Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: NIj5zz380ltHErQtn8fv5rV5J6lsDX/HJUL4ZIM+f1I=
Subject key identifier: EB:D6:C7:F5:80:D1:2B:DF:B8:61:94:1C:06:5E:78:F3:BD:49:6A:3A
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019CAD908248EE7BDE2EC17F923E6B5D464D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0E52
Signing time: Mon 02 Mar 2026 08:00:54 +0000
Manifest this update: Mon 02 Mar 2026 08:00:54 +0000
Manifest next update: Tue 03 Mar 2026 08:00:54 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: 8LJKxRylC5poCH/CtIqSb1lLVJoTOg2CabXJfvpLJD4=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:82:48:ee:7b:de:2e:c1:7f:92:3e:6b:5d:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Mar 2 08:00:54 2026 GMT
Not After : Mar 3 08:00:54 2026 GMT
Subject: CN=ebd6c7f580d12bdfb861941c065e78f3bd496a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:b8:c8:8d:0f:19:49:74:80:34:36:66:0e:
02:de:39:c1:d5:ed:58:51:cc:9f:86:60:3e:cc:2b:
b8:53:8a:54:ff:37:5e:d6:84:68:d4:b3:bc:d4:31:
80:b7:cc:9a:2a:c0:61:8b:d1:8e:ae:44:5e:8a:62:
01:0c:bd:ae:e7:e4:9e:39:50:10:49:2b:f2:0e:bb:
f2:72:a4:66:8f:fe:74:07:df:c2:83:6a:a6:4a:1b:
eb:79:92:00:16:f6:ac:4f:dc:03:45:c4:d4:30:51:
69:66:09:1b:45:e1:46:73:4f:18:e7:6c:14:49:9b:
9e:5b:4f:de:62:4a:33:dd:19:eb:50:78:e8:d8:93:
4e:5a:53:ac:ea:ed:18:7d:8a:43:48:2d:11:9d:66:
28:41:f6:d8:bf:6d:c9:13:be:73:9b:22:b4:cc:94:
35:4f:0c:e1:bb:38:c3:e7:00:ab:a0:7e:50:75:70:
b5:3c:39:6c:e9:3b:9a:15:c4:1b:8a:c1:f8:0a:f9:
09:bd:22:40:21:b6:08:19:79:f4:dc:44:03:4d:90:
37:6c:1c:9f:e3:a6:fa:01:08:d1:99:c6:33:26:5d:
33:75:d0:f4:42:a6:fe:c8:12:03:0d:63:3c:c9:f7:
f7:78:ff:c2:85:26:ec:0d:3f:97:f8:43:12:3d:6c:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D6:C7:F5:80:D1:2B:DF:B8:61:94:1C:06:5E:78:F3:BD:49:6A:3A
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:17:70:7b:ad:3d:d4:1a:25:02:00:5f:66:1d:94:c5:b9:
4e:bd:ab:7a:c5:49:bb:3d:66:da:fe:5a:ff:55:68:ed:19:0b:
ec:8c:0f:fb:f2:26:97:c0:02:01:91:7f:e9:26:15:6a:40:d8:
44:16:00:ea:75:ad:18:43:90:78:40:78:6c:51:e8:4d:53:a4:
18:77:2f:b2:9d:ab:87:a6:b7:dd:06:60:3a:d2:88:26:db:e4:
f7:d9:d9:8d:fd:c0:66:65:ad:4b:5f:18:71:61:b5:45:2d:42:
8f:a4:1f:0f:e6:5b:b5:f9:d5:91:f9:0d:da:24:c7:42:a9:2c:
28:b0:f8:d1:01:cc:91:bb:e8:a0:5d:d2:b3:24:a0:ad:8e:53:
f7:70:76:b6:b2:c3:eb:0b:f3:68:db:49:d7:13:af:21:05:d9:
a8:17:60:52:1e:6b:62:65:8b:a6:95:8a:47:63:7a:a9:83:b7:
89:2f:3a:76:fe:e9:a5:bb:89:96:1a:be:e8:d4:33:67:3a:2b:
e8:57:7f:44:ec:10:03:ac:41:fe:fe:ce:5b:b8:ce:ae:8c:ae:
36:b5:53:3b:c2:5f:cb:1c:28:c3:35:5e:2a:16:9f:45:c2:34:
e8:9b:3c:07:33:23:3c:05:a2:8c:e0:05:91:11:5d:f9:5c:96:
31:f0:18:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIJI7nveLsF/kj5rXUZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw
YTI5YzAwHhcNMjYwMzAyMDgwMDU0WhcNMjYwMzAzMDgwMDU0WjAzMTEwLwYDVQQD
EyhlYmQ2YzdmNTgwZDEyYmRmYjg2MTk0MWMwNjVlNzhmM2JkNDk2YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaK4yI0PGUl0gDQ2Zg4C3jnB1e1Y
UcyfhmA+zCu4U4pU/zde1oRo1LO81DGAt8yaKsBhi9GOrkReimIBDL2u5+SeOVAQ
SSvyDrvycqRmj/50B9/Cg2qmShvreZIAFvasT9wDRcTUMFFpZgkbReFGc08Y52wU
SZueW0/eYkoz3RnrUHjo2JNOWlOs6u0YfYpDSC0RnWYoQfbYv23JE75zmyK0zJQ1
TwzhuzjD5wCroH5QdXC1PDls6TuaFcQbisH4CvkJvSJAIbYIGXn03EQDTZA3bByf
46b6AQjRmcYzJl0zddD0Qqb+yBIDDWM8yff3eP/ChSbsDT+X+EMSPWyW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvWx/WA0SvfuGGUHAZeePO9SWo6MB8GA1UdIwQY
MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt
NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk
LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg40XcHut
PdQaJQIAX2YdlMW5Tr2resVJuz1m2v5a/1Vo7RkL7IwP+/Iml8ACAZF/6SYVakDY
RBYA6nWtGEOQeEB4bFHoTVOkGHcvsp2rh6a33QZgOtKIJtvk99nZjf3AZmWtS18Y
cWG1RS1Cj6QfD+ZbtfnVkfkN2iTHQqksKLD40QHMkbvooF3SsySgrY5T93B2trLD
6wvzaNtJ1xOvIQXZqBdgUh5rYmWLppWKR2N6qYO3iS86dv7ppbuJlhq+6NQzZzor
6Fd/ROwQA6xB/v7OW7jOroyuNrVTO8JfyxwowzVeKhafRcI06Js8BzMjPAWijOAF
kRFd+VyWMfAY+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:11 2026 by rpki-client