Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: aYBefJMbYvIFqp6sFHY/KDqaKpScltdQqz1RD9TZK5o=
Subject key identifier: F1:5C:48:44:AD:01:40:4B:6E:00:3D:71:F0:1E:41:19:94:9F:E9:30
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019D98F4347C0487705218192E6214B9C121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:00:34 +0000
Manifest this update: Fri 17 Apr 2026 01:00:34 +0000
Manifest next update: Sat 18 Apr 2026 01:00:34 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: ioT9RZuZCd0MR6Bh8v6yxUbkpwXM4Z+ytQN0ac3LDH8=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:34:7c:04:87:70:52:18:19:2e:62:14:b9:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Apr 17 01:00:34 2026 GMT
Not After : Apr 18 01:00:34 2026 GMT
Subject: CN=f15c4844ad01404b6e003d71f01e4119949fe930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:3c:73:69:bc:96:3b:a0:f6:84:c9:1c:8b:
9c:84:9c:4d:3e:8e:ca:ad:09:9f:e8:05:1e:f6:1d:
5d:9d:5e:a3:70:f3:c5:99:16:2c:c0:22:34:1d:06:
90:b3:4b:04:66:f1:0d:2d:a9:90:ed:19:78:20:1e:
9a:dd:3e:d5:82:de:b7:08:0d:52:a3:b2:a5:00:b9:
9f:e9:80:11:b9:32:6b:0d:fb:16:eb:ba:d5:ec:31:
bc:70:aa:21:b5:cb:ae:05:37:97:58:7f:2d:80:b2:
1b:00:3c:bb:ae:1d:b4:52:19:51:be:fc:8a:8e:4e:
ed:75:21:8b:41:37:b1:a6:b4:63:82:a5:99:20:ca:
9c:27:8d:20:12:15:7e:32:2f:87:02:c2:33:7b:a8:
f2:57:bc:98:21:ae:36:c0:24:3b:15:97:36:18:63:
43:47:73:b5:24:de:a4:fb:9c:7c:89:bd:4c:18:fa:
43:ac:ee:bd:ba:f1:7c:21:02:39:74:99:aa:a9:d1:
94:52:0c:0a:7d:12:6b:79:a9:e5:04:fc:2a:9e:1a:
af:ec:cc:65:2b:f1:ca:31:07:c7:61:df:38:39:ef:
bf:80:f0:04:1c:9b:88:cf:4a:0a:8b:ad:2a:35:30:
7f:9b:57:41:09:19:87:ff:ba:a7:40:5c:e6:2a:e8:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:48:44:AD:01:40:4B:6E:00:3D:71:F0:1E:41:19:94:9F:E9:30
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6c:14:ac:41:c2:50:19:e9:d1:93:77:47:8b:36:35:04:ba:
fe:a2:29:29:08:0a:b1:59:88:c6:10:57:5a:a8:fb:45:13:19:
56:f6:78:22:c6:96:35:f5:17:a9:3f:1c:3e:6c:82:9b:7e:b3:
22:5b:f0:7b:85:b3:5d:01:4f:07:4e:4d:49:5b:75:57:54:e4:
ea:51:f7:75:4f:62:27:e1:63:94:9a:9d:1f:3a:6d:99:38:e4:
e9:6f:bf:76:f0:19:d1:8c:ab:98:c9:99:ad:2f:20:8f:f3:aa:
c5:1a:68:32:2a:89:34:c2:7a:c3:98:d2:11:80:81:cc:29:f0:
cb:2a:44:f1:9b:f3:14:39:f2:db:16:ca:aa:44:2b:d3:18:19:
6c:35:ec:00:0a:09:d6:ac:ac:13:36:8b:75:5c:4f:51:f0:01:
65:0b:72:92:26:46:04:13:05:de:de:6d:4b:be:27:9c:2a:ed:
6d:6e:07:a9:9c:f8:d7:45:50:07:1b:52:1c:81:a2:40:41:a2:
07:d0:90:2f:95:91:44:5b:b0:55:ed:0a:c3:12:ab:b8:c6:3b:
0b:55:11:a0:8c:f7:e9:71:9b:49:70:06:3f:b0:70:ae:2a:85:
02:b9:17:e7:d4:a4:61:b6:89:5d:fd:f2:59:77:ee:54:22:86:
5d:16:3a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9DR8BIdwUhgZLmIUucEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjYwNDE3MDEwMDM0WhcNMjYwNDE4MDEwMDM0WjAzMTEwLwYDVQQD
EyhmMTVjNDg0NGFkMDE0MDRiNmUwMDNkNzFmMDFlNDExOTk0OWZlOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTk8c2m8ljug9oTJHIuchJxNPo7K
rQmf6AUe9h1dnV6jcPPFmRYswCI0HQaQs0sEZvENLamQ7Rl4IB6a3T7Vgt63CA1S
o7KlALmf6YARuTJrDfsW67rV7DG8cKohtcuuBTeXWH8tgLIbADy7rh20UhlRvvyK
jk7tdSGLQTexprRjgqWZIMqcJ40gEhV+Mi+HAsIze6jyV7yYIa42wCQ7FZc2GGND
R3O1JN6k+5x8ib1MGPpDrO69uvF8IQI5dJmqqdGUUgwKfRJreanlBPwqnhqv7Mxl
K/HKMQfHYd84Oe+/gPAEHJuIz0oKi60qNTB/m1dBCRmH/7qnQFzmKuib0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFcSEStAUBLbgA9cfAeQRmUn+kwMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2wUrEHC
UBnp0ZN3R4s2NQS6/qIpKQgKsVmIxhBXWqj7RRMZVvZ4IsaWNfUXqT8cPmyCm36z
Ilvwe4WzXQFPB05NSVt1V1Tk6lH3dU9iJ+FjlJqdHzptmTjk6W+/dvAZ0YyrmMmZ
rS8gj/OqxRpoMiqJNMJ6w5jSEYCBzCnwyypE8ZvzFDny2xbKqkQr0xgZbDXsAAoJ
1qysEzaLdVxPUfABZQtykiZGBBMF3t5tS74nnCrtbW4HqZz410VQBxtSHIGiQEGi
B9CQL5WRRFuwVe0KwxKruMY7C1URoIz36XGbSXAGP7BwriqFArkX59SkYbaJXf3y
WXfuVCKGXRY6HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:38 2026 by rpki-client