Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: WuoNw1CPuew6uUB/SQLHujJlr6N7xJYg6Rp2x5HQR6g=
Subject key identifier: CC:A1:3C:7B:9F:FD:C4:A2:FA:23:ED:F2:5F:8E:7B:4F:7F:12:AB:4D
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019D382E6A69EC70D611F8BE84044EE139E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 1745
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 7NVSRY8ublumISrwNRrFuKzriJe2OD1vrHYk1EB3fZ8=)
2: y8suQO3vpggb8SQxYQwAFafoDS8.roa (hash: EDpf6LTQFooyZUqxXXBv0qWQ0K8M8GX1XuFaFPpkkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6a:69:ec:70:d6:11:f8:be:84:04:4e:e1:39:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=cca13c7b9ffdc4a2fa23edf25f8e7b4f7f12ab4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:06:8f:69:70:f3:22:a0:67:0b:12:cd:c6:
22:43:b9:35:cf:65:84:21:27:5b:45:bb:6a:dc:69:
0f:92:7a:c1:2c:78:b1:e1:eb:07:a0:d3:0b:67:72:
cf:80:b0:4d:00:df:ad:0d:c1:c0:ae:ab:5e:dd:bc:
23:b0:5b:60:66:4a:18:15:94:37:ba:41:2c:5e:b6:
8c:b0:04:76:f7:9f:ab:b1:5a:46:c2:c7:20:74:a3:
15:c0:88:0d:93:42:ed:d7:06:dd:61:e8:4e:8c:ca:
87:de:99:c0:83:60:0f:bc:f1:3c:a8:c8:9e:62:c3:
f0:3b:56:e5:56:80:af:99:c7:87:3e:c5:91:4b:6d:
16:e7:30:17:0f:21:10:bc:2f:3f:f9:59:99:ab:f2:
3f:7a:2c:d7:22:b6:a6:c4:e2:cd:df:77:a9:bf:dc:
e1:db:ee:c0:40:24:a5:ef:88:9f:2d:ec:70:70:70:
a7:8a:25:2d:e2:26:43:97:2c:4f:c8:3c:28:57:ea:
4c:53:40:69:48:43:14:80:81:0f:77:64:32:c7:1d:
33:f4:e0:10:b2:aa:ca:4f:d8:0c:61:32:a0:8d:9d:
a8:de:a5:9e:99:8e:8c:2b:43:c9:e3:68:e5:e8:27:
74:15:0f:f8:c0:90:bf:a8:c6:a8:7d:e6:34:cd:9b:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:3C:7B:9F:FD:C4:A2:FA:23:ED:F2:5F:8E:7B:4F:7F:12:AB:4D
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:84:de:dc:7c:80:7f:70:c8:ec:ec:6c:cc:6e:55:40:d3:35:
04:47:b1:4a:4e:bb:c7:b8:8a:ea:d4:11:b4:bc:75:e0:ec:68:
d1:3c:85:14:16:3c:1b:73:67:28:af:b0:d4:c9:d7:32:26:b5:
a0:1c:78:9f:99:84:94:2c:09:d3:6b:ba:35:24:a0:80:e2:8c:
d8:2e:59:f8:8c:17:e6:53:e1:9b:e9:fd:24:60:99:66:45:ae:
62:8d:a1:5b:3d:1c:69:b1:09:63:98:14:6d:2e:f6:3b:d5:c3:
c8:aa:e4:0b:c3:8e:07:50:41:c1:34:f7:6d:f7:98:2c:3d:03:
29:e4:b0:4f:48:5d:db:73:6b:c5:53:f7:e8:12:a8:5c:b5:4f:
59:03:3a:12:51:7b:c2:25:75:30:f9:78:a8:9d:05:e0:b0:34:
c5:39:b6:43:05:90:1b:d7:43:0b:4c:f7:9a:f8:84:db:72:f0:
94:b4:29:dc:c6:32:44:58:01:89:2b:45:4a:b4:75:27:f4:c7:
a3:47:26:50:97:2d:1e:c9:e9:c7:d1:d2:a4:fd:93:95:39:91:
62:3a:81:46:ce:46:9a:2a:f5:38:f4:4d:57:e8:f6:48:53:ee:
ae:6e:b7:8a:b1:4c:de:ab:24:bb:70:73:11:4a:a3:8e:90:30:
f3:72:cc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lmpp7HDWEfi+hARO4TnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjYwMzI5MDYwMDU5WhcNMjYwMzMwMDYwMDU5WjAzMTEwLwYDVQQD
EyhjY2ExM2M3YjlmZmRjNGEyZmEyM2VkZjI1ZjhlN2I0ZjdmMTJhYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIGj2lw8yKgZwsSzcYiQ7k1z2WE
ISdbRbtq3GkPknrBLHix4esHoNMLZ3LPgLBNAN+tDcHArqte3bwjsFtgZkoYFZQ3
ukEsXraMsAR295+rsVpGwscgdKMVwIgNk0Lt1wbdYehOjMqH3pnAg2APvPE8qMie
YsPwO1blVoCvmceHPsWRS20W5zAXDyEQvC8/+VmZq/I/eizXIramxOLN33epv9zh
2+7AQCSl74ifLexwcHCniiUt4iZDlyxPyDwoV+pMU0BpSEMUgIEPd2Qyxx0z9OAQ
sqrKT9gMYTKgjZ2o3qWemY6MK0PJ42jl6Cd0FQ/4wJC/qMaofeY0zZv15QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyhPHuf/cSi+iPt8l+Oe09/EqtNMB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqITe3HyA
f3DI7OxszG5VQNM1BEexSk67x7iK6tQRtLx14Oxo0TyFFBY8G3NnKK+w1MnXMia1
oBx4n5mElCwJ02u6NSSggOKM2C5Z+IwX5lPhm+n9JGCZZkWuYo2hWz0cabEJY5gU
bS72O9XDyKrkC8OOB1BBwTT3bfeYLD0DKeSwT0hd23NrxVP36BKoXLVPWQM6ElF7
wiV1MPl4qJ0F4LA0xTm2QwWQG9dDC0z3mviE23LwlLQp3MYyRFgBiStFSrR1J/TH
o0cmUJctHsnpx9HSpP2TlTmRYjqBRs5Gmir1OPRNV+j2SFPurm63irFM3qsku3Bz
EUqjjpAw83LMog==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:46 2026 by rpki-client