Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: j6TwqCJ2SDbnwx7Hm7vTVfYnVLKzCsdCDpNJhN6zA78=
Subject key identifier: 2E:2A:5D:4A:CF:BB:31:23:DE:DD:26:09:94:B5:DB:9E:82:6C:34:1D
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019D9B5111C6CC66957108B8F1C840A225DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0831
Signing time: Fri 17 Apr 2026 12:01:14 +0000
Manifest this update: Fri 17 Apr 2026 12:01:14 +0000
Manifest next update: Sat 18 Apr 2026 12:01:14 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: 2DvQ57v10HwpqPHNwZSRk2+x2gx0BLqnNFg6G1xeQSE=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:11:c6:cc:66:95:71:08:b8:f1:c8:40:a2:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Apr 17 12:01:14 2026 GMT
Not After : Apr 18 12:01:14 2026 GMT
Subject: CN=2e2a5d4acfbb3123dedd260994b5db9e826c341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:bc:71:cd:9b:2f:ee:7c:8e:35:2c:7d:7c:
7a:79:7d:15:d0:bc:20:95:d5:0c:9d:d8:ce:fa:fc:
60:d0:78:bb:e4:9a:c4:41:26:58:9e:8d:b4:be:c1:
44:3f:6e:3e:14:a3:15:0d:54:1f:e5:74:ca:31:64:
09:a3:59:35:46:2c:c2:18:92:8e:65:60:ec:9c:21:
9b:eb:a4:87:3a:46:6e:cc:8a:cf:2d:c9:22:b0:29:
b2:bf:5c:b8:13:e9:36:31:66:ae:11:08:9b:89:e5:
95:b0:fc:17:39:59:18:da:d3:f5:f4:7c:50:e1:df:
68:1e:e9:84:0e:da:52:38:14:b0:1c:c1:fa:e7:c9:
33:66:7f:16:28:4c:76:59:68:30:83:3b:ad:c5:45:
3e:fc:4c:e0:b5:3f:3d:56:b7:33:f9:4d:c9:f9:7c:
df:e6:01:2e:bf:f4:88:8e:a6:ae:9d:b6:cd:f6:2d:
e5:88:d5:4e:68:78:cf:07:16:23:18:f6:66:3e:7e:
e7:cf:1f:27:c9:6e:56:78:f5:b6:ff:28:fe:16:07:
42:44:f1:07:fb:a5:fd:80:59:7b:c9:b7:93:76:30:
d1:f7:79:90:bb:75:f9:07:7a:43:2c:70:ac:26:ae:
05:d2:20:8c:73:fd:25:fa:51:7a:eb:93:83:a5:d2:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:5D:4A:CF:BB:31:23:DE:DD:26:09:94:B5:DB:9E:82:6C:34:1D
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c2:aa:4e:3a:55:3c:5c:5f:cb:62:42:5a:31:93:df:ea:0e:
cf:cb:12:6a:e7:2a:00:87:1f:31:2e:33:2e:6e:31:2d:1e:8a:
38:fd:b5:98:96:36:75:3f:33:e1:a2:95:d3:56:4e:00:cd:d8:
2d:0c:4a:b0:2c:bc:f9:e5:22:36:2d:e1:fa:f4:d7:4e:ad:2d:
e0:a8:3f:9e:1b:f5:b1:73:2a:23:8e:c7:ad:e2:5f:90:5e:51:
b0:67:6b:ac:5e:6d:01:61:53:fa:ef:ca:6e:57:03:40:4d:97:
d9:12:e8:52:e0:8c:e1:ea:32:73:e4:6d:9e:62:2c:70:36:78:
f5:dd:15:42:f5:30:59:f2:d4:db:4d:e3:61:fb:5c:63:7a:a2:
f3:ae:c4:01:51:63:81:f3:5c:d6:de:a1:51:34:4e:27:0f:64:
e0:f6:6a:30:ac:1f:47:12:01:17:98:7b:96:40:e2:a3:8b:01:
e3:45:44:b1:50:4d:4e:72:50:d5:11:64:6e:52:63:5f:bd:f1:
f5:84:8f:d3:1c:f4:ec:29:51:d3:b1:ea:c2:bd:2f:03:8a:a0:
6e:00:02:10:33:55:1b:bc:9e:4e:1f:7b:3e:cf:73:7f:e1:a1:
d2:42:09:d3:8d:c3:0b:1c:33:d8:70:06:ba:88:47:6e:6b:98:
76:8f:60:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bURHGzGaVcQi48chAoiXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjYwNDE3MTIwMTE0WhcNMjYwNDE4MTIwMTE0WjAzMTEwLwYDVQQD
EygyZTJhNWQ0YWNmYmIzMTIzZGVkZDI2MDk5NGI1ZGI5ZTgyNmMzNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8C8cc2bL+58jjUsfXx6eX0V0Lwg
ldUMndjO+vxg0Hi75JrEQSZYno20vsFEP24+FKMVDVQf5XTKMWQJo1k1RizCGJKO
ZWDsnCGb66SHOkZuzIrPLckisCmyv1y4E+k2MWauEQibieWVsPwXOVkY2tP19HxQ
4d9oHumEDtpSOBSwHMH658kzZn8WKEx2WWgwgzutxUU+/EzgtT89Vrcz+U3J+Xzf
5gEuv/SIjqaunbbN9i3liNVOaHjPBxYjGPZmPn7nzx8nyW5WePW2/yj+FgdCRPEH
+6X9gFl7ybeTdjDR93mQu3X5B3pDLHCsJq4F0iCMc/0l+lF665ODpdKoiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4qXUrPuzEj3t0mCZS1256CbDQdMB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8KqTjpV
PFxfy2JCWjGT3+oOz8sSaucqAIcfMS4zLm4xLR6KOP21mJY2dT8z4aKV01ZOAM3Y
LQxKsCy8+eUiNi3h+vTXTq0t4Kg/nhv1sXMqI47HreJfkF5RsGdrrF5tAWFT+u/K
blcDQE2X2RLoUuCM4eoyc+RtnmIscDZ49d0VQvUwWfLU203jYftcY3qi867EAVFj
gfNc1t6hUTROJw9k4PZqMKwfRxIBF5h7lkDio4sB40VEsVBNTnJQ1RFkblJjX73x
9YSP0xz07ClR07Hqwr0vA4qgbgACEDNVG7yeTh97Ps9zf+Gh0kIJ043DCxwz2HAG
uohHbmuYdo9gSA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:17 2026 by rpki-client