Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: HCUdwroeGoeW33WSpQgm4ad7H63whzrk4AWOtw2pvRY=
Subject key identifier: F5:62:D4:70:67:97:F4:BF:50:00:13:3D:0D:75:6D:02:4A:D7:67:44
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019CACB4F01D2F18EB0C7C37358AAF28469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0662
Signing time: Mon 02 Mar 2026 04:01:04 +0000
Manifest this update: Mon 02 Mar 2026 04:01:04 +0000
Manifest next update: Tue 03 Mar 2026 04:01:04 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: Y2MdDILmORVipZdF5o7iDIKLYdxe/w5tgIyTWfpyLAo=)
2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f0:1d:2f:18:eb:0c:7c:37:35:8a:af:28:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Mar 2 04:01:04 2026 GMT
Not After : Mar 3 04:01:04 2026 GMT
Subject: CN=f562d4706797f4bf5000133d0d756d024ad76744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:57:f3:c4:99:a5:60:28:08:a7:34:e2:cd:
7d:c7:fd:24:52:c0:63:a2:71:b4:32:69:69:e9:a8:
41:9b:36:7e:dc:a1:fb:f0:0f:06:cb:e4:9c:23:c7:
b4:42:30:94:03:e0:16:59:2a:ce:65:ba:e6:53:ec:
b2:eb:8f:9b:11:06:12:2c:87:7c:38:fc:4c:06:94:
27:aa:77:72:c5:54:8f:59:bc:53:e1:8d:43:25:fc:
60:5d:83:ae:6c:ee:5c:b6:fb:ee:2e:ad:3b:28:31:
cf:24:54:b8:c2:eb:bf:90:94:ba:64:b5:d8:15:8b:
2b:70:9a:6e:f5:93:39:98:65:93:2f:5b:2d:c8:78:
90:72:bc:d5:bd:a2:ac:86:45:86:bd:94:b0:d9:96:
6e:3e:2b:f6:6c:4c:56:42:be:7d:92:88:e3:c0:16:
61:2a:65:75:56:e6:de:28:2b:ea:4f:ef:37:8b:91:
b5:f8:c7:0b:53:c8:26:ef:24:fd:85:77:8e:cc:c8:
ba:ba:4b:35:c8:26:41:a1:18:3b:e5:65:86:92:3c:
4b:48:dc:f0:1d:85:93:06:7f:5c:ff:7f:5f:a0:2f:
4f:28:ca:fd:09:89:90:34:d6:bd:8b:c0:e4:0b:96:
af:d4:7c:32:bf:c7:ea:26:8c:d5:40:2e:93:36:c2:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:D4:70:67:97:F4:BF:50:00:13:3D:0D:75:6D:02:4A:D7:67:44
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:eb:93:14:12:a2:63:ff:66:c0:64:f0:65:ac:a0:2c:0b:6a:
47:17:09:88:01:7a:a7:39:fe:7c:95:e2:15:46:a0:f1:62:6f:
7c:b0:1d:11:ff:4d:16:58:49:b4:85:d5:d9:1d:1d:a5:d2:7c:
3d:df:82:49:65:23:66:21:5d:f2:0e:58:a1:b4:df:01:2a:2e:
94:02:f2:8b:ad:7b:b0:f8:16:58:8c:75:3b:19:c7:ea:97:f4:
e6:74:17:17:d7:fb:55:c8:b1:0d:57:3d:25:24:eb:36:7d:ac:
ed:13:6e:14:ba:6a:61:1a:24:f3:98:59:93:ac:4c:9f:d7:8f:
99:80:cb:4f:70:bf:d1:52:53:5f:d5:d2:6e:72:ca:4a:a0:c5:
2a:bc:ef:c3:20:2f:89:6b:4d:f8:2f:9f:f4:a3:52:6c:93:9f:
13:18:28:e6:f6:cb:48:bf:b5:aa:ca:20:21:17:81:f5:65:03:
80:9a:9c:40:cc:9a:98:a2:3a:2b:7c:8a:6c:de:54:8e:b0:3f:
59:00:80:ad:00:13:56:c1:b3:c5:96:8f:94:01:7d:97:3b:e7:
7d:7f:ce:3f:18:bd:6e:fc:4c:e1:d6:7a:2c:10:be:6b:62:67:
ca:13:f6:25:38:d8:fa:bf:1f:d7:74:fb:df:97:99:1f:4f:e8:
3a:fd:7e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystPAdLxjrDHw3NYqvKEafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4
MGU2OWUwHhcNMjYwMzAyMDQwMTA0WhcNMjYwMzAzMDQwMTA0WjAzMTEwLwYDVQQD
EyhmNTYyZDQ3MDY3OTdmNGJmNTAwMDEzM2QwZDc1NmQwMjRhZDc2NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnlX88SZpWAoCKc04s19x/0kUsBj
onG0Mmlp6ahBmzZ+3KH78A8Gy+ScI8e0QjCUA+AWWSrOZbrmU+yy64+bEQYSLId8
OPxMBpQnqndyxVSPWbxT4Y1DJfxgXYOubO5ctvvuLq07KDHPJFS4wuu/kJS6ZLXY
FYsrcJpu9ZM5mGWTL1styHiQcrzVvaKshkWGvZSw2ZZuPiv2bExWQr59kojjwBZh
KmV1VubeKCvqT+83i5G1+McLU8gm7yT9hXeOzMi6uks1yCZBoRg75WWGkjxLSNzw
HYWTBn9c/39foC9PKMr9CYmQNNa9i8DkC5av1Hwyv8fqJozVQC6TNsLj3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVi1HBnl/S/UAATPQ11bQJK12dEMB8GA1UdIwQY
MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct
ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy
LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOuTFBKi
Y/9mwGTwZaygLAtqRxcJiAF6pzn+fJXiFUag8WJvfLAdEf9NFlhJtIXV2R0dpdJ8
Pd+CSWUjZiFd8g5YobTfASoulALyi617sPgWWIx1OxnH6pf05nQXF9f7VcixDVc9
JSTrNn2s7RNuFLpqYRok85hZk6xMn9ePmYDLT3C/0VJTX9XSbnLKSqDFKrzvwyAv
iWtN+C+f9KNSbJOfExgo5vbLSL+1qsogIReB9WUDgJqcQMyamKI6K3yKbN5UjrA/
WQCArQATVsGzxZaPlAF9lzvnfX/OPxi9bvxM4dZ6LBC+a2JnyhP2JTjY+r8f13T7
35eZH0/oOv1+ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:47 2026 by rpki-client