Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: VPQAN+YaRYjbJNncWr5VxNsKri6MtgomDkcCbFVblmY=
Subject key identifier: 32:3D:5B:48:67:39:78:3A:F5:4A:04:1D:B5:16:A4:67:8C:4F:AD:48
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019CAA900B4EA80EF4673426D7283FCAB37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 1735
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: vMGCdpv4ObiED5YsDGKTa99aZ0z382DwXYBMUjtO9iE=)
2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0b:4e:a8:0e:f4:67:34:26:d7:28:3f:ca:b3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=323d5b486739783af54a041db516a4678c4fad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:e3:44:d0:66:45:9a:e1:15:36:b8:de:12:
4d:99:1f:52:d9:88:cb:03:77:28:5a:35:26:38:ca:
ae:e4:40:af:4d:51:46:56:dd:f2:1c:0e:24:1e:18:
68:91:1b:ae:7a:d3:f9:bb:8e:dc:b9:06:d9:25:81:
c1:a1:62:4f:aa:09:39:ad:22:00:95:ee:56:f8:37:
cc:01:92:09:34:c6:b3:2b:8d:b5:fe:11:3f:74:a9:
8a:81:5d:11:1e:e1:2c:53:4a:7b:1a:8d:0a:28:ac:
bc:8f:94:c4:7a:cf:74:0e:e1:b6:ef:25:f8:7d:2d:
d0:cf:ab:51:f3:3c:01:3e:8a:fe:b3:6b:4f:01:30:
c7:fb:0c:32:83:ee:65:b2:8d:84:04:82:dd:ba:f1:
54:e2:e2:56:6c:d6:6f:d1:d5:04:ba:26:c2:17:b3:
d8:63:9e:c5:f3:82:f5:d8:22:c3:1e:37:c7:6b:70:
b1:8a:71:d5:a7:bc:da:f7:16:09:9b:6c:5c:3e:48:
4e:c1:d2:db:54:00:20:9d:b5:d6:38:db:8f:df:b8:
f5:98:50:c9:5a:a3:21:60:17:84:47:46:90:36:b6:
e0:98:0e:a7:1b:e5:a7:b2:fe:95:70:51:f1:13:72:
08:67:93:1a:5f:2b:e3:be:da:dd:6e:cd:3a:f4:fa:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:5B:48:67:39:78:3A:F5:4A:04:1D:B5:16:A4:67:8C:4F:AD:48
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:37:cf:04:a8:73:ca:08:fb:e5:11:7b:da:ff:1d:ac:b1:
87:27:43:5a:2e:0f:13:48:98:60:27:c2:00:ee:cd:fc:a6:30:
7d:c7:27:bc:da:55:40:a6:fb:35:bf:a1:d9:40:49:ab:57:7f:
6d:8f:52:96:28:a5:09:7e:48:d4:1a:01:2f:72:60:21:2a:55:
a3:78:4b:ec:d5:2b:0b:76:39:b5:9b:87:dd:c8:61:71:b2:86:
6c:c5:e2:8e:4e:4d:ab:2a:22:d1:47:a5:aa:e0:72:67:8e:e2:
0b:b9:64:a5:46:c4:b5:4c:be:e7:83:6b:f3:27:f2:27:52:86:
1e:f2:54:2a:94:8b:b8:47:58:1b:73:4f:8a:65:0f:bf:50:38:
78:f2:dc:8b:f3:14:d5:66:28:85:13:55:f1:cf:c0:59:b4:2e:
b1:b4:06:0a:26:1b:8f:9f:23:a1:04:30:df:71:d1:7a:0b:ce:
9b:22:62:24:93:3e:fc:f8:4f:3a:6f:2b:0c:04:41:60:99:a0:
1d:e3:b3:88:a0:95:34:5c:17:ad:d1:5c:c7:7c:a5:98:24:fc:
1a:f0:3e:d6:63:8d:f9:b4:b1:e1:21:3e:db:86:ef:9c:39:e2:
bc:b9:c9:59:8d:48:b4:4f:9d:84:93:40:1b:78:ed:8e:46:48:
6b:a6:ff:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkAtOqA70ZzQm1yg/yrN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjYwMzAxMTgwMTMyWhcNMjYwMzAyMTgwMTMyWjAzMTEwLwYDVQQD
EygzMjNkNWI0ODY3Mzk3ODNhZjU0YTA0MWRiNTE2YTQ2NzhjNGZhZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDvjRNBmRZrhFTa43hJNmR9S2YjL
A3coWjUmOMqu5ECvTVFGVt3yHA4kHhhokRuuetP5u47cuQbZJYHBoWJPqgk5rSIA
le5W+DfMAZIJNMazK421/hE/dKmKgV0RHuEsU0p7Go0KKKy8j5TEes90DuG27yX4
fS3Qz6tR8zwBPor+s2tPATDH+wwyg+5lso2EBILduvFU4uJWbNZv0dUEuibCF7PY
Y57F84L12CLDHjfHa3CxinHVp7za9xYJm2xcPkhOwdLbVAAgnbXWONuP37j1mFDJ
WqMhYBeER0aQNrbgmA6nG+Wnsv6VcFHxE3IIZ5MaXyvjvtrdbs069Pq8ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI9W0hnOXg69UoEHbUWpGeMT61IMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazg3zwSo
c8oI++URe9r/HayxhydDWi4PE0iYYCfCAO7N/KYwfccnvNpVQKb7Nb+h2UBJq1d/
bY9SliilCX5I1BoBL3JgISpVo3hL7NUrC3Y5tZuH3chhcbKGbMXijk5Nqyoi0Uel
quByZ47iC7lkpUbEtUy+54Nr8yfyJ1KGHvJUKpSLuEdYG3NPimUPv1A4ePLci/MU
1WYohRNV8c/AWbQusbQGCiYbj58joQQw33HRegvOmyJiJJM+/PhPOm8rDARBYJmg
HeOziKCVNFwXrdFcx3ylmCT8GvA+1mON+bSx4SE+24bvnDnivLnJWY1ItE+dhJNA
G3jtjkZIa6b/mQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:03 2026 by rpki-client