Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: qnNdh/oIOSyRSetxFDV3zeVmRnzZ0KJ0QxpMZrAaS3Q=
Subject key identifier: C3:D5:E1:48:4A:4C:9C:3E:C4:E0:04:91:FC:E1:86:FC:81:73:AD:FD
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 019CACB54939C375456710DC02BC6056818E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 04B5
Signing time: Mon 02 Mar 2026 04:01:27 +0000
Manifest this update: Mon 02 Mar 2026 04:01:27 +0000
Manifest next update: Tue 03 Mar 2026 04:01:27 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: 3CyDyULSPlR70w88aL5fAE9CipwZgi+NsVCNsw18iBE=)
2: kmwS9zp0FNoIdCYHmD7lEmcie3Q.roa (hash: dnAyHkLRkKFButzzN0BFh8XkXJNa+fP4jBji3sBqddo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:49:39:c3:75:45:67:10:dc:02:bc:60:56:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Mar 2 04:01:27 2026 GMT
Not After : Mar 3 04:01:27 2026 GMT
Subject: CN=c3d5e1484a4c9c3ec4e00491fce186fc8173adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:25:17:ab:cf:a4:58:ef:e7:b8:95:9e:6c:
20:c0:e3:2b:7f:c9:8a:cc:88:9a:ab:fe:f1:fa:2a:
03:4d:ee:e8:1b:82:53:73:a1:aa:ef:0f:63:7f:5a:
c2:3c:af:ce:79:65:47:b9:8a:b9:ac:d2:12:14:de:
07:4b:f0:e4:57:4b:25:92:ac:e8:7c:0e:5c:96:fb:
6f:54:10:44:ac:1b:3f:fd:78:84:17:20:b2:b0:09:
b5:62:04:cb:17:51:0b:60:59:ba:88:f9:c3:88:63:
51:d3:8d:6e:7c:b2:57:cf:4e:05:4f:86:09:60:2e:
fa:07:6e:3c:e3:40:c4:26:e2:c4:0d:ab:50:d4:e5:
ba:92:65:7d:78:5c:04:72:5c:f2:08:67:ac:08:67:
f7:27:d9:41:3b:70:9e:cb:91:df:40:6c:c8:91:fb:
41:6a:68:c2:76:63:9a:e7:02:39:f1:34:c4:39:9c:
a2:d5:69:52:51:6e:cd:f1:df:ff:dd:8b:bd:cb:fe:
05:00:1d:f0:6e:82:70:7c:07:61:fe:76:77:13:c3:
de:df:43:74:ca:47:d8:e4:e6:54:23:33:2c:9b:c0:
89:1e:ae:68:f3:4c:ba:5e:49:89:f3:80:8d:37:a9:
f2:fe:65:e2:0b:86:57:98:01:dc:c2:bb:99:78:f6:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:E1:48:4A:4C:9C:3E:C4:E0:04:91:FC:E1:86:FC:81:73:AD:FD
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:22:37:32:9b:b1:4a:8e:93:f9:54:7f:02:52:2f:25:02:
6c:b2:22:90:86:31:48:0b:cc:66:44:7f:8e:d8:29:7b:14:1d:
14:c0:1d:c3:10:95:4b:41:57:e2:3a:8a:7b:09:b0:8c:89:67:
64:ce:83:f2:96:cf:f5:74:bd:00:aa:58:cf:47:47:5d:22:55:
89:36:53:1d:bd:86:05:f1:89:37:91:d4:ae:9b:10:62:87:53:
2d:01:d6:07:5a:a8:19:bb:09:fd:00:c4:53:0d:3c:89:c0:f9:
b0:29:d4:fe:70:06:d6:9a:ca:27:4d:87:76:77:65:84:73:86:
0f:e6:06:f7:f9:d8:bd:2d:8d:e7:d1:ff:51:18:71:58:1f:24:
51:47:be:8b:00:dd:16:bf:a2:64:eb:cf:57:d0:d0:ff:26:aa:
94:bc:ae:dc:67:c2:85:a0:7e:8b:54:9b:3a:f6:e5:3d:1d:80:
dd:62:d1:c7:9e:07:0f:87:7c:58:4c:96:9a:2e:e7:86:e5:75:
aa:3f:df:32:d9:27:c0:7d:7f:41:d2:b6:ae:31:19:35:65:23:
4d:ac:83:90:bf:16:0f:d1:ee:9c:5a:1b:35:32:80:35:d0:6a:
a1:39:23:13:b6:a8:8b:2b:2f:89:3f:33:76:4a:95:f3:af:3f:
20:e8:fa:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystUk5w3VFZxDcArxgVoGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0
YzA4NDcwHhcNMjYwMzAyMDQwMTI3WhcNMjYwMzAzMDQwMTI3WjAzMTEwLwYDVQQD
EyhjM2Q1ZTE0ODRhNGM5YzNlYzRlMDA0OTFmY2UxODZmYzgxNzNhZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2AlF6vPpFjv57iVnmwgwOMrf8mK
zIiaq/7x+ioDTe7oG4JTc6Gq7w9jf1rCPK/OeWVHuYq5rNISFN4HS/DkV0slkqzo
fA5clvtvVBBErBs//XiEFyCysAm1YgTLF1ELYFm6iPnDiGNR041ufLJXz04FT4YJ
YC76B24840DEJuLEDatQ1OW6kmV9eFwEclzyCGesCGf3J9lBO3Cey5HfQGzIkftB
amjCdmOa5wI58TTEOZyi1WlSUW7N8d//3Yu9y/4FAB3wboJwfAdh/nZ3E8Pe30N0
ykfY5OZUIzMsm8CJHq5o80y6XkmJ84CNN6ny/mXiC4ZXmAHcwruZePboswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPV4UhKTJw+xOAEkfzhhvyBc639MB8GA1UdIwQY
MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt
MTNlODgwMTYyOGY1LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1
LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwAiNzKb
sUqOk/lUfwJSLyUCbLIikIYxSAvMZkR/jtgpexQdFMAdwxCVS0FX4jqKewmwjIln
ZM6D8pbP9XS9AKpYz0dHXSJViTZTHb2GBfGJN5HUrpsQYodTLQHWB1qoGbsJ/QDE
Uw08icD5sCnU/nAG1prKJ02HdndlhHOGD+YG9/nYvS2N59H/URhxWB8kUUe+iwDd
Fr+iZOvPV9DQ/yaqlLyu3GfChaB+i1SbOvblPR2A3WLRx54HD4d8WEyWmi7nhuV1
qj/fMtknwH1/QdK2rjEZNWUjTayDkL8WD9HunFobNTKANdBqoTkjE7aoiysviT8z
dkqV868/IOj6xA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:08 2026 by rpki-client