Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: pnAGAagb1smhGyP0PpYTDiT3BBN5NC0rb0X204oy5SI=
Subject key identifier: 2E:90:72:11:D7:14:A1:D3:51:7E:13:66:46:34:7C:43:06:76:78:4F
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019CAC0FF534D4FDA8BAA3609AE3984718EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: DrWli7+uEO/75NH3JXj6Uut8BTLrIXp4tmFqIY5AIA4=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f5:34:d4:fd:a8:ba:a3:60:9a:e3:98:47:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=2e907211d714a1d3517e136646347c430676784f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:37:2b:35:9d:ec:71:c5:ba:7b:b0:ed:fa:
96:8c:1e:6f:19:80:c6:a1:f8:24:09:e6:60:33:63:
b8:a6:7e:bf:26:53:21:7f:2d:d7:a9:e0:11:02:67:
28:9d:c0:b0:fd:53:46:2a:cb:0c:f5:83:b8:a5:f8:
31:74:04:47:a2:f8:93:b6:f9:35:a4:8b:08:15:7a:
de:91:55:d7:21:55:c1:41:b2:b9:d9:2b:84:1c:10:
83:58:e2:9c:1b:db:11:dd:b8:b4:8d:69:06:ae:54:
bc:a2:ac:07:c2:21:c1:4d:58:64:0b:e8:90:b9:22:
23:9a:01:e5:b0:3b:19:c6:66:eb:46:2c:32:b6:1a:
88:84:b7:b0:ce:af:3c:27:32:37:ec:18:c1:46:37:
0e:bc:3d:17:8b:f7:9e:87:9b:c6:60:47:70:20:dd:
74:ec:8b:4a:8e:60:a0:7c:d1:da:74:cc:78:3f:ac:
3e:ab:2a:e7:72:31:15:0f:2a:90:6d:99:1a:99:a4:
a7:03:5e:12:de:14:91:ea:1b:7a:33:88:a5:3e:73:
24:3a:ad:8b:d5:b3:f1:7d:dd:2e:f9:7a:80:72:0e:
fa:05:27:63:82:5f:b2:b2:66:15:fa:27:c7:38:be:
a9:92:55:2e:bd:3d:c9:7c:4c:e2:b7:b2:b7:21:54:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:72:11:D7:14:A1:D3:51:7E:13:66:46:34:7C:43:06:76:78:4F
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:fa:84:7a:30:a7:1f:39:8e:f8:0e:97:2b:24:a2:08:61:
aa:92:f2:9f:2c:5a:87:9a:d0:44:bd:e6:71:f2:37:45:71:ce:
ee:60:1b:f7:ce:0b:f2:65:7c:81:72:dc:e3:3c:8a:a6:58:a8:
22:1b:fc:3c:35:28:e9:f4:8f:9d:3d:ac:52:23:5d:29:40:d6:
a5:5b:ff:90:c9:6d:bc:76:77:e8:b9:d4:1f:77:e2:10:1c:16:
b1:06:ee:71:fd:ee:34:cc:73:2b:ab:f7:23:68:4c:82:d1:53:
07:83:40:b9:1c:04:f5:14:d2:57:40:5d:3c:84:d0:98:15:92:
44:26:84:13:06:da:59:a7:7d:f2:ca:ca:1f:c8:3d:b8:26:ee:
1c:4b:7e:49:21:f8:0e:f0:59:05:ef:9e:73:01:59:6b:e0:1a:
e8:e9:b8:b1:49:da:e6:0d:14:d4:27:8e:91:ee:0f:4d:65:ae:
08:32:8d:b4:65:c5:c6:93:a0:78:a7:37:43:52:1d:ba:0d:9e:
26:cd:50:35:3b:ce:dc:f5:c6:19:26:62:70:c8:42:da:1d:a4:
ae:e9:ea:41:25:9f:4f:17:9c:12:2a:b1:43:8f:b0:59:da:07:
be:56:d4:e4:b3:a7:80:8a:d4:dc:a8:cf:cc:6c:03:bd:05:10:
8b:21:19:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/U01P2ouqNgmuOYRxjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ViYTY4NzNjNWI1MDc1YjNjNDM5ZjdmZWViNTRhZjFm
MTBkYTkwHhcNMjYwMzAyMDEwMDUyWhcNMjYwMzAzMDEwMDUyWjAzMTEwLwYDVQQD
EygyZTkwNzIxMWQ3MTRhMWQzNTE3ZTEzNjY0NjM0N2M0MzA2NzY3ODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pw3KzWd7HHFunuw7fqWjB5vGYDG
ofgkCeZgM2O4pn6/JlMhfy3XqeARAmconcCw/VNGKssM9YO4pfgxdARHoviTtvk1
pIsIFXrekVXXIVXBQbK52SuEHBCDWOKcG9sR3bi0jWkGrlS8oqwHwiHBTVhkC+iQ
uSIjmgHlsDsZxmbrRiwythqIhLewzq88JzI37BjBRjcOvD0Xi/eeh5vGYEdwIN10
7ItKjmCgfNHadMx4P6w+qyrncjEVDyqQbZkamaSnA14S3hSR6ht6M4ilPnMkOq2L
1bPxfd0u+XqAcg76BSdjgl+ysmYV+ifHOL6pklUuvT3JfEzit7K3IVTQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6QchHXFKHTUX4TZkY0fEMGdnhPMB8GA1UdIwQY
MBaAFA0+umhzxbUHWzxDn3/utUrx8Q2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUt
Mjc5OThiZjE3NDY1LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUtMjc5OThiZjE3NDY1
LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2T6hHow
px85jvgOlyskoghhqpLynyxah5rQRL3mcfI3RXHO7mAb984L8mV8gXLc4zyKplio
Ihv8PDUo6fSPnT2sUiNdKUDWpVv/kMltvHZ36LnUH3fiEBwWsQbucf3uNMxzK6v3
I2hMgtFTB4NAuRwE9RTSV0BdPITQmBWSRCaEEwbaWad98srKH8g9uCbuHEt+SSH4
DvBZBe+ecwFZa+Aa6Om4sUna5g0U1CeOke4PTWWuCDKNtGXFxpOgeKc3Q1Idug2e
Js1QNTvO3PXGGSZicMhC2h2krunqQSWfTxecEiqxQ4+wWdoHvlbU5LOngIrU3KjP
zGwDvQUQiyEZRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:29 2026 by rpki-client