Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: +VEFNdINncHOuLPvQhWH6WgVwCOMBpJSkmdQsjl6ChE=
Subject key identifier: 53:36:B6:AF:1D:5F:1E:16:BC:3E:3E:79:BD:E6:25:7E:8F:AF:ED:E4
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019CAC0FB90AADA386F9713D4C4CFEC205E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: N+gaydA2xLnkllPqjfCbx/1hHLv/hs9zTO9BUJyxhb8=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:0a:ad:a3:86:f9:71:3d:4c:4c:fe:c2:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=5336b6af1d5f1e16bc3e3e79bde6257e8fafede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:65:76:69:f4:25:29:c0:b7:74:07:c2:41:
67:55:3c:2c:72:ff:b9:c1:77:80:e4:d4:2a:b0:eb:
87:f7:2b:96:88:6e:94:0c:cc:f4:4b:09:59:11:54:
89:ba:5e:86:d6:c1:de:56:f0:bb:fa:16:ec:9d:ff:
72:e6:7d:9c:dc:18:3d:af:d6:ae:80:cf:87:d2:84:
10:00:8e:c9:7c:62:48:52:c0:aa:1c:d7:06:32:ad:
41:0e:53:04:ab:6a:63:d7:3d:3f:28:22:80:35:1e:
81:9c:84:9d:11:3f:6d:ea:47:35:70:f0:d1:f4:61:
bd:62:36:e2:80:c8:61:7f:a6:c9:e1:7b:56:07:b0:
b1:65:2b:dc:52:58:df:65:d1:97:92:05:fb:9f:c2:
3d:29:8b:1d:e9:01:4d:c2:48:07:12:2c:7c:88:65:
96:91:ed:31:dd:8e:51:b2:6f:f5:55:f5:ff:3e:5a:
25:f0:02:6e:9a:83:5d:77:d5:7b:fb:fd:0b:55:83:
94:fd:8d:47:a9:0c:5b:a5:a6:cd:02:95:0b:c3:45:
50:1a:c7:e1:0f:68:3b:6d:13:62:b4:ce:c0:d0:ba:
48:95:e3:34:92:4f:82:c5:ba:b8:3e:33:35:eb:4a:
4c:bd:f7:bc:9e:38:cc:14:54:23:78:85:1c:85:f8:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:B6:AF:1D:5F:1E:16:BC:3E:3E:79:BD:E6:25:7E:8F:AF:ED:E4
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:00:14:67:a7:2a:df:b4:35:26:fb:3c:9d:65:50:53:d7:ad:
36:4c:71:e1:8c:3f:6b:6d:5b:08:15:32:33:2e:06:cf:aa:f8:
6e:ec:15:08:ac:6a:7f:38:a7:cc:61:41:a3:02:7e:4e:f7:7a:
64:2b:20:ec:74:e3:4d:d7:84:84:5e:8f:81:cc:8d:30:2c:e5:
08:b1:dc:fc:63:7d:e6:3b:98:4e:c1:ff:2b:bd:63:61:6c:58:
fb:11:fd:a0:e1:77:55:a8:ff:8c:75:b4:86:79:0a:4a:b0:29:
46:5a:23:57:f7:9b:10:5e:78:b1:cc:59:a2:3b:c6:ab:68:04:
e7:a7:1f:5d:ee:2f:51:48:39:39:9d:2c:da:8f:d9:de:72:63:
f6:79:3c:5a:15:40:ca:85:cd:bc:5a:69:2b:9f:01:40:ae:fd:
f6:ed:36:b7:de:a9:5e:57:5d:d8:6d:ee:7a:98:ab:b7:36:61:
6e:e3:e0:d1:35:0a:80:9a:17:fc:c1:85:de:53:8a:54:db:f3:
da:53:bc:b8:c0:72:1b:f1:3f:82:c4:14:04:a8:4d:be:4d:b5:
4e:8d:bc:4e:3d:fc:50:59:2c:64:cf:83:ec:f1:ca:74:8e:a3:
4b:9c:d8:3d:79:4f:2e:bd:65:2e:56:79:b2:21:70:95:5e:03:
35:e5:43:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD7kKraOG+XE9TEz+wgXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj
ZGNlOTIwHhcNMjYwMzAyMDEwMDM3WhcNMjYwMzAzMDEwMDM3WjAzMTEwLwYDVQQD
Eyg1MzM2YjZhZjFkNWYxZTE2YmMzZTNlNzliZGU2MjU3ZThmYWZlZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJZldmn0JSnAt3QHwkFnVTwscv+5
wXeA5NQqsOuH9yuWiG6UDMz0SwlZEVSJul6G1sHeVvC7+hbsnf9y5n2c3Bg9r9au
gM+H0oQQAI7JfGJIUsCqHNcGMq1BDlMEq2pj1z0/KCKANR6BnISdET9t6kc1cPDR
9GG9YjbigMhhf6bJ4XtWB7CxZSvcUljfZdGXkgX7n8I9KYsd6QFNwkgHEix8iGWW
ke0x3Y5Rsm/1VfX/Plol8AJumoNdd9V7+/0LVYOU/Y1HqQxbpabNApULw0VQGsfh
D2g7bRNitM7A0LpIleM0kk+Cxbq4PjM160pMvfe8njjMFFQjeIUchfgEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM2tq8dXx4WvD4+eb3mJX6Pr+3kMB8GA1UdIwQY
MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt
YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy
LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAAUZ6cq
37Q1Jvs8nWVQU9etNkxx4Yw/a21bCBUyMy4Gz6r4buwVCKxqfzinzGFBowJ+Tvd6
ZCsg7HTjTdeEhF6PgcyNMCzlCLHc/GN95juYTsH/K71jYWxY+xH9oOF3Vaj/jHW0
hnkKSrApRlojV/ebEF54scxZojvGq2gE56cfXe4vUUg5OZ0s2o/Z3nJj9nk8WhVA
yoXNvFppK58BQK799u02t96pXldd2G3uepirtzZhbuPg0TUKgJoX/MGF3lOKVNvz
2lO8uMByG/E/gsQUBKhNvk21To28Tj38UFksZM+D7PHKdI6jS5zYPXlPLr1lLlZ5
siFwlV4DNeVDfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:21 2026 by rpki-client