKvQvThpv4ASCB1vmurV8qTF+GgM8BAlbKzFajGYixX+9VUVTkh8DHJjQC
vA5w8OmhfL5Lc+amJmtFZo+eG7B36yTIBKq/b2Lh6SkTse0yu4sAN7UG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhL8EqvbKjLuS+dZVe+A1ju7Du1MB8GA1UdIwQY
MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt
YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1
LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxwnaXdj
yFdli/4UuJIhw1Q7DVXZfYrJ2R0dIKCi8TjrrAnHudJkmtwNngnG83SE8AabTeZz
VBZwDrJ8mlzrc8YYFTEZgi2ezbgjtL7BU6mKOlb/+0uB6IYg6GWh1aF8eYhB0CUg
VrPcVIEuPdIDfm1AA4pbjpWHdrxmkgyVTs4zbGUAvvEKcRP/aG8tP47zykhw6mtM
stwWxYByWUYGeSbgD3dhe715wuOocRRRB8dkMGJiTvY678sNWe5vI2+XkbrdESSi
WhepzmTFKwq5FXde5zcnyTN9S4a9M+ZG++OkvBgJCwqWodj1ar+7qTCFjVP1s9Xx
lloS02+76r0fZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:13 2026 by rpki-client