Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File: DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier: b+xsnNqDSKI/QWmguOxuak99fs9ePNNU7hJHUVod1Xs=
Subject key identifier: 20:C8:19:90:7D:CB:07:CC:F3:BC:CD:30:25:B9:53:6C:F0:76:25:41
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer: /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial: 019D9AE2946F4BCEFD1E27D6AE96AEFC5DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number: 0955
Signing time: Fri 17 Apr 2026 10:00:33 +0000
Manifest this update: Fri 17 Apr 2026 10:00:33 +0000
Manifest next update: Sat 18 Apr 2026 10:00:33 +0000
Files and hashes: 1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: lVv/rxsiF37l/iAbzJ8zSLe4u+mqRXLxubdHGD07Rkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:94:6f:4b:ce:fd:1e:27:d6:ae:96:ae:fc:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Validity
Not Before: Apr 17 10:00:33 2026 GMT
Not After : Apr 18 10:00:33 2026 GMT
Subject: CN=20c819907dcb07ccf3bccd3025b9536cf0762541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:2f:a7:20:d9:ba:de:8d:46:a8:54:8f:b1:
95:3e:34:90:82:98:d0:46:5f:1a:90:29:18:10:20:
5d:31:3b:f0:86:04:57:cd:ff:76:bb:3f:4f:8c:e0:
5b:cb:5b:4d:1a:3f:9a:5d:4d:73:a4:42:11:23:b7:
a4:b2:b1:51:60:cd:35:2d:71:07:bd:8b:3e:e7:6b:
7c:a6:16:b1:2b:88:ba:4e:d6:da:7b:72:88:7b:95:
96:e8:c5:f3:66:8f:c7:2b:39:b9:f8:dc:bb:2f:04:
5a:4e:96:87:39:1d:6f:04:87:ec:47:a1:3f:93:b8:
25:a2:fb:aa:85:57:d3:68:2d:4d:bc:f1:32:c2:5e:
d9:d6:44:a5:76:39:a4:36:59:a3:91:2a:fc:99:b8:
4c:a8:1a:af:fc:ba:25:7c:75:1c:03:36:08:17:92:
ba:3a:d7:dd:51:ba:7e:93:20:5b:ec:59:1f:8d:65:
aa:59:21:9d:2c:9b:53:e8:ee:e1:15:3a:55:d7:65:
a5:61:55:00:db:65:4c:53:e6:14:08:04:75:27:19:
b0:11:d2:a8:c7:9f:01:5e:45:4a:25:4a:99:f5:d9:
17:9e:28:0d:88:74:78:e9:b8:2d:3f:e5:42:a4:77:
15:16:df:79:fa:71:90:b1:2b:d8:21:32:f6:bd:37:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:19:90:7D:CB:07:CC:F3:BC:CD:30:25:B9:53:6C:F0:76:25:41
X509v3 Authority Key Identifier:
keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:1b:98:5b:db:e9:5a:57:64:b8:4b:0b:b3:7f:5e:33:6a:
9a:95:99:13:6e:e6:ab:d0:60:13:31:b3:6b:e8:74:12:d4:2c:
9e:c5:8b:c5:a1:14:c0:b7:a6:60:c8:95:0a:59:7d:58:a4:71:
0e:48:66:73:d8:03:e8:af:63:b4:e9:cc:32:9f:bf:4f:9f:37:
ab:12:7f:09:63:e2:d4:26:d8:5d:cf:e9:e2:92:62:a1:a2:df:
60:76:43:bc:8d:32:0f:a6:87:6a:ab:5f:de:eb:b1:6f:f6:9a:
dc:34:8f:a7:c5:29:3f:13:e0:e2:ca:68:c6:5e:bc:af:04:42:
15:53:df:ae:f8:80:45:30:6e:a1:a1:d1:31:d6:5e:be:af:01:
8a:b9:00:8b:04:35:f1:7f:18:9e:7a:5a:76:53:7c:31:fc:23:
ce:70:22:0e:5b:85:ba:f7:f9:d7:70:d7:8c:94:9c:56:b3:ab:
8f:d2:fb:e8:82:98:52:f4:15:0d:cb:d8:99:76:13:37:7f:76:
7e:8a:8b:b2:d2:e9:fe:42:89:4e:26:3f:3e:ee:e5:34:34:de:
1d:77:31:0a:f8:fc:cf:04:a4:e4:f7:5c:8f:66:82:76:9a:63:
27:11:16:94:aa:cb:85:6c:e2:e2:71:a7:cc:52:64:0c:c9:7d:
00:1d:7e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4pRvS879HifWrpau/F34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2FmNzM0NjYxOGQ4NjMwZTAxNDZhNzY1MTEyNDQzZTBj
MmM4ZmYwHhcNMjYwNDE3MTAwMDMzWhcNMjYwNDE4MTAwMDMzWjAzMTEwLwYDVQQD
EygyMGM4MTk5MDdkY2IwN2NjZjNiY2NkMzAyNWI5NTM2Y2YwNzYyNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8kvpyDZut6NRqhUj7GVPjSQgpjQ
Rl8akCkYECBdMTvwhgRXzf92uz9PjOBby1tNGj+aXU1zpEIRI7eksrFRYM01LXEH
vYs+52t8phaxK4i6Ttbae3KIe5WW6MXzZo/HKzm5+Ny7LwRaTpaHOR1vBIfsR6E/
k7glovuqhVfTaC1NvPEywl7Z1kSldjmkNlmjkSr8mbhMqBqv/LolfHUcAzYIF5K6
OtfdUbp+kyBb7FkfjWWqWSGdLJtT6O7hFTpV12WlYVUA22VMU+YUCAR1JxmwEdKo
x58BXkVKJUqZ9dkXnigNiHR46bgtP+VCpHcVFt95+nGQsSvYITL2vTe/MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDIGZB9ywfM87zNMCW5U2zwdiVBMB8GA1UdIwQY
MBaAFA069zRmGNhjDgFGp2URJEPgwsj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRyM05HWVkyR01PQVVhblpSRWtRLURDeVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80NTU3MDItNWQ1ZC00NjZiLWIxM2Et
ZjNiOWIwYjhkZDcwLzEvRFRyM05HWVkyR01PQVVhblpSRWtRLURDeVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80NTU3MDItNWQ1ZC00NjZiLWIxM2EtZjNiOWIwYjhkZDcw
LzEvRFRyM05HWVkyR01PQVVhblpSRWtRLURDeVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDcbmFvb
6VpXZLhLC7N/XjNqmpWZE27mq9BgEzGza+h0EtQsnsWLxaEUwLemYMiVCll9WKRx
Dkhmc9gD6K9jtOnMMp+/T583qxJ/CWPi1CbYXc/p4pJioaLfYHZDvI0yD6aHaqtf
3uuxb/aa3DSPp8UpPxPg4spoxl68rwRCFVPfrviARTBuoaHRMdZevq8BirkAiwQ1
8X8YnnpadlN8MfwjznAiDluFuvf513DXjJScVrOrj9L76IKYUvQVDcvYmXYTN392
foqLstLp/kKJTiY/Pu7lNDTeHXcxCvj8zwSk5Pdcj2aCdppjJxEWlKrLhWzi4nGn
zFJkDMl9AB1+yg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:16 2026 by rpki-client