Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier: aOoX7KUdwqj6I2nk8oH+mJO2bA6SIorpZHXirTskHl4=
Subject key identifier: 5A:7A:DA:12:82:58:AB:A7:55:2B:69:1F:45:CF:10:CE:2C:05:DD:BF
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 019CADC79886354810C615CBE87F99D82EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number: 0C2D
Signing time: Mon 02 Mar 2026 09:01:04 +0000
Manifest this update: Mon 02 Mar 2026 09:01:04 +0000
Manifest next update: Tue 03 Mar 2026 09:01:04 +0000
Files and hashes: 1: UiW9TcEusiItMBq7nV2nhZZMmD4.roa (hash: QFbJs2g7PxyJWfYn1SH51WxmFD2sPMhhQe/rD/6hstw=)
2: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: T/byeswr4x77VqP3yHR+QFyS0/f+E55cq58bEjJWHWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:98:86:35:48:10:c6:15:cb:e8:7f:99:d8:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Mar 2 09:01:04 2026 GMT
Not After : Mar 3 09:01:04 2026 GMT
Subject: CN=5a7ada128258aba7552b691f45cf10ce2c05ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:5b:d5:c1:16:90:10:24:e1:db:be:4d:a3:
25:8f:c6:d8:42:13:37:33:e8:a8:eb:bc:e9:6c:48:
dd:1e:c7:9d:25:3c:8b:25:b2:fb:75:39:34:08:84:
26:6f:60:80:35:a7:3c:56:ef:5a:6d:fd:87:61:1c:
3d:0d:f1:f6:c4:d7:a9:77:3f:4c:99:22:c2:32:62:
a9:33:b2:f9:ac:24:50:01:e1:00:2f:e3:d2:69:3e:
d2:5a:9a:f4:f6:7d:fa:a8:46:14:f2:f8:ad:04:1d:
dd:5f:28:f3:72:cb:bd:bf:d2:42:c9:54:5b:40:57:
d7:49:5d:33:b8:f4:1e:6d:cc:a5:f6:d1:3d:3b:5c:
1a:28:13:c2:b4:33:f0:d3:99:6e:70:19:2f:45:02:
6e:e4:35:84:db:fd:46:22:79:f2:27:fd:f5:2d:77:
f8:e0:39:27:6d:e8:c1:4e:f5:0a:e9:6e:7f:07:7d:
70:f6:f4:a0:65:9f:4b:f7:1a:83:10:3d:30:30:b3:
75:45:79:a7:f5:71:49:38:d6:45:9f:15:46:e5:43:
2e:7b:3d:f5:86:77:be:d7:c0:cd:47:fb:4e:84:50:
08:7d:e4:ce:cd:ea:4d:94:e4:56:df:ff:17:8e:ac:
62:42:0e:7b:5a:65:42:f5:37:a5:9d:a5:10:28:99:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:DA:12:82:58:AB:A7:55:2B:69:1F:45:CF:10:CE:2C:05:DD:BF
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5b:9a:71:99:22:42:03:63:c3:32:f3:16:db:70:d6:7c:4c:
95:48:54:a0:6a:04:69:04:ff:3a:c8:30:c7:59:72:31:b0:08:
4e:b2:b2:45:06:2d:44:39:51:18:96:12:43:36:85:2c:e7:65:
e5:2a:4f:1c:89:28:1c:f4:17:b3:c6:ac:e2:b7:cb:f2:1d:58:
cc:ad:8c:f8:48:48:ef:4f:9a:32:95:0a:e9:43:08:aa:fe:d8:
73:8a:bb:2b:ce:da:18:6e:d1:03:30:ef:81:17:9e:8f:fb:5e:
4d:36:e1:6e:4d:72:f4:69:42:8b:44:5f:a5:26:32:9b:31:ff:
53:18:df:b5:f7:a1:6d:32:b0:04:a3:2d:e0:d6:d3:d7:a0:72:
a6:bb:c3:42:5f:f3:1e:1b:dc:d3:95:9b:6c:0e:e4:f0:9e:54:
87:7e:f5:73:99:5f:e8:37:5f:78:07:2e:30:83:31:08:dd:3c:
c4:c5:e8:1c:9f:be:47:00:0d:16:82:f8:23:bd:25:74:75:c9:
5b:70:19:ec:05:1b:a8:5a:75:5a:f9:ee:c8:ee:fa:1d:33:8a:
ab:69:b2:82:29:1c:63:72:5f:a9:6e:7b:bb:2d:b7:11:69:83:
26:73:65:70:2e:23:4d:12:0c:00:91:74:f9:bb:31:fe:d2:94:
77:1d:8a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx5iGNUgQxhXL6H+Z2C7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDEzNmMzY2RiZmQ1ZmI2MGNhZmQ0YTliMWQ0NzNhM2I2
NzI2MzUwHhcNMjYwMzAyMDkwMTA0WhcNMjYwMzAzMDkwMTA0WjAzMTEwLwYDVQQD
Eyg1YTdhZGExMjgyNThhYmE3NTUyYjY5MWY0NWNmMTBjZTJjMDVkZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMlb1cEWkBAk4du+TaMlj8bYQhM3
M+io67zpbEjdHsedJTyLJbL7dTk0CIQmb2CANac8Vu9abf2HYRw9DfH2xNepdz9M
mSLCMmKpM7L5rCRQAeEAL+PSaT7SWpr09n36qEYU8vitBB3dXyjzcsu9v9JCyVRb
QFfXSV0zuPQebcyl9tE9O1waKBPCtDPw05lucBkvRQJu5DWE2/1GInnyJ/31LXf4
4DknbejBTvUK6W5/B31w9vSgZZ9L9xqDED0wMLN1RXmn9XFJONZFnxVG5UMuez31
hne+18DNR/tOhFAIfeTOzepNlORW3/8XjqxiQg57WmVC9TelnaUQKJlcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp62hKCWKunVStpH0XPEM4sBd2/MB8GA1UdIwQY
MBaAFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMt
ZTRkZjVhODdkNGVkLzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMtZTRkZjVhODdkNGVk
LzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaluacZki
QgNjwzLzFttw1nxMlUhUoGoEaQT/Osgwx1lyMbAITrKyRQYtRDlRGJYSQzaFLOdl
5SpPHIkoHPQXs8as4rfL8h1YzK2M+EhI70+aMpUK6UMIqv7Yc4q7K87aGG7RAzDv
gReej/teTTbhbk1y9GlCi0RfpSYymzH/UxjftfehbTKwBKMt4NbT16ByprvDQl/z
Hhvc05WbbA7k8J5Uh371c5lf6DdfeAcuMIMxCN08xMXoHJ++RwANFoL4I70ldHXJ
W3AZ7AUbqFp1WvnuyO76HTOKq2mygikcY3JfqW57uy23EWmDJnNlcC4jTRIMAJF0
+bsx/tKUdx2Kng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:09 2026 by rpki-client