Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: 7hLU9PDB5ZChL8l4GfZ+/tG1nrUWuuFpEZVzHnCsrlI=
Subject key identifier: D1:D6:DB:A7:2A:9A:B6:48:FA:51:30:41:99:22:BE:E8:44:E4:9B:F2
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019CAC10480E57B1B27484ADF58C5804D346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1738
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: yrhgnNd/m6csFrTd9DuWZocAudnbuz6OBlFIPQV7/Tg=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:48:0e:57:b1:b2:74:84:ad:f5:8c:58:04:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=d1d6dba72a9ab648fa5130419922bee844e49bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:07:20:b8:8b:34:d6:c4:bf:a8:77:bb:c4:
b7:9a:c0:9f:f7:70:f3:d5:74:10:cf:77:a5:8c:45:
1a:09:70:d1:4a:a7:e2:9e:4e:d6:68:86:12:0f:dd:
4a:e5:e8:5a:f5:c0:51:8a:09:33:ca:30:82:67:96:
f3:88:71:8c:6d:95:76:c0:04:8c:53:07:85:6a:6f:
67:82:82:03:fc:d5:82:f3:7d:96:26:bc:7e:25:d7:
85:73:d8:05:bf:ad:5b:2c:ba:59:2e:8a:6f:e6:f1:
bf:98:d0:c7:44:50:a1:af:dd:ff:af:80:4e:91:5d:
ed:1e:94:09:51:2a:8f:6e:bd:e8:f7:ec:ab:0b:bb:
7c:81:3b:eb:ab:73:4a:21:dd:dc:48:d0:43:3f:a3:
9a:0e:41:43:55:9d:00:bc:c3:cd:f7:38:83:d4:d2:
f7:82:84:b9:f5:1e:57:2b:e4:93:71:1b:57:dd:d8:
8e:46:ec:65:32:9f:0f:9b:22:d8:49:4a:f8:e2:f8:
26:2a:21:4e:66:48:a9:0b:73:8f:a2:f5:f9:96:ad:
0a:a6:df:65:07:c2:31:b8:f6:cf:8a:ce:40:68:7d:
5c:dd:e0:64:49:ae:be:46:34:f6:8a:1b:f4:df:dd:
a1:2e:6a:fd:d2:55:a4:60:fd:4f:5a:38:c0:4d:d5:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:DB:A7:2A:9A:B6:48:FA:51:30:41:99:22:BE:E8:44:E4:9B:F2
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:03:19:74:ec:99:69:af:6f:8b:46:d1:9f:fd:0b:8f:12:01:
65:b6:1b:ad:e6:3f:8f:5e:5b:f6:4d:e5:c7:d1:3f:b3:49:b6:
d5:c8:d3:c9:26:f2:91:19:ac:43:9a:aa:6d:1b:6c:f0:b7:93:
62:24:de:2d:5d:d9:a1:0b:bc:bd:40:c4:5d:2d:bc:81:b8:d7:
78:0c:13:61:a3:67:e6:03:81:b4:2d:39:11:a0:e6:8b:a3:90:
f9:73:cd:ed:4f:d1:c0:07:76:8e:75:96:a0:3a:52:28:aa:40:
55:46:5c:c9:87:07:6f:b0:fb:42:c1:32:a2:28:ae:07:91:b0:
c6:8e:08:be:73:bf:af:a3:55:79:cc:c7:1d:10:ab:81:d4:02:
31:79:7f:f1:73:07:1c:08:b5:ef:24:c3:65:ed:28:5d:c2:7a:
35:a1:aa:b7:74:0b:0d:94:3f:63:8b:56:87:de:ec:51:18:aa:
05:2b:98:91:be:4d:86:36:9a:68:01:31:46:08:61:34:cf:a0:
44:85:a6:53:25:bc:da:c4:75:01:57:64:51:92:c9:9e:01:3d:
fc:2f:b0:f2:d4:d4:9a:32:a6:cb:af:72:8b:bd:59:38:95:5d:
6d:d8:b5:ee:16:f2:fb:34:9b:c5:f5:3f:4a:b9:82:8b:d5:14:
e3:f6:d7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEEgOV7GydISt9YxYBNNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjYwMzAyMDEwMTEzWhcNMjYwMzAzMDEwMTEzWjAzMTEwLwYDVQQD
EyhkMWQ2ZGJhNzJhOWFiNjQ4ZmE1MTMwNDE5OTIyYmVlODQ0ZTQ5YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qkHILiLNNbEv6h3u8S3msCf93Dz
1XQQz3eljEUaCXDRSqfink7WaIYSD91K5eha9cBRigkzyjCCZ5bziHGMbZV2wASM
UweFam9ngoID/NWC832WJrx+JdeFc9gFv61bLLpZLopv5vG/mNDHRFChr93/r4BO
kV3tHpQJUSqPbr3o9+yrC7t8gTvrq3NKId3cSNBDP6OaDkFDVZ0AvMPN9ziD1NL3
goS59R5XK+STcRtX3diORuxlMp8PmyLYSUr44vgmKiFOZkipC3OPovX5lq0Kpt9l
B8IxuPbPis5AaH1c3eBkSa6+RjT2ihv0392hLmr90lWkYP1PWjjATdXuAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHW26cqmrZI+lEwQZkivuhE5JvyMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwMZdOyZ
aa9vi0bRn/0LjxIBZbYbreY/j15b9k3lx9E/s0m21cjTySbykRmsQ5qqbRts8LeT
YiTeLV3ZoQu8vUDEXS28gbjXeAwTYaNn5gOBtC05EaDmi6OQ+XPN7U/RwAd2jnWW
oDpSKKpAVUZcyYcHb7D7QsEyoiiuB5Gwxo4IvnO/r6NVeczHHRCrgdQCMXl/8XMH
HAi17yTDZe0oXcJ6NaGqt3QLDZQ/Y4tWh97sURiqBSuYkb5NhjaaaAExRghhNM+g
RIWmUyW82sR1AVdkUZLJngE9/C+w8tTUmjKmy69yi71ZOJVdbdi17hby+zSbxfU/
SrmCi9UU4/bXmQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:28 2026 by rpki-client