Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
File: dDWQyYyt2-4a14ldOC1Q9f28SK0.mft (raw, json)
Hash identifier: JbDbBgGl39gFBrE7ZW0do0vBNPq7sO30CN38jXhaRwU=
Subject key identifier: 1F:81:ED:F0:9C:4A:1E:89:BE:E1:4B:31:4B:97:3F:25:E9:9B:04:BF
Authority key identifier: 74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
Certificate issuer: /CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Certificate serial: 019D389BB3B9F9C1848BE5495EF9A1DA2261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
Manifest number: 0236
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: dDWQyYyt2-4a14ldOC1Q9f28SK0.crl (hash: x9Kn5e1oJgY9gX8vJ/QldA0tr3yDPqMGB3FoZoltKjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b3:b9:f9:c1:84:8b:e5:49:5e:f9:a1:da:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=1f81edf09c4a1e89bee14b314b973f25e99b04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:21:46:b6:3c:48:78:f4:ab:1b:ae:fd:f7:
db:06:53:7b:4e:17:d7:ce:99:f4:c9:d1:14:18:42:
e0:20:2e:b7:6a:15:15:ba:1e:31:15:d9:73:d2:3b:
6f:05:42:77:fe:e2:4e:57:12:8c:01:ee:be:7a:0d:
98:4e:c7:63:75:bb:9c:3f:76:a0:d4:cb:2a:53:d7:
ce:df:53:24:a0:94:95:4f:2c:4c:88:50:62:3b:e2:
e6:3e:54:64:05:35:09:c2:82:0f:f7:3f:fe:25:44:
f0:bf:f4:3f:ab:49:20:ef:53:a9:c7:5b:d9:e8:8c:
07:93:b8:e6:8a:3b:41:3c:80:97:48:58:a4:7e:03:
23:eb:7c:7e:ec:c0:33:dd:af:ea:8b:02:cb:0a:3e:
6d:fb:a9:9e:f0:05:57:26:a2:cb:14:90:e5:65:0c:
4d:d9:ea:f2:04:b0:01:73:47:90:92:91:fa:d6:01:
c9:77:ab:0b:20:b0:83:2d:a6:9a:8f:c4:5b:07:c1:
3b:3e:2f:16:bc:1f:f8:91:29:f8:f9:b6:b8:f9:dd:
f9:e9:91:f3:d7:e9:81:ff:e3:1e:7a:04:c5:21:27:
ae:93:11:c9:76:ac:e5:dd:52:3f:ab:c3:33:fc:73:
32:08:26:51:d8:5b:e4:ab:f6:b6:df:83:96:93:14:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:ED:F0:9C:4A:1E:89:BE:E1:4B:31:4B:97:3F:25:E9:9B:04:BF
X509v3 Authority Key Identifier:
keyid:74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:8f:53:f8:81:2f:82:48:d3:4c:10:ba:3a:aa:87:5b:13:
94:b6:ce:fc:3e:2a:dd:e7:53:28:34:e8:f4:bb:b3:91:1e:da:
cc:8a:37:bd:d7:71:b5:3b:a9:9f:8c:e0:83:c6:fb:c4:54:35:
c0:38:2b:8b:9b:1d:ec:0f:7d:98:ff:07:f8:a0:a2:cc:aa:80:
21:5c:30:98:7a:ad:ce:89:e5:dc:13:37:8a:eb:19:3a:a1:5e:
e1:4c:d9:4c:2a:76:23:af:33:d6:df:43:ee:a7:54:5b:82:a3:
73:8b:bf:f9:07:a4:db:fb:59:32:cf:5d:70:d1:7a:ed:e3:e1:
50:01:1b:e8:d8:f2:38:37:9d:f9:bf:25:01:17:96:7d:17:b6:
ff:01:38:63:89:7f:6a:a9:e3:ca:74:34:e0:84:11:c6:68:7e:
48:fd:64:75:91:ca:76:1d:29:2b:ae:a8:26:61:aa:9c:e2:d1:
2a:3d:8f:26:2e:d5:9d:92:de:f7:6b:44:5a:ce:72:1d:7c:43:
15:97:cc:10:c2:30:a5:cf:47:71:44:28:12:8d:73:c5:b5:5e:
10:6d:e0:d3:0b:bb:cb:9e:a4:de:05:59:8c:57:f9:df:36:a3:
81:9b:75:36:bc:a6:a1:4d:e5:51:2d:23:d2:b1:f8:d8:ea:88:
f9:19:25:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7O5+cGEi+VJXvmh2iJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzU5MGM5OGNhZGRiZWUxYWQ3ODk1ZDM4MmQ1MGY1ZmRi
YzQ4YWQwHhcNMjYwMzI5MDgwMDIxWhcNMjYwMzMwMDgwMDIxWjAzMTEwLwYDVQQD
EygxZjgxZWRmMDljNGExZTg5YmVlMTRiMzE0Yjk3M2YyNWU5OWIwNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCghRrY8SHj0qxuu/ffbBlN7ThfX
zpn0ydEUGELgIC63ahUVuh4xFdlz0jtvBUJ3/uJOVxKMAe6+eg2YTsdjdbucP3ag
1MsqU9fO31MkoJSVTyxMiFBiO+LmPlRkBTUJwoIP9z/+JUTwv/Q/q0kg71Opx1vZ
6IwHk7jmijtBPICXSFikfgMj63x+7MAz3a/qiwLLCj5t+6me8AVXJqLLFJDlZQxN
2eryBLABc0eQkpH61gHJd6sLILCDLaaaj8RbB8E7Pi8WvB/4kSn4+ba4+d356ZHz
1+mB/+MeegTFISeukxHJdqzl3VI/q8Mz/HMyCCZR2Fvkq/a234OWkxRe+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+B7fCcSh6JvuFLMUuXPyXpmwS/MB8GA1UdIwQY
MBaAFHQ1kMmMrdvuGteJXTgtUPX9vEitMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85YTk5YzUtMDcxMy00Yjc2LWI4ZjIt
MDFhZGMxMDE1NjQ4LzEvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85YTk5YzUtMDcxMy00Yjc2LWI4ZjItMDFhZGMxMDE1NjQ4
LzEvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkqPU/iB
L4JI00wQujqqh1sTlLbO/D4q3edTKDTo9LuzkR7azIo3vddxtTupn4zgg8b7xFQ1
wDgri5sd7A99mP8H+KCizKqAIVwwmHqtzonl3BM3iusZOqFe4UzZTCp2I68z1t9D
7qdUW4Kjc4u/+Qek2/tZMs9dcNF67ePhUAEb6NjyODed+b8lAReWfRe2/wE4Y4l/
aqnjynQ04IQRxmh+SP1kdZHKdh0pK66oJmGqnOLRKj2PJi7VnZLe92tEWs5yHXxD
FZfMEMIwpc9HcUQoEo1zxbVeEG3g0wu7y56k3gVZjFf53zajgZt1NrymoU3lUS0j
0rH42OqI+RklCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:44 2026 by rpki-client