Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: st+PXNdL3vheE8u0Aias917x4g3YFw6UReMci/x7G8M=
Subject key identifier: 79:4B:20:76:24:91:E3:A0:DD:85:CD:E9:9E:48:0A:B9:B5:C1:35:69
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019D98BDE87012FA6104FE75616C88D4E1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 109D
Signing time: Fri 17 Apr 2026 00:01:15 +0000
Manifest this update: Fri 17 Apr 2026 00:01:15 +0000
Manifest next update: Sat 18 Apr 2026 00:01:15 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: 8UcQ+2rRiZNF5vgjM8mNoPhtgvbWGhv+3uKs73fa5gs=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e8:70:12:fa:61:04:fe:75:61:6c:88:d4:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Apr 17 00:01:15 2026 GMT
Not After : Apr 18 00:01:15 2026 GMT
Subject: CN=794b20762491e3a0dd85cde99e480ab9b5c13569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:a5:e6:0d:7c:a6:4a:32:0d:56:5e:72:86:
00:25:53:97:71:6c:d9:d3:59:c8:4e:6e:65:8c:17:
1f:84:09:d4:ba:27:7c:8a:2e:48:6b:1f:f6:10:91:
d0:4d:99:4e:66:7b:4d:5e:7e:70:c3:dc:7b:69:ac:
6f:6e:7c:f5:a5:34:42:71:1a:e5:c1:91:d4:b1:00:
6f:45:22:27:40:46:ba:74:6c:80:88:d6:7f:22:86:
e7:52:59:16:e2:c4:7b:d8:fe:de:42:a0:d5:01:7a:
2c:b1:e3:f4:bf:70:6e:cd:e1:ca:d7:0d:72:47:30:
98:e6:fd:ea:e6:d2:d6:1f:da:fd:8f:9b:d8:cd:ce:
df:ab:cf:f0:77:c8:67:eb:43:66:59:63:61:b7:e8:
a8:12:9b:c3:d4:c2:98:86:68:16:b6:cb:1e:02:a4:
81:91:37:eb:8a:bb:13:e5:09:26:e3:0a:ef:93:d7:
03:c2:88:c4:20:6f:17:fb:01:df:ab:91:fd:12:d7:
27:61:fa:15:fd:99:97:ac:de:88:fd:cd:94:30:49:
ca:ba:39:cc:e9:8f:41:1a:85:24:92:85:fa:9c:15:
17:22:f6:d5:a8:a9:46:ff:a7:d9:96:18:d9:c9:e5:
45:e3:1e:dc:a8:03:5c:f2:2b:6f:a4:b6:1a:00:89:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:20:76:24:91:E3:A0:DD:85:CD:E9:9E:48:0A:B9:B5:C1:35:69
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9f:bd:c1:5b:1f:f7:3d:17:1c:b4:ba:6a:e2:d3:81:1e:f6:
cc:7c:08:75:b1:8c:98:2d:71:3d:99:ef:f5:8e:3e:3e:78:53:
ca:c9:c9:3f:8e:6b:64:a9:ac:7b:21:53:cf:dd:4a:57:87:00:
07:12:b3:95:20:1a:22:40:ed:a6:a9:8f:1c:ca:06:a7:e1:86:
31:f2:c8:e5:9d:d4:44:a2:05:68:a2:e6:ea:ce:b4:b6:40:d2:
e5:42:f0:51:96:05:d0:40:fc:90:62:d4:ad:56:60:01:ac:a2:
9e:6d:9c:f0:d7:f3:cd:4f:7c:52:62:ab:1b:bc:cc:55:ee:b7:
c4:96:cb:ad:6b:1e:f1:01:cc:a1:33:3d:89:70:78:79:91:e8:
e3:b9:14:8c:77:a6:cb:04:f9:cb:dc:26:a5:03:58:28:66:c1:
33:bd:16:26:8f:b8:ac:55:a1:ab:82:00:86:ee:56:4a:9d:49:
51:cf:24:d7:e5:34:75:f8:9f:18:7a:6a:b8:6f:e5:fd:d8:b4:
62:dc:1e:34:de:18:34:82:cc:02:7c:13:e0:97:14:99:69:42:
1c:b0:8b:ca:05:07:4b:3d:c5:ec:26:a7:b6:13:a2:38:94:4c:
aa:5e:86:f6:8a:a6:d4:a6:39:69:4f:4d:a6:6b:72:88:95:5c:
00:69:cb:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvehwEvphBP51YWyI1OH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmY5YjJlOGEzMDUwOGQzOTE5MmFmZDViMzRlZTU2Zjc3
NTk3OWUwHhcNMjYwNDE3MDAwMTE1WhcNMjYwNDE4MDAwMTE1WjAzMTEwLwYDVQQD
Eyg3OTRiMjA3NjI0OTFlM2EwZGQ4NWNkZTk5ZTQ4MGFiOWI1YzEzNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Sl5g18pkoyDVZecoYAJVOXcWzZ
01nITm5ljBcfhAnUuid8ii5Iax/2EJHQTZlOZntNXn5ww9x7aaxvbnz1pTRCcRrl
wZHUsQBvRSInQEa6dGyAiNZ/IobnUlkW4sR72P7eQqDVAXosseP0v3BuzeHK1w1y
RzCY5v3q5tLWH9r9j5vYzc7fq8/wd8hn60NmWWNht+ioEpvD1MKYhmgWtsseAqSB
kTfrirsT5Qkm4wrvk9cDwojEIG8X+wHfq5H9EtcnYfoV/ZmXrN6I/c2UMEnKujnM
6Y9BGoUkkoX6nBUXIvbVqKlG/6fZlhjZyeVF4x7cqANc8itvpLYaAImHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlLIHYkkeOg3YXN6Z5ICrm1wTVpMB8GA1UdIwQY
MBaAFAwvmy6KMFCNORkq/Vs07lb3dZeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTIt
OWVkYTU3YzIzZWRmLzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTItOWVkYTU3YzIzZWRm
LzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5+9wVsf
9z0XHLS6auLTgR72zHwIdbGMmC1xPZnv9Y4+PnhTysnJP45rZKmseyFTz91KV4cA
BxKzlSAaIkDtpqmPHMoGp+GGMfLI5Z3URKIFaKLm6s60tkDS5ULwUZYF0ED8kGLU
rVZgAayinm2c8NfzzU98UmKrG7zMVe63xJbLrWse8QHMoTM9iXB4eZHo47kUjHem
ywT5y9wmpQNYKGbBM70WJo+4rFWhq4IAhu5WSp1JUc8k1+U0dfifGHpquG/l/di0
YtweNN4YNILMAnwT4JcUmWlCHLCLygUHSz3F7CanthOiOJRMql6G9oqm1KY5aU9N
pmtyiJVcAGnLYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:15 2026 by rpki-client