Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: 7xJZoo3wdjdfVUidOoFijiut8pO3vkDOoAhwsNZotwQ=
Subject key identifier: C5:DB:B2:31:7D:2C:86:21:27:82:7C:4D:B5:65:22:E3:AB:65:39:D3
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019CA97C930C63BE7F5F70CDF9074058005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 13:00:39 +0000
Manifest this update: Sun 01 Mar 2026 13:00:39 +0000
Manifest next update: Mon 02 Mar 2026 13:00:39 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: c5XROnSwirkDfm8nn0ScXdRuj1W0NNUjy1QEcuTl4rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:93:0c:63:be:7f:5f:70:cd:f9:07:40:58:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Mar 1 13:00:39 2026 GMT
Not After : Mar 2 13:00:39 2026 GMT
Subject: CN=c5dbb2317d2c862127827c4db56522e3ab6539d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:b9:4e:27:39:93:99:fd:4a:83:2e:c1:51:
1d:b1:c8:15:4b:1e:2f:46:52:f9:0d:f0:8d:8c:ce:
9e:c8:25:65:a3:8d:8f:7f:cd:d5:13:ad:4f:29:7d:
24:a3:ae:f4:15:21:20:fe:88:7c:7d:d0:81:d8:f7:
1a:95:5d:69:32:ba:ad:05:7d:61:02:86:37:e8:57:
b5:ac:28:2c:bb:fb:5b:d6:c8:db:41:e5:44:50:25:
d4:82:e6:42:a1:ba:29:ce:e2:3f:28:17:78:3d:b6:
cd:57:b5:75:bf:a7:ab:56:8d:d6:8a:c5:7d:7c:90:
86:85:b8:ad:c7:a9:07:7d:52:1a:30:23:5e:c8:a3:
f1:19:35:fe:1f:d6:a4:13:2d:2c:51:e6:23:96:ef:
b9:30:68:fb:4a:7f:7a:ef:7a:75:a1:26:cb:6b:2b:
4b:a0:5c:8b:c3:c1:26:aa:f3:d5:8d:36:7f:d5:d2:
7f:c6:b4:a6:19:9b:cc:8e:de:e5:77:86:86:ff:9c:
06:67:18:77:7e:8b:ec:c9:73:85:8e:55:c1:a0:e1:
68:a1:dd:69:67:0f:17:bd:7b:91:3b:2b:c5:96:ee:
81:a0:eb:95:ef:d8:ed:5c:9a:a3:fb:ae:cd:b0:cd:
d3:8f:cd:22:9d:79:0f:10:80:19:67:dc:af:84:56:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:B2:31:7D:2C:86:21:27:82:7C:4D:B5:65:22:E3:AB:65:39:D3
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b5:aa:8f:63:ef:ed:69:b2:7c:c8:a4:39:c8:12:ca:b6:4d:
4d:95:33:15:f4:8d:11:c6:33:1d:64:34:7d:87:19:7f:3f:45:
9d:90:4b:53:bf:6b:02:84:23:c4:51:55:c4:6c:0e:54:87:07:
57:ef:fe:94:0b:46:75:49:2d:1c:63:10:cf:44:ea:9a:12:b9:
2f:ae:7d:e0:df:7f:4c:cc:09:68:3f:21:63:f1:f2:72:88:3b:
bb:31:df:e2:39:81:07:c0:5f:d4:0f:14:a7:b2:c8:aa:2c:f8:
f8:1b:34:cb:85:2a:e1:61:9a:2e:72:41:b7:f6:30:0c:8c:a7:
63:46:1e:4f:12:53:80:82:6a:14:4d:72:34:05:4c:f9:f9:60:
51:ad:3f:1f:82:5f:0d:5e:40:7a:31:b2:36:bb:13:55:41:ea:
cd:e7:0e:21:64:b5:c2:c9:2a:d4:e4:c9:55:17:2d:2d:9d:3f:
fe:1d:69:d0:41:8a:61:0a:8a:e7:d6:7f:fb:d5:31:24:2f:bb:
39:88:8d:7d:f4:3b:45:c1:65:0f:3b:60:75:d3:57:fd:bb:81:
15:10:12:0e:6b:2d:09:5c:af:c0:57:3c:49:bf:a3:e7:35:1a:
e0:6e:b7:62:49:ca:27:60:5c:43:fa:d2:0c:e2:64:90:b8:fa:
f5:34:b3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfJMMY75/X3DN+QdAWABaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx
ODAzZmYwHhcNMjYwMzAxMTMwMDM5WhcNMjYwMzAyMTMwMDM5WjAzMTEwLwYDVQQD
EyhjNWRiYjIzMTdkMmM4NjIxMjc4MjdjNGRiNTY1MjJlM2FiNjUzOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBm5Tic5k5n9SoMuwVEdscgVSx4v
RlL5DfCNjM6eyCVlo42Pf83VE61PKX0ko670FSEg/oh8fdCB2PcalV1pMrqtBX1h
AoY36Fe1rCgsu/tb1sjbQeVEUCXUguZCobopzuI/KBd4PbbNV7V1v6erVo3WisV9
fJCGhbitx6kHfVIaMCNeyKPxGTX+H9akEy0sUeYjlu+5MGj7Sn9673p1oSbLaytL
oFyLw8EmqvPVjTZ/1dJ/xrSmGZvMjt7ld4aG/5wGZxh3fovsyXOFjlXBoOFood1p
Zw8XvXuROyvFlu6BoOuV79jtXJqj+67NsM3Tj80inXkPEIAZZ9yvhFapGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXbsjF9LIYhJ4J8TbVlIuOrZTnTMB8GA1UdIwQY
MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt
ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi
LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabWqj2Pv
7WmyfMikOcgSyrZNTZUzFfSNEcYzHWQ0fYcZfz9FnZBLU79rAoQjxFFVxGwOVIcH
V+/+lAtGdUktHGMQz0TqmhK5L6594N9/TMwJaD8hY/Hycog7uzHf4jmBB8Bf1A8U
p7LIqiz4+Bs0y4Uq4WGaLnJBt/YwDIynY0YeTxJTgIJqFE1yNAVM+flgUa0/H4Jf
DV5AejGyNrsTVUHqzecOIWS1wskq1OTJVRctLZ0//h1p0EGKYQqK59Z/+9UxJC+7
OYiNffQ7RcFlDztgddNX/buBFRASDmstCVyvwFc8Sb+j5zUa4G63YknKJ2BcQ/rS
DOJkkLj69TSzhA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:54 2026 by rpki-client