Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json)
Hash identifier: DtL6utiI/v90FekyeuWwBvDLbrjBW+LAfK1MfzfNS/Y=
Subject key identifier: 68:F5:20:36:59:1B:8E:16:7F:4F:F0:1A:32:45:DF:F4:39:5B:D9:C1
Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a
Certificate serial: 019D37C1240337967027964AF2824C93D66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
Manifest number: 0563
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: AR6pMueq4cGfEYQh6zTexi9a0qL59mLM/ICkmmkGHrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:24:03:37:96:70:27:96:4a:f2:82:4c:93:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=68f52036591b8e167f4ff01a3245dff4395bd9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:f2:81:cf:72:0c:e3:d4:46:1e:f8:60:bc:
78:eb:d5:ba:26:2d:e6:8e:cd:d7:8b:7d:f3:5e:ad:
b9:46:23:1f:21:cc:31:fa:a1:2b:8b:ed:4c:99:32:
2b:da:8b:6c:88:c5:44:20:fe:02:e9:a3:08:c9:bb:
ff:71:8f:e4:11:2a:72:ae:6e:d5:03:35:85:cb:ed:
e6:13:43:1f:29:a0:3e:f9:1a:82:78:ec:42:8e:27:
03:33:82:41:11:d7:d8:22:37:4f:0b:13:b7:39:a5:
55:a1:d9:08:bd:68:7f:1d:c0:1a:b4:24:d6:7a:b9:
6e:aa:dd:57:43:b7:1d:9c:9f:e1:b4:fa:1e:98:2d:
c0:38:fa:c6:ac:1d:a7:85:17:47:49:1a:d5:a9:f2:
4a:21:72:e0:f9:57:aa:f3:05:55:6d:64:9e:58:65:
19:76:fb:07:f0:38:e2:d3:72:76:ba:9d:7e:45:7c:
14:96:29:f4:be:bb:51:16:17:b8:31:32:c8:d4:03:
49:6e:3f:36:6c:1e:05:29:ae:7a:ce:e4:03:7d:d7:
c6:e1:34:c0:c7:4f:85:5b:64:80:51:54:61:b4:32:
9a:17:7e:e1:7d:79:26:8c:7f:48:5b:a0:76:4b:ff:
83:dd:40:ca:25:32:58:6a:68:59:52:ca:b5:2a:23:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F5:20:36:59:1B:8E:16:7F:4F:F0:1A:32:45:DF:F4:39:5B:D9:C1
X509v3 Authority Key Identifier:
keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1b:4f:0c:04:29:13:ae:2f:5d:9a:79:f6:56:5f:e8:77:b0:
56:9d:14:30:a1:aa:a5:e1:ca:94:06:a7:54:5e:1a:8d:a5:3c:
c1:d7:6f:df:50:46:b3:8b:c3:cc:2a:07:a8:b9:af:fc:bb:e1:
2e:cc:f2:59:84:e8:92:f6:5c:4f:29:37:3e:14:89:39:1f:e0:
8a:f7:bc:7c:05:11:a9:62:05:7e:01:3f:28:28:2f:08:f5:97:
f5:9d:dd:04:06:00:ec:c5:24:ee:67:00:d5:21:0b:e9:c2:93:
4a:2e:19:21:5d:84:39:ba:7e:64:75:dd:4a:f5:69:97:5d:22:
c7:31:c2:c6:8e:43:3f:3b:31:29:b3:2f:ec:b2:5e:fb:96:9a:
4d:14:28:ab:10:de:53:0d:53:af:c0:04:40:47:aa:a0:0c:b5:
1a:00:51:d3:4c:da:f5:4b:73:ee:8f:a2:d0:55:67:5b:37:d6:
b3:d8:46:40:11:8d:2b:8e:8b:94:91:56:0c:12:e8:ae:3f:a6:
bf:a7:36:5d:18:58:2a:35:21:9d:2f:9c:ef:ea:55:65:a0:f6:
72:76:fd:82:b2:0e:cd:0e:9f:cc:0e:53:41:cc:8e:58:5b:ea:
78:42:69:31:74:73:2d:5f:7c:13:18:0a:94:89:8b:81:3d:50:
69:a9:be:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wSQDN5ZwJ5ZK8oJMk9ZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjI3YzVkNTY4NDg2NDg1M2RmNWI4MTU3MjIxMmVkZTMy
MmNlMGEwHhcNMjYwMzI5MDQwMTM3WhcNMjYwMzMwMDQwMTM3WjAzMTEwLwYDVQQD
Eyg2OGY1MjAzNjU5MWI4ZTE2N2Y0ZmYwMWEzMjQ1ZGZmNDM5NWJkOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ljygc9yDOPURh74YLx469W6Ji3m
js3Xi33zXq25RiMfIcwx+qEri+1MmTIr2otsiMVEIP4C6aMIybv/cY/kESpyrm7V
AzWFy+3mE0MfKaA++RqCeOxCjicDM4JBEdfYIjdPCxO3OaVVodkIvWh/HcAatCTW
erluqt1XQ7cdnJ/htPoemC3AOPrGrB2nhRdHSRrVqfJKIXLg+Veq8wVVbWSeWGUZ
dvsH8Dji03J2up1+RXwUlin0vrtRFhe4MTLI1ANJbj82bB4FKa56zuQDfdfG4TTA
x0+FW2SAUVRhtDKaF37hfXkmjH9IW6B2S/+D3UDKJTJYamhZUsq1KiPI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj1IDZZG44Wf0/wGjJF3/Q5W9nBMB8GA1UdIwQY
MBaAFHSyfF1WhIZIU99bgVciEu3jIs4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yOTk2NTYtNzQ0YS00ZGFhLThjZmQt
MDEwYTk4NTZmNzg1LzEvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yOTk2NTYtNzQ0YS00ZGFhLThjZmQtMDEwYTk4NTZmNzg1
LzEvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxtPDAQp
E64vXZp59lZf6HewVp0UMKGqpeHKlAanVF4ajaU8wddv31BGs4vDzCoHqLmv/Lvh
LszyWYTokvZcTyk3PhSJOR/give8fAURqWIFfgE/KCgvCPWX9Z3dBAYA7MUk7mcA
1SEL6cKTSi4ZIV2EObp+ZHXdSvVpl10ixzHCxo5DPzsxKbMv7LJe+5aaTRQoqxDe
Uw1Tr8AEQEeqoAy1GgBR00za9Utz7o+i0FVnWzfWs9hGQBGNK46LlJFWDBLorj+m
v6c2XRhYKjUhnS+c7+pVZaD2cnb9grIOzQ6fzA5TQcyOWFvqeEJpMXRzLV98ExgK
lImLgT1Qaam+DA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client