Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: OqkjXtFPik7BnnRIS6Ao85MX0eUeLHCWRfVQm3ogM9o=
Subject key identifier: 8C:68:FA:04:72:47:4D:31:E5:02:AC:40:44:93:80:BC:C8:56:34:AD
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019CAD5A186BAF77BA0DEB11BB46143F674D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: bWJMGHgADrhk0CBkit0ymAXHawDvqLemwhuJrbSEhE8=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:18:6b:af:77:ba:0d:eb:11:bb:46:14:3f:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=8c68fa0472474d31e502ac40449380bcc85634ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:dd:ec:73:15:c2:4b:cb:f4:e0:60:6f:a4:
aa:8b:2d:27:36:db:1c:c2:86:a9:36:f8:3e:59:5d:
71:8a:06:27:38:bb:fe:73:0b:05:36:6a:43:2c:29:
f4:4a:9d:0f:11:13:14:ec:7f:a0:e5:bd:ad:3d:e4:
13:37:eb:d7:3e:ae:31:6b:d2:79:f8:76:1d:dc:41:
41:60:36:37:46:1f:5e:a9:6b:95:bc:f3:c5:9b:7a:
73:27:64:e9:40:bf:d7:71:dc:3f:41:50:fd:c3:ca:
53:ea:e4:71:96:95:81:2f:39:ad:22:39:e7:b2:a0:
c5:6a:c0:1f:7f:36:15:95:0e:cf:28:c1:71:e8:ab:
4a:8a:f6:70:5c:f1:06:4c:74:6f:43:a7:a8:5f:08:
58:34:67:28:3a:ec:eb:2f:6c:72:ec:dd:0d:84:ee:
2b:95:f9:2d:3a:e0:3c:a8:55:4d:60:c8:cf:7f:6f:
bd:b6:da:7f:56:8d:74:11:98:d7:14:ee:aa:8b:71:
02:8b:06:55:c1:fc:ce:9a:ae:5e:e2:50:41:dc:ce:
78:3a:6d:a1:46:94:cc:29:c1:65:b5:d4:09:b7:30:
61:fc:6b:ce:56:ce:97:4a:8f:9d:ff:a6:95:68:a4:
30:21:4e:2d:e0:7a:9d:52:60:22:82:53:51:df:c3:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:FA:04:72:47:4D:31:E5:02:AC:40:44:93:80:BC:C8:56:34:AD
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b4:17:19:8e:97:44:e8:5d:90:0d:d1:90:7e:ed:42:c0:46:
6e:c0:6b:92:fc:03:ad:38:2f:34:f5:21:44:23:04:de:01:54:
e0:eb:54:6a:39:01:51:42:34:77:3c:11:25:6f:c1:91:19:35:
8a:11:57:2c:50:05:fa:f2:f1:5d:b6:5a:a2:6d:68:7a:21:6c:
2b:33:27:39:d6:28:2c:0c:cd:85:8f:c8:50:07:25:34:e4:4e:
6d:86:5f:b3:d2:59:b7:f4:de:27:71:f3:49:98:de:59:71:2f:
8a:4e:d3:7d:4f:1e:2d:8b:f8:4c:5a:a7:da:38:7b:7b:ae:7f:
7e:ea:57:fe:eb:cb:bb:c6:f2:c6:8e:1d:9a:55:57:2f:e1:5e:
b7:d4:9a:e2:f2:30:87:c9:cc:fd:f9:13:bb:86:ef:fb:77:34:
f5:8e:67:8b:2e:18:23:0b:3d:ce:35:a2:59:af:aa:7e:b7:9c:
d7:92:53:61:54:65:9b:6d:1a:a1:d8:1b:30:f8:03:e4:5c:3e:
ff:d3:20:8e:ec:03:79:b5:30:d8:b6:b2:8d:51:f5:52:3a:0a:
22:c8:37:0c:15:f7:54:8a:86:2f:cb:6a:1f:ef:f0:59:6c:7d:
be:b7:87:27:5a:de:d1:d3:55:15:03:5a:1a:d2:09:e7:8b:b0:
1a:46:75:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhhrr3e6DesRu0YUP2dNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjYwMzAyMDcwMTI4WhcNMjYwMzAzMDcwMTI4WjAzMTEwLwYDVQQD
Eyg4YzY4ZmEwNDcyNDc0ZDMxZTUwMmFjNDA0NDkzODBiY2M4NTYzNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvbd7HMVwkvL9OBgb6Sqiy0nNtsc
woapNvg+WV1xigYnOLv+cwsFNmpDLCn0Sp0PERMU7H+g5b2tPeQTN+vXPq4xa9J5
+HYd3EFBYDY3Rh9eqWuVvPPFm3pzJ2TpQL/Xcdw/QVD9w8pT6uRxlpWBLzmtIjnn
sqDFasAffzYVlQ7PKMFx6KtKivZwXPEGTHRvQ6eoXwhYNGcoOuzrL2xy7N0NhO4r
lfktOuA8qFVNYMjPf2+9ttp/Vo10EZjXFO6qi3ECiwZVwfzOmq5e4lBB3M54Om2h
RpTMKcFltdQJtzBh/GvOVs6XSo+d/6aVaKQwIU4t4HqdUmAiglNR38NXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxo+gRyR00x5QKsQESTgLzIVjStMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurQXGY6X
ROhdkA3RkH7tQsBGbsBrkvwDrTgvNPUhRCME3gFU4OtUajkBUUI0dzwRJW/BkRk1
ihFXLFAF+vLxXbZaom1oeiFsKzMnOdYoLAzNhY/IUAclNORObYZfs9JZt/TeJ3Hz
SZjeWXEvik7TfU8eLYv4TFqn2jh7e65/fupX/uvLu8byxo4dmlVXL+Fet9Sa4vIw
h8nM/fkTu4bv+3c09Y5niy4YIws9zjWiWa+qfrec15JTYVRlm20aodgbMPgD5Fw+
/9MgjuwDebUw2LayjVH1UjoKIsg3DBX3VIqGL8tqH+/wWWx9vreHJ1re0dNVFQNa
GtIJ54uwGkZ1uQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:15 2026 by rpki-client