Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: 1T+zFuGxm70tDtTbGrV/Ihc+G2w44vWtLD2/tijejO4=
Subject key identifier: E4:CF:63:39:FB:79:0A:3B:5F:F3:FD:63:D5:B2:AB:78:5D:E1:60:50
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019CB05ACF97A35FAF10C664A5926B36D2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0451
Signing time: Mon 02 Mar 2026 21:01:07 +0000
Manifest this update: Mon 02 Mar 2026 21:01:07 +0000
Manifest next update: Tue 03 Mar 2026 21:01:07 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: GMtECy1o82M6HvGOobRNjm0pb0i3ojmvXFvCgtajSFA=)
2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:cf:97:a3:5f:af:10:c6:64:a5:92:6b:36:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Mar 2 21:01:07 2026 GMT
Not After : Mar 3 21:01:07 2026 GMT
Subject: CN=e4cf6339fb790a3b5ff3fd63d5b2ab785de16050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:54:a0:10:2f:d9:84:16:69:b8:44:84:59:
93:4f:fc:d9:4d:d2:10:cc:23:9d:11:51:6c:78:4f:
fa:73:3b:c0:cf:ba:97:92:2c:52:73:2a:a8:c5:36:
0d:d3:06:19:67:bf:2a:5b:95:8c:0a:a4:41:2a:f2:
96:3a:b9:cd:05:3b:17:2e:ee:93:d3:a5:94:ff:6a:
e4:d9:3e:dc:e1:17:a8:29:97:13:9a:90:dc:37:47:
26:6e:64:5c:9f:0f:c9:24:28:95:5e:d5:0a:ea:f4:
c1:04:51:63:ba:89:f3:1a:a4:9f:1f:3e:88:bf:74:
4b:4f:03:e9:74:ea:f8:cd:7e:be:13:12:8c:b9:bd:
3f:5d:10:b6:1f:16:76:ad:b0:ab:32:56:dc:03:e2:
70:03:35:53:d7:dc:fa:75:2d:f2:f2:8a:1c:ba:6f:
21:0e:b6:ae:5f:9b:a6:74:90:e7:98:b3:c8:16:fb:
07:6a:13:1e:11:fa:8f:cf:08:e5:86:56:e7:e6:19:
c2:02:47:58:16:91:d8:f3:a8:b0:4d:98:2a:bf:41:
79:f3:cf:c2:f7:1f:a5:79:da:ca:75:74:76:37:4e:
f1:46:72:21:2e:36:8c:da:d7:45:f5:bd:43:7a:f7:
85:ea:00:87:3b:f2:0a:05:47:2e:c4:e5:56:a0:3a:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:63:39:FB:79:0A:3B:5F:F3:FD:63:D5:B2:AB:78:5D:E1:60:50
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:4a:1d:fd:a3:4d:86:c2:90:ef:bb:50:c0:50:88:65:3b:
e0:48:ac:79:95:54:9a:40:a5:21:02:6e:e0:b4:30:e4:a5:50:
52:0b:0a:48:65:24:52:ae:9f:9d:47:6d:c1:34:19:5d:e6:48:
f2:fb:39:02:de:51:dc:ca:f6:bf:80:c6:29:29:1e:37:f5:4d:
12:11:07:c4:7d:6e:a6:40:0b:d0:9b:0b:39:c4:7d:b1:cf:db:
24:fd:69:fa:82:b1:97:a4:25:a9:02:f6:7d:fb:8b:d8:b9:d5:
86:8c:f1:2e:57:af:84:74:18:66:0e:bc:73:6c:26:9a:2e:13:
6a:e8:6f:9f:27:c0:03:34:d9:c4:ff:89:4a:1f:c8:9f:42:66:
ff:4e:28:a4:5c:a1:7f:d0:65:e0:97:6b:30:12:93:f3:53:06:
d3:98:4b:8f:d6:ca:27:ed:53:8c:2d:e5:93:85:d9:13:12:2b:
14:98:d2:55:ad:47:ed:b3:ae:2a:32:7c:db:39:16:bf:63:fc:
4d:73:ef:a2:d6:3f:81:34:1a:7b:9f:aa:84:a8:e5:88:81:dd:
01:2b:7d:cd:5e:e6:8d:00:af:bf:9a:31:21:c4:0f:72:72:ad:
ee:25:be:3c:2b:f1:18:54:f4:d8:52:a5:89:ef:6b:55:4b:12:
98:ac:b4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWs+Xo1+vEMZkpZJrNtK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh
NzBkOWEwHhcNMjYwMzAyMjEwMTA3WhcNMjYwMzAzMjEwMTA3WjAzMTEwLwYDVQQD
EyhlNGNmNjMzOWZiNzkwYTNiNWZmM2ZkNjNkNWIyYWI3ODVkZTE2MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS1UoBAv2YQWabhEhFmTT/zZTdIQ
zCOdEVFseE/6czvAz7qXkixScyqoxTYN0wYZZ78qW5WMCqRBKvKWOrnNBTsXLu6T
06WU/2rk2T7c4ReoKZcTmpDcN0cmbmRcnw/JJCiVXtUK6vTBBFFjuonzGqSfHz6I
v3RLTwPpdOr4zX6+ExKMub0/XRC2HxZ2rbCrMlbcA+JwAzVT19z6dS3y8oocum8h
DrauX5umdJDnmLPIFvsHahMeEfqPzwjlhlbn5hnCAkdYFpHY86iwTZgqv0F588/C
9x+ledrKdXR2N07xRnIhLjaM2tdF9b1DeveF6gCHO/IKBUcuxOVWoDql8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTPYzn7eQo7X/P9Y9Wyq3hd4WBQMB8GA1UdIwQY
MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt
MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3
LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUNKHf2j
TYbCkO+7UMBQiGU74EiseZVUmkClIQJu4LQw5KVQUgsKSGUkUq6fnUdtwTQZXeZI
8vs5At5R3Mr2v4DGKSkeN/VNEhEHxH1upkAL0JsLOcR9sc/bJP1p+oKxl6QlqQL2
ffuL2LnVhozxLlevhHQYZg68c2wmmi4TauhvnyfAAzTZxP+JSh/In0Jm/04opFyh
f9Bl4JdrMBKT81MG05hLj9bKJ+1TjC3lk4XZExIrFJjSVa1H7bOuKjJ82zkWv2P8
TXPvotY/gTQae5+qhKjliIHdASt9zV7mjQCvv5oxIcQPcnKt7iW+PCvxGFT02FKl
ie9rVUsSmKy0OQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:21:37 2026 by rpki-client