Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: PG35IkJ56IOZIqqXXw2WugCCwtA4JKNoeNLMLbBeuQo=
Subject key identifier: B2:40:83:99:D6:BE:5D:43:A7:22:95:B7:20:B2:92:18:A4:85:94:F2
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 019D3865A1AE22C445BB507613597F51187A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: ZckutCuYOWiSzU7N0A5MCS7cQ/gDFC3lIVtkbT3Vu7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a1:ae:22:c4:45:bb:50:76:13:59:7f:51:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=b2408399d6be5d43a72295b720b29218a48594f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:af:a7:7e:6a:bf:7d:21:74:b8:67:45:02:
c7:f5:fb:aa:54:ab:6d:97:76:fa:32:d3:34:10:70:
e8:81:17:3e:1a:cd:60:d7:69:c4:9d:fc:4e:c5:ba:
da:3d:b8:6e:53:f0:05:1f:9a:d2:5b:a4:4b:d6:6b:
40:f3:54:8f:6f:5d:05:df:25:87:81:96:83:70:c5:
b2:7d:6d:b6:23:fd:77:49:fd:8e:3b:4e:19:26:36:
50:a1:1f:e4:dc:63:26:68:eb:90:be:15:95:75:2b:
e9:76:30:37:01:db:f1:c4:da:8f:30:7b:11:f3:24:
32:4e:31:40:8b:98:21:37:f2:7d:ec:bc:1a:4a:b2:
e1:bf:59:0e:a6:46:5e:cb:71:54:65:72:ef:5c:53:
d7:40:3c:d2:a9:5b:31:6e:0c:9c:fc:58:e1:36:bb:
5f:c4:75:02:26:1e:2c:e3:c5:ca:e5:29:a7:25:7f:
80:61:f3:82:5c:27:e0:17:ac:ad:37:fe:e1:fb:20:
5f:60:30:33:95:72:df:fa:6a:ad:44:c7:b6:32:ac:
85:04:61:2a:27:97:ea:67:a3:87:46:4f:85:8f:9d:
cd:02:e6:1e:17:d5:b2:a3:59:91:18:ad:a5:da:2a:
f6:9c:74:98:e0:fc:40:4c:bd:23:df:a1:3f:75:c1:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:83:99:D6:BE:5D:43:A7:22:95:B7:20:B2:92:18:A4:85:94:F2
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9d:8f:e8:52:f1:4c:18:d6:99:e6:d7:1f:f4:69:21:34:91:
8d:53:ca:3f:30:d2:17:96:46:ce:3e:ca:46:09:48:bd:b8:fc:
31:0b:6a:73:5a:af:0d:49:fd:26:a5:6a:05:43:59:4d:41:26:
de:0e:17:6a:ef:2e:6b:2d:3d:4c:0e:48:09:7f:63:f8:a6:51:
b3:97:cd:95:71:05:7e:86:42:d2:5c:e4:8a:74:3f:c1:0d:e5:
c1:1b:43:9e:63:b3:76:d4:34:ac:99:f1:54:9b:cd:ac:4c:09:
f0:c1:49:79:d7:d6:16:a1:68:79:eb:3c:54:c6:7c:5a:65:1a:
1a:75:f7:7f:be:5d:c5:e1:c2:5a:df:63:3c:fb:2a:76:c7:44:
0c:18:0b:64:4b:d8:ed:38:02:c5:14:eb:7a:45:5d:ab:6a:ef:
18:44:32:87:bb:78:5f:4a:b4:55:ff:26:ac:c4:51:80:65:f5:
2a:6a:51:dd:a1:d1:52:6d:ee:e1:e2:f9:4f:6e:64:b7:34:c3:
a8:aa:b1:1c:cc:e3:5a:5b:93:64:05:a5:9e:3a:1c:02:bb:4b:
90:56:59:9c:9b:8b:56:e8:58:87:c1:ad:bd:dd:c5:bf:6f:94:
77:32:66:83:83:f4:37:2a:2c:00:f5:1b:d7:25:fb:13:e1:3d:
4a:e9:38:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaGuIsRFu1B2E1l/URh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi
ZmU2MDEwHhcNMjYwMzI5MDcwMTE3WhcNMjYwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
EyhiMjQwODM5OWQ2YmU1ZDQzYTcyMjk1YjcyMGIyOTIxOGE0ODU5NGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtduvp35qv30hdLhnRQLH9fuqVKtt
l3b6MtM0EHDogRc+Gs1g12nEnfxOxbraPbhuU/AFH5rSW6RL1mtA81SPb10F3yWH
gZaDcMWyfW22I/13Sf2OO04ZJjZQoR/k3GMmaOuQvhWVdSvpdjA3AdvxxNqPMHsR
8yQyTjFAi5ghN/J97LwaSrLhv1kOpkZey3FUZXLvXFPXQDzSqVsxbgyc/FjhNrtf
xHUCJh4s48XK5SmnJX+AYfOCXCfgF6ytN/7h+yBfYDAzlXLf+mqtRMe2MqyFBGEq
J5fqZ6OHRk+Fj53NAuYeF9Wyo1mRGK2l2ir2nHSY4PxATL0j36E/dcFBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJAg5nWvl1DpyKVtyCykhikhZTyMB8GA1UdIwQY
MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt
MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5
LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC52P6FLx
TBjWmebXH/RpITSRjVPKPzDSF5ZGzj7KRglIvbj8MQtqc1qvDUn9JqVqBUNZTUEm
3g4Xau8uay09TA5ICX9j+KZRs5fNlXEFfoZC0lzkinQ/wQ3lwRtDnmOzdtQ0rJnx
VJvNrEwJ8MFJedfWFqFoees8VMZ8WmUaGnX3f75dxeHCWt9jPPsqdsdEDBgLZEvY
7TgCxRTrekVdq2rvGEQyh7t4X0q0Vf8mrMRRgGX1KmpR3aHRUm3u4eL5T25ktzTD
qKqxHMzjWluTZAWlnjocArtLkFZZnJuLVuhYh8Gtvd3Fv2+UdzJmg4P0NyosAPUb
1yX7E+E9Suk4EA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:57 2026 by rpki-client