Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier: Yu75VzEOwzu4Wz8PZgPqtRWwr123iqA0MTwsPZDH5Ig=
Subject key identifier: 29:A2:33:E1:61:B1:59:89:C3:8F:1C:DE:DF:F6:BE:C2:E9:5F:96:C7
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 019CAA8FCD69149130EFFCED9BA884CF79F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number: 0F75
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa (hash: Og9dej6zdeYfUEuKlPyDfibsivF+zi1xumhqKFbtAHA=)
2: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: uSsdJPAPaE5pNW8nhcWRVUHy7dVKI6yrdy6hB/6h/QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cd:69:14:91:30:ef:fc:ed:9b:a8:84:cf:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=29a233e161b15989c38f1cdedff6bec2e95f96c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:c4:1c:51:f9:34:2f:30:41:8c:00:cc:94:
b1:8a:c9:db:33:d2:c8:ea:19:af:de:fe:29:13:fe:
0f:08:b0:1b:11:22:7b:80:97:0f:62:2f:47:f8:84:
0e:52:46:d7:89:16:07:03:d1:c3:e0:91:d3:b6:03:
a5:70:bc:9d:65:90:4e:a2:a0:73:0a:94:9c:90:4d:
7e:fb:e9:8b:f1:2e:e5:69:38:5d:72:9c:10:a2:91:
97:60:07:f4:4b:a6:3e:44:6d:2f:49:3f:69:7f:4d:
47:bd:55:bf:d4:8c:01:a5:10:67:88:6f:ab:17:29:
36:b9:63:8b:af:6a:59:38:53:eb:6f:61:bb:f5:13:
0f:35:ca:f2:16:ad:35:77:a4:78:ba:a8:dc:df:f6:
58:33:5b:dd:b6:df:95:ac:6e:86:f5:c7:6b:59:48:
6e:4b:8d:86:01:ee:93:86:7e:b1:90:1b:2c:f5:47:
a7:44:81:17:4d:88:58:6f:39:fc:80:96:62:de:04:
a4:69:a8:09:70:d7:03:45:21:ff:bd:56:d2:4f:05:
9d:c8:33:81:ff:a0:9c:3c:3d:16:48:3a:c9:aa:f6:
00:ae:f0:61:a5:54:d9:f7:ad:ae:ca:ae:70:82:f2:
79:2c:48:3d:32:ca:5b:41:a9:cc:b4:87:78:48:35:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:33:E1:61:B1:59:89:C3:8F:1C:DE:DF:F6:BE:C2:E9:5F:96:C7
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:44:f1:7d:de:28:64:a8:2e:ba:11:d1:0f:52:54:22:e1:
e2:e5:5a:3b:7e:d2:59:59:6a:3c:0f:7c:43:88:58:3d:9b:62:
d0:77:4f:77:9c:fc:2c:40:c9:55:59:8f:88:c5:6d:20:ca:d1:
a0:4a:27:25:9b:ff:31:37:90:3c:8e:9e:52:59:37:5c:f5:8b:
b2:74:6f:29:e9:9c:43:4c:b0:7a:ba:5e:5c:5b:cb:60:3a:3a:
ec:ff:6c:ba:ab:45:43:47:f8:89:6a:e7:17:fc:21:16:d0:91:
cd:1f:b4:82:7f:63:7b:b9:1f:c4:7e:13:f8:21:14:03:a0:37:
7e:7b:25:60:8b:2d:77:40:e2:d4:21:8b:28:70:3d:96:11:68:
2a:32:06:01:20:e5:03:ee:50:99:e7:2e:8f:2f:36:68:18:c4:
a9:d2:1e:a6:b3:5a:05:ed:df:23:51:b9:1f:cb:e8:85:a2:e1:
6e:47:74:f9:45:14:a5:27:d0:31:91:4a:30:e8:55:e7:96:99:
c7:17:78:29:71:42:5a:11:de:02:6c:20:f7:ab:98:c7:67:d1:
7b:22:2e:96:f2:22:c0:64:ce:e2:e5:c6:ae:c5:de:8c:01:db:
35:b5:0d:94:62:0b:82:7b:e1:55:71:6b:bb:8e:84:50:de:31:
50:ba:4f:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj81pFJEw7/ztm6iEz3n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1
MWU1N2UwHhcNMjYwMzAxMTgwMTE2WhcNMjYwMzAyMTgwMTE2WjAzMTEwLwYDVQQD
EygyOWEyMzNlMTYxYjE1OTg5YzM4ZjFjZGVkZmY2YmVjMmU5NWY5NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI7EHFH5NC8wQYwAzJSxisnbM9LI
6hmv3v4pE/4PCLAbESJ7gJcPYi9H+IQOUkbXiRYHA9HD4JHTtgOlcLydZZBOoqBz
CpSckE1+++mL8S7laThdcpwQopGXYAf0S6Y+RG0vST9pf01HvVW/1IwBpRBniG+r
Fyk2uWOLr2pZOFPrb2G79RMPNcryFq01d6R4uqjc3/ZYM1vdtt+VrG6G9cdrWUhu
S42GAe6Thn6xkBss9UenRIEXTYhYbzn8gJZi3gSkaagJcNcDRSH/vVbSTwWdyDOB
/6CcPD0WSDrJqvYArvBhpVTZ962uyq5wgvJ5LEg9MspbQanMtId4SDVMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmiM+FhsVmJw48c3t/2vsLpX5bHMB8GA1UdIwQY
MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO9E8X3e
KGSoLroR0Q9SVCLh4uVaO37SWVlqPA98Q4hYPZti0HdPd5z8LEDJVVmPiMVtIMrR
oEonJZv/MTeQPI6eUlk3XPWLsnRvKemcQ0ywerpeXFvLYDo67P9suqtFQ0f4iWrn
F/whFtCRzR+0gn9je7kfxH4T+CEUA6A3fnslYIstd0Di1CGLKHA9lhFoKjIGASDl
A+5Qmecujy82aBjEqdIeprNaBe3fI1G5H8vohaLhbkd0+UUUpSfQMZFKMOhV55aZ
xxd4KXFCWhHeAmwg96uYx2fReyIulvIiwGTO4uXGrsXejAHbNbUNlGILgnvhVXFr
u46EUN4xULpPkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:42 2026 by rpki-client