Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: YNBPuo5Xu65TaXbd+bmDnQjv8C1Dnu/NvSLjJzLAsho=
Subject key identifier: 41:FA:B7:DF:58:2A:B1:E1:7E:BE:26:CB:10:15:00:88:BD:B4:F9:D1
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019CACEBA5CC1E68995450931BEE7C3A1B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 135E
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: elz36iDSmhBr63aUz+C1rQPUPTosKcaHH3YaQvuwRyk=)
2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a5:cc:1e:68:99:54:50:93:1b:ee:7c:3a:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=41fab7df582ab1e17ebe26cb10150088bdb4f9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:17:b8:9a:5d:20:0d:1a:f4:f7:0b:51:be:
e5:2b:75:1c:3b:80:8d:96:d8:36:ac:f8:22:3e:51:
53:0d:bd:53:d4:6d:0d:4a:c6:bd:4d:6a:7e:6f:82:
4a:3d:ac:d3:3e:59:4d:b9:4a:8f:ae:44:85:d8:0f:
af:0e:00:02:9b:0a:d7:ad:c9:d7:d5:1a:44:c2:5c:
33:c1:88:6b:ad:d3:94:e8:66:aa:67:9e:00:48:7b:
32:13:82:84:f4:69:12:61:4a:cb:7c:a0:00:b3:ed:
70:57:3b:94:cc:29:47:91:54:f5:8b:6a:e4:87:5c:
df:84:a3:cb:cf:d3:6b:d7:08:d8:01:3e:12:07:fc:
40:21:36:1b:94:4f:38:ea:4a:22:ff:af:3c:8c:e8:
07:3a:74:c5:a9:a7:28:d2:31:a0:84:c9:06:29:6e:
de:f4:b7:7c:76:77:6d:e7:46:ad:5d:24:11:a3:ac:
d9:6c:85:56:fc:04:a4:23:59:0c:9d:a6:58:0e:95:
a5:11:90:85:05:04:7a:91:3f:ed:2e:d0:cb:58:f9:
12:45:34:f4:2d:7b:3e:12:4d:39:c0:1a:20:c6:fd:
4a:3e:c9:0c:b5:95:20:14:ef:52:43:02:e1:69:85:
e1:38:01:f2:1a:47:ca:94:1e:97:b2:1f:d3:7e:63:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FA:B7:DF:58:2A:B1:E1:7E:BE:26:CB:10:15:00:88:BD:B4:F9:D1
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:ac:5f:0f:eb:fc:3d:b3:99:c4:4b:41:65:2a:00:b1:b8:
34:79:36:b6:fd:b0:e3:cf:16:6c:1b:2e:7d:03:27:04:c2:33:
66:d0:33:5a:e6:9e:78:52:8d:53:87:93:a0:f4:14:72:c1:79:
45:98:cd:0f:b4:7a:5b:9a:91:ce:ff:2a:91:1b:36:ae:cc:2b:
a9:00:ce:e2:54:bf:61:5f:e5:9b:ee:52:49:d3:03:e6:a2:31:
0d:06:9a:dc:db:a3:54:8a:85:48:56:10:7a:42:7d:d6:31:e5:
e0:4e:db:fe:7c:aa:aa:4a:7e:b2:ba:a4:72:76:a6:65:40:8e:
84:3c:c7:9e:cf:2d:d1:38:03:3c:90:c9:16:d4:85:8c:d1:13:
fd:b5:5d:2e:cf:57:d3:34:91:34:15:f4:b9:b5:0c:ea:1f:9f:
43:71:79:f7:76:b7:68:22:05:ae:b1:ae:e6:b9:86:46:56:d6:
a8:1b:35:83:a0:1e:26:a9:54:b7:69:0c:22:b2:da:58:15:d6:
00:bd:10:b4:00:0d:c1:76:78:df:1e:9c:2c:06:0b:4d:3e:9e:
09:2f:de:67:02:ae:b8:e4:ce:3b:6b:2c:a9:e6:50:2a:70:cc:
09:25:a9:01:ce:11:d8:21:73:bc:b6:8d:e6:d8:ca:83:3a:60:
f5:e1:84:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66XMHmiZVFCTG+58OhsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx
ODgzNWYwHhcNMjYwMzAyMDUwMDUwWhcNMjYwMzAzMDUwMDUwWjAzMTEwLwYDVQQD
Eyg0MWZhYjdkZjU4MmFiMWUxN2ViZTI2Y2IxMDE1MDA4OGJkYjRmOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUkXuJpdIA0a9PcLUb7lK3UcO4CN
ltg2rPgiPlFTDb1T1G0NSsa9TWp+b4JKPazTPllNuUqPrkSF2A+vDgACmwrXrcnX
1RpEwlwzwYhrrdOU6GaqZ54ASHsyE4KE9GkSYUrLfKAAs+1wVzuUzClHkVT1i2rk
h1zfhKPLz9Nr1wjYAT4SB/xAITYblE846koi/688jOgHOnTFqaco0jGghMkGKW7e
9Ld8dndt50atXSQRo6zZbIVW/ASkI1kMnaZYDpWlEZCFBQR6kT/tLtDLWPkSRTT0
LXs+Ek05wBogxv1KPskMtZUgFO9SQwLhaYXhOAHyGkfKlB6Xsh/TfmPNxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH6t99YKrHhfr4myxAVAIi9tPnRMB8GA1UdIwQY
MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt
OGUwYjNmNTg5N2I5LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5
LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitCsXw/r
/D2zmcRLQWUqALG4NHk2tv2w488WbBsufQMnBMIzZtAzWuaeeFKNU4eToPQUcsF5
RZjND7R6W5qRzv8qkRs2rswrqQDO4lS/YV/lm+5SSdMD5qIxDQaa3NujVIqFSFYQ
ekJ91jHl4E7b/nyqqkp+srqkcnamZUCOhDzHns8t0TgDPJDJFtSFjNET/bVdLs9X
0zSRNBX0ubUM6h+fQ3F593a3aCIFrrGu5rmGRlbWqBs1g6AeJqlUt2kMIrLaWBXW
AL0QtAANwXZ43x6cLAYLTT6eCS/eZwKuuOTOO2ssqeZQKnDMCSWpAc4R2CFzvLaN
5tjKgzpg9eGEiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:23 2026 by rpki-client