Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: 26dfOqQO/EUCrfdrHYre/ql8ubuTmfQFHA92JsvLv28=
Subject key identifier: A0:DA:E8:E2:E7:F5:47:C4:A4:DA:FA:57:E3:2A:E0:AF:DE:37:12:6D
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019D386655CEE66DD9A5D503889D09F19FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0D1D
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: qR58nfuaPwfmnjf3PNsisXZdXqFKl/GZavUsOi7zkQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:55:ce:e6:6d:d9:a5:d5:03:88:9d:09:f1:9f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=a0dae8e2e7f547c4a4dafa57e32ae0afde37126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:55:79:7e:4a:c2:54:d4:83:ae:3f:fc:7c:
36:2e:eb:fd:7a:11:d8:22:01:34:98:fa:7d:3d:6f:
3d:a4:f7:48:9d:ce:5e:73:8f:a3:ce:f1:9b:55:85:
b2:c3:85:64:53:26:10:72:a7:87:43:0e:11:47:34:
be:b7:98:fe:3d:54:c4:c3:92:31:68:ee:3f:63:40:
09:49:76:88:e0:25:b7:a2:70:84:ab:bb:57:72:78:
24:2a:d5:93:b9:6b:e1:67:9e:4f:08:40:ce:99:32:
dc:71:03:97:40:3d:46:3f:7f:a9:41:0a:b9:19:3e:
bb:cf:65:a2:96:e4:f0:7c:74:54:52:03:69:19:ee:
7c:f7:18:8a:c7:09:09:ca:4b:17:a9:7e:6f:b7:ec:
ef:06:79:cd:ec:28:49:1c:13:03:c1:ef:af:ae:c3:
38:73:1b:ce:dd:f5:4a:00:5d:8f:bf:56:4f:5e:91:
b5:e3:e8:79:8a:78:50:3c:ce:e6:18:f2:96:98:1f:
f2:23:32:16:12:d9:d1:ae:9e:f3:90:0d:f4:b8:31:
51:07:b7:3e:80:d0:2f:b8:12:e7:ea:5c:a6:7b:7f:
ca:e6:33:4e:8b:42:43:fe:9a:4b:fa:11:c6:87:f4:
2c:03:30:f4:93:23:25:39:e5:05:8b:9c:04:96:b6:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:E8:E2:E7:F5:47:C4:A4:DA:FA:57:E3:2A:E0:AF:DE:37:12:6D
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:de:05:17:49:45:34:e6:21:b2:2d:d3:ce:73:fc:0e:a9:3e:
65:8b:07:95:5f:d0:26:ea:df:25:01:69:fa:81:30:c1:6f:9c:
69:89:b8:d8:67:b2:9e:0a:f0:b9:58:3c:0b:a6:1d:61:5e:21:
17:9f:60:d6:f2:fe:ca:34:bf:9e:b9:e6:ef:26:d5:8e:06:96:
e1:43:ea:74:63:7c:10:95:21:11:fb:df:d9:3e:44:23:0c:1d:
67:0f:a0:86:d6:89:09:79:13:54:79:67:62:fa:31:d7:56:08:
7f:e5:a7:97:25:c2:3b:ad:d7:6d:02:ab:3d:3f:52:e7:24:51:
7a:43:31:ba:17:88:7d:99:8d:10:18:a6:90:eb:d0:b3:cb:62:
bc:9c:ad:16:57:91:50:55:6f:dc:52:3d:6d:63:ba:10:fc:64:
55:c1:7f:67:0b:a9:69:17:22:b4:bf:ce:7c:e4:90:51:27:c4:
94:bb:da:97:ef:dc:ae:ed:2b:21:26:43:8e:95:cf:a7:ae:81:
3c:93:9f:dc:b2:d9:1a:ef:10:f1:f1:ef:44:d8:e6:86:29:b1:
93:e4:60:bc:a8:27:01:67:77:84:88:7a:ac:67:72:7a:19:7a:
e2:fe:bf:eb:8e:25:13:60:cf:a9:e7:dd:ef:a8:fd:5e:b9:c0:
79:1e:c0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlXO5m3ZpdUDiJ0J8Z/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjYwMzI5MDcwMjAzWhcNMjYwMzMwMDcwMjAzWjAzMTEwLwYDVQQD
EyhhMGRhZThlMmU3ZjU0N2M0YTRkYWZhNTdlMzJhZTBhZmRlMzcxMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4lVeX5KwlTUg64//Hw2Luv9ehHY
IgE0mPp9PW89pPdInc5ec4+jzvGbVYWyw4VkUyYQcqeHQw4RRzS+t5j+PVTEw5Ix
aO4/Y0AJSXaI4CW3onCEq7tXcngkKtWTuWvhZ55PCEDOmTLccQOXQD1GP3+pQQq5
GT67z2WiluTwfHRUUgNpGe589xiKxwkJyksXqX5vt+zvBnnN7ChJHBMDwe+vrsM4
cxvO3fVKAF2Pv1ZPXpG14+h5inhQPM7mGPKWmB/yIzIWEtnRrp7zkA30uDFRB7c+
gNAvuBLn6lyme3/K5jNOi0JD/ppL+hHGh/QsAzD0kyMlOeUFi5wElraKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDa6OLn9UfEpNr6V+Mq4K/eNxJtMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt4FF0lF
NOYhsi3TznP8Dqk+ZYsHlV/QJurfJQFp+oEwwW+caYm42GeyngrwuVg8C6YdYV4h
F59g1vL+yjS/nrnm7ybVjgaW4UPqdGN8EJUhEfvf2T5EIwwdZw+ghtaJCXkTVHln
Yvox11YIf+WnlyXCO63XbQKrPT9S5yRRekMxuheIfZmNEBimkOvQs8tivJytFleR
UFVv3FI9bWO6EPxkVcF/ZwupaRcitL/OfOSQUSfElLval+/cru0rISZDjpXPp66B
PJOf3LLZGu8Q8fHvRNjmhimxk+RgvKgnAWd3hIh6rGdyehl64v6/644lE2DPqefd
76j9XrnAeR7A7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:43 2026 by rpki-client