Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: l4TzRest5bwivz/V1uszjFtV6DzP8AeublG3OqHfLHU=
Subject key identifier: F7:89:1B:AD:26:74:7E:AC:A8:E3:EA:06:CA:01:AB:73:34:1C:1F:C2
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019CAD598D39975F05BDD269AE10EBEDAFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:53 +0000
Manifest this update: Mon 02 Mar 2026 07:00:53 +0000
Manifest next update: Tue 03 Mar 2026 07:00:53 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: S+htLcjfq+F+4LB3WgubHHVEvwKfPwaYW4uMJn5JtuU=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8d:39:97:5f:05:bd:d2:69:ae:10:eb:ed:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Mar 2 07:00:53 2026 GMT
Not After : Mar 3 07:00:53 2026 GMT
Subject: CN=f7891bad26747eaca8e3ea06ca01ab73341c1fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:58:24:31:3c:73:d5:8a:68:3d:7c:67:1f:
b4:4e:4e:3a:06:d7:ed:25:5c:15:3a:8d:30:a0:bd:
ee:f2:0c:43:f4:fd:3b:5e:88:e1:19:7d:5f:03:d0:
9b:29:22:f6:8e:13:32:23:69:f5:34:3d:67:90:83:
ba:d4:fc:7a:eb:0d:a8:77:c1:e7:ec:7b:e8:85:f3:
94:05:cd:c2:df:22:a3:ea:f8:2f:ef:c7:95:47:cf:
fd:93:73:7c:67:2e:11:b1:74:e4:67:03:c3:ac:d1:
c6:e2:9d:c5:d6:da:12:23:49:81:9a:04:b9:19:dd:
4c:5e:1b:5b:b3:38:6c:90:d9:36:e8:bc:56:63:d2:
c7:ac:10:f4:e4:4b:c1:97:af:7b:36:e7:7d:be:40:
08:5e:e3:ed:fb:14:f1:7e:70:46:cd:fb:1e:f2:bc:
85:f1:5e:c4:6b:20:69:85:ec:b0:72:c0:dd:e8:9a:
6c:bb:2b:5b:b0:b9:f2:35:cc:68:46:b1:c8:09:90:
82:3e:67:ed:33:1f:02:d2:3d:bc:12:cb:96:aa:f8:
ae:85:a8:7e:b4:d3:3b:ea:a7:31:9f:66:7f:51:06:
06:81:b6:e8:e4:df:76:b4:09:60:36:5f:38:18:f2:
bd:51:f9:54:3e:86:28:dc:67:1c:60:37:b5:0b:97:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:1B:AD:26:74:7E:AC:A8:E3:EA:06:CA:01:AB:73:34:1C:1F:C2
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d9:99:64:19:8b:b2:8f:c3:1a:8d:6a:97:ca:03:19:18:4c:
33:7c:e6:00:15:6e:74:e3:a2:19:95:53:dd:b8:f2:81:f2:ca:
45:21:47:32:8d:d9:e7:fa:f6:3f:18:fe:bf:cb:4b:f0:f8:e1:
69:64:d9:15:50:e2:9b:2f:c0:24:00:46:2a:83:e7:bb:1e:d2:
0a:65:bf:6d:d8:14:16:7e:d2:e0:a1:04:7d:68:94:20:fb:6f:
02:0a:56:fc:eb:8e:1b:4b:35:ca:98:5f:20:07:4d:5e:44:04:
77:27:5f:23:4d:08:f2:1e:12:1c:13:11:61:e9:7d:31:41:e3:
34:d1:8d:bf:e2:f7:25:c9:ca:09:c6:9a:32:da:0b:40:fd:8f:
3f:95:d6:c8:d5:7c:08:cc:76:e5:af:d3:45:fb:eb:0c:2d:32:
a0:c6:3f:55:69:32:82:4e:28:a5:53:6c:e3:c3:91:e2:8d:07:
d7:a6:9e:be:b6:02:d3:ae:20:66:73:35:ab:ff:22:4a:a0:4a:
2d:0f:29:69:4b:db:1c:e0:9f:d2:6d:e5:7a:f3:1d:cb:dc:c5:
3b:7e:bd:66:09:c3:a5:cf:aa:4c:d2:f0:d3:7c:cd:b2:2a:16:
c9:0a:31:92:7e:b9:cc:ad:36:ea:d0:9a:7a:b2:fa:b9:4e:9d:
46:c2:cf:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWY05l18FvdJprhDr7a/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm
Y2JlODEwHhcNMjYwMzAyMDcwMDUzWhcNMjYwMzAzMDcwMDUzWjAzMTEwLwYDVQQD
EyhmNzg5MWJhZDI2NzQ3ZWFjYThlM2VhMDZjYTAxYWI3MzM0MWMxZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrVYJDE8c9WKaD18Zx+0Tk46Btft
JVwVOo0woL3u8gxD9P07XojhGX1fA9CbKSL2jhMyI2n1ND1nkIO61Px66w2od8Hn
7HvohfOUBc3C3yKj6vgv78eVR8/9k3N8Zy4RsXTkZwPDrNHG4p3F1toSI0mBmgS5
Gd1MXhtbszhskNk26LxWY9LHrBD05EvBl697Nud9vkAIXuPt+xTxfnBGzfse8ryF
8V7EayBpheywcsDd6JpsuytbsLnyNcxoRrHICZCCPmftMx8C0j28EsuWqviuhah+
tNM76qcxn2Z/UQYGgbbo5N92tAlgNl84GPK9UflUPoYo3GccYDe1C5edMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeJG60mdH6sqOPqBsoBq3M0HB/CMB8GA1UdIwQY
MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt
ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh
LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtmZZBmL
so/DGo1ql8oDGRhMM3zmABVudOOiGZVT3bjygfLKRSFHMo3Z5/r2Pxj+v8tL8Pjh
aWTZFVDimy/AJABGKoPnux7SCmW/bdgUFn7S4KEEfWiUIPtvAgpW/OuOG0s1yphf
IAdNXkQEdydfI00I8h4SHBMRYel9MUHjNNGNv+L3JcnKCcaaMtoLQP2PP5XWyNV8
CMx25a/TRfvrDC0yoMY/VWkygk4opVNs48OR4o0H16aevrYC064gZnM1q/8iSqBK
LQ8paUvbHOCf0m3levMdy9zFO369ZgnDpc+qTNLw03zNsioWyQoxkn65zK026tCa
erL6uU6dRsLPYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:05 2026 by rpki-client