Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
File: dWQLapVyPRupdqH7EJKDnpRrWyQ.mft (raw, json)
Hash identifier: m2XVX8XdU1TSrQRNz6YPoCljrEDA4uNPGMKpZWU9JiY=
Subject key identifier: 8D:25:C6:80:47:0C:04:D9:18:17:20:0D:89:71:4F:E9:F6:6B:9F:2E
Authority key identifier: 75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
Certificate issuer: /CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Certificate serial: 019D371C05D9AB493BC353A23B7371F90727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
Manifest number: 0295
Signing time: Sun 29 Mar 2026 01:01:16 +0000
Manifest this update: Sun 29 Mar 2026 01:01:16 +0000
Manifest next update: Mon 30 Mar 2026 01:01:16 +0000
Files and hashes: 1: dWQLapVyPRupdqH7EJKDnpRrWyQ.crl (hash: HYxN6leda9Mww161srMhyAmak/2SejN4S46aDFV+fnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:05:d9:ab:49:3b:c3:53:a2:3b:73:71:f9:07:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Validity
Not Before: Mar 29 01:01:16 2026 GMT
Not After : Mar 30 01:01:16 2026 GMT
Subject: CN=8d25c680470c04d91817200d89714fe9f66b9f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:e6:7b:85:f9:52:2c:86:39:08:4d:2d:e8:
10:a8:1c:cb:9c:06:b3:f6:e5:7d:e3:f2:65:4c:1c:
b0:fe:ae:e5:49:f6:a2:02:38:f6:c6:d5:18:d3:00:
ac:88:02:1d:73:ee:7a:f2:aa:fc:07:6b:24:65:f0:
47:27:d8:b9:7c:74:31:fb:3c:69:2a:10:92:04:0c:
15:e3:f8:19:6b:af:dd:4b:e3:8e:5f:5b:10:71:19:
df:d0:ee:73:2f:81:2a:a3:ae:c3:13:42:15:24:6d:
1a:02:f2:be:b2:fd:cb:b5:15:9d:a6:16:0b:94:e4:
6f:58:b7:7c:94:be:e8:d5:7c:ad:3e:3d:2e:35:d9:
66:c1:02:e2:f1:0b:69:a0:a2:57:2f:85:f2:ee:c0:
30:48:3f:2e:08:10:85:23:ab:1e:de:6f:1e:e0:7f:
39:60:91:56:01:4a:be:fa:d1:31:25:d1:34:2e:ee:
e8:c4:79:6e:a3:53:89:25:21:66:97:70:83:2e:83:
35:46:5e:33:dc:78:e0:67:d6:35:f9:88:13:35:01:
77:8c:66:ec:e1:ae:43:0c:39:ce:31:f6:9d:f7:4e:
52:be:14:8c:20:24:4b:81:80:10:a5:25:34:68:d6:
ba:2c:ab:2a:38:bf:a8:10:c1:aa:41:e3:36:c8:dc:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:C6:80:47:0C:04:D9:18:17:20:0D:89:71:4F:E9:F6:6B:9F:2E
X509v3 Authority Key Identifier:
keyid:75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:ad:4b:f8:14:e6:5d:b6:17:aa:0d:c2:f9:af:7e:05:e5:
3f:aa:4f:e3:16:a7:6f:8e:d6:e3:15:6b:ea:60:b2:1f:74:bb:
00:dc:59:bc:43:a3:13:9e:6d:b2:6c:fe:f7:fa:fc:a4:2a:56:
09:e9:1b:99:7f:9e:d6:4d:8f:2e:c3:6d:2f:0c:43:02:c6:9d:
38:1c:58:75:81:28:18:80:62:58:de:97:7f:62:a5:67:12:33:
89:69:0f:77:b6:c1:c2:61:50:a0:da:5f:55:2a:62:c3:66:3d:
f6:eb:1e:a1:93:e6:3c:8e:02:f4:6d:45:89:92:98:b9:1d:51:
f8:8c:c3:b2:b0:b8:6e:34:23:0f:46:23:96:9d:eb:1a:f9:64:
f9:46:44:a4:c0:64:ae:e1:d9:a2:63:7d:90:30:4b:8e:d2:19:
28:ce:c1:cc:3d:87:e5:8f:50:c2:15:c5:e7:71:60:14:12:37:
11:d7:1c:9e:40:b3:6d:3c:ef:44:24:7a:78:07:c6:a9:8c:db:
1e:2e:5b:c0:e8:6a:a2:fd:cc:7f:e7:46:0c:e9:aa:b0:b9:ca:
33:5b:b1:71:37:a8:c8:65:60:2b:2f:f1:75:c1:70:bb:99:40:
c6:48:b3:b1:26:5c:3c:a2:aa:a5:04:e8:6e:0d:17:10:38:8e:
98:e0:78:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03HAXZq0k7w1OiO3Nx+QcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQwYjZhOTU3MjNkMWJhOTc2YTFmYjEwOTI4MzllOTQ2
YjViMjQwHhcNMjYwMzI5MDEwMTE2WhcNMjYwMzMwMDEwMTE2WjAzMTEwLwYDVQQD
Eyg4ZDI1YzY4MDQ3MGMwNGQ5MTgxNzIwMGQ4OTcxNGZlOWY2NmI5ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38rme4X5UiyGOQhNLegQqBzLnAaz
9uV94/JlTByw/q7lSfaiAjj2xtUY0wCsiAIdc+568qr8B2skZfBHJ9i5fHQx+zxp
KhCSBAwV4/gZa6/dS+OOX1sQcRnf0O5zL4Eqo67DE0IVJG0aAvK+sv3LtRWdphYL
lORvWLd8lL7o1XytPj0uNdlmwQLi8QtpoKJXL4Xy7sAwSD8uCBCFI6se3m8e4H85
YJFWAUq++tExJdE0Lu7oxHluo1OJJSFml3CDLoM1Rl4z3HjgZ9Y1+YgTNQF3jGbs
4a5DDDnOMfad905SvhSMICRLgYAQpSU0aNa6LKsqOL+oEMGqQeM2yNzQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0lxoBHDATZGBcgDYlxT+n2a58uMB8GA1UdIwQY
MBaAFHVkC2qVcj0bqXah+xCSg56Ua1skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEt
ZmQwMmU4YmI5MTk2LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEtZmQwMmU4YmI5MTk2
LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuitS/gU
5l22F6oNwvmvfgXlP6pP4xanb47W4xVr6mCyH3S7ANxZvEOjE55tsmz+9/r8pCpW
CekbmX+e1k2PLsNtLwxDAsadOBxYdYEoGIBiWN6Xf2KlZxIziWkPd7bBwmFQoNpf
VSpiw2Y99useoZPmPI4C9G1FiZKYuR1R+IzDsrC4bjQjD0Yjlp3rGvlk+UZEpMBk
ruHZomN9kDBLjtIZKM7BzD2H5Y9QwhXF53FgFBI3EdccnkCzbTzvRCR6eAfGqYzb
Hi5bwOhqov3Mf+dGDOmqsLnKM1uxcTeoyGVgKy/xdcFwu5lAxkizsSZcPKKqpQTo
bg0XEDiOmOB4Pw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:36 2026 by rpki-client