Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: tkZS70/tM6Med6j/23nzkXjbd4xPNxtdtp3fxhEgLTk=
Subject key identifier: 32:65:45:F3:29:19:FD:56:85:55:28:11:8A:0F:CE:A9:3B:CC:29:26
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019D38660EC6A074C5B776879ED6634CAE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 108A
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: FUYd6FMn5yq4O9YPaImuv4XRTi9Telrf232o61deiG8=)
2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0e:c6:a0:74:c5:b7:76:87:9e:d6:63:4c:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=326545f32919fd56855528118a0fcea93bcc2926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:26:ba:0e:82:ef:14:4d:f2:33:12:2b:0c:
94:ae:cb:db:ca:01:d2:f3:95:69:c8:bb:e2:e5:65:
4f:e3:5a:28:59:ea:81:f2:10:6d:63:15:eb:0c:93:
f9:73:0d:b6:15:fa:52:da:2c:d6:56:26:d2:f3:03:
c6:f8:e4:2a:c6:56:72:8f:8f:68:b7:ce:03:92:b5:
33:e2:de:21:2d:e7:44:08:97:40:04:56:3f:b4:65:
d9:6f:a8:4c:36:06:b2:3a:ff:4c:cf:a5:ce:90:90:
52:8e:01:06:9c:43:8d:b0:98:a4:c6:4d:2a:a9:ce:
a4:dc:96:b4:1d:c3:78:55:9d:ca:a4:de:95:0c:12:
7a:66:8c:db:4d:d3:81:d7:d0:32:c6:46:fe:de:77:
da:ac:b6:2f:c6:ad:e0:fc:fd:00:62:0b:75:b3:73:
00:c3:23:d7:d6:2d:14:65:3c:f2:83:65:61:a4:7f:
e4:09:ac:5c:93:31:6d:bd:20:a5:a7:df:e6:3f:e5:
88:f2:77:09:aa:be:83:9a:61:5c:fd:68:46:c8:aa:
2a:d8:92:dd:87:fc:f0:3c:64:71:61:39:4b:be:95:
c6:7a:d5:a7:cd:f3:7d:60:7f:94:2b:b1:c5:9d:ea:
08:76:77:26:4a:88:b9:0c:ab:55:ea:49:a2:3d:bf:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:65:45:F3:29:19:FD:56:85:55:28:11:8A:0F:CE:A9:3B:CC:29:26
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:8d:ad:e7:d3:1c:f1:bc:00:0c:49:e1:4c:a7:d0:b5:fa:
7a:b3:e5:ff:39:4c:ae:8f:a9:b8:83:b9:82:76:22:db:8c:c6:
c3:95:60:e1:ae:07:24:e6:d6:8c:eb:9c:71:5e:74:aa:69:76:
f8:b2:01:ea:2a:02:b2:ae:4f:2b:cf:f8:cb:39:9e:98:c7:27:
c0:46:2f:b1:12:c7:51:16:0d:14:06:67:ea:06:0e:21:ef:a2:
ca:4a:bd:50:85:77:35:45:70:91:1c:cb:21:f0:d7:e4:51:28:
4a:0b:d3:09:72:b1:0b:e7:d1:dd:01:91:d5:4e:2c:a3:c8:bd:
aa:74:22:3b:98:8c:56:13:b1:80:e6:00:a6:f0:36:38:d3:73:
f2:ab:8e:20:84:54:77:b2:dc:5d:36:7b:05:7f:69:1f:76:9c:
13:5f:d7:06:d8:e2:dd:73:d6:c2:e2:a0:04:46:f2:00:21:c5:
d5:39:12:01:a3:d3:62:27:52:04:82:b8:17:03:32:cb:c0:f9:
e9:51:08:f7:df:3b:b6:42:27:7b:a3:60:13:ba:0e:d3:e3:e9:
6e:1f:fc:35:93:1b:19:f6:11:65:90:ca:d9:53:0f:e5:a2:58:
b4:33:08:12:0e:0b:62:f3:66:89:74:35:0f:cf:ea:6f:a8:6a:
5e:7a:00:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zg7GoHTFt3aHntZjTK4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh
MDNhYjkwHhcNMjYwMzI5MDcwMTQ1WhcNMjYwMzMwMDcwMTQ1WjAzMTEwLwYDVQQD
EygzMjY1NDVmMzI5MTlmZDU2ODU1NTI4MTE4YTBmY2VhOTNiY2MyOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW4mug6C7xRN8jMSKwyUrsvbygHS
85VpyLvi5WVP41ooWeqB8hBtYxXrDJP5cw22FfpS2izWVibS8wPG+OQqxlZyj49o
t84DkrUz4t4hLedECJdABFY/tGXZb6hMNgayOv9Mz6XOkJBSjgEGnEONsJikxk0q
qc6k3Ja0HcN4VZ3KpN6VDBJ6ZozbTdOB19Ayxkb+3nfarLYvxq3g/P0AYgt1s3MA
wyPX1i0UZTzyg2VhpH/kCaxckzFtvSClp9/mP+WI8ncJqr6DmmFc/WhGyKoq2JLd
h/zwPGRxYTlLvpXGetWnzfN9YH+UK7HFneoIdncmSoi5DKtV6kmiPb/OyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJlRfMpGf1WhVUoEYoPzqk7zCkmMB8GA1UdIwQY
MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt
MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh
LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD+NrefT
HPG8AAxJ4Uyn0LX6erPl/zlMro+puIO5gnYi24zGw5Vg4a4HJObWjOuccV50qml2
+LIB6ioCsq5PK8/4yzmemMcnwEYvsRLHURYNFAZn6gYOIe+iykq9UIV3NUVwkRzL
IfDX5FEoSgvTCXKxC+fR3QGR1U4so8i9qnQiO5iMVhOxgOYApvA2ONNz8quOIIRU
d7LcXTZ7BX9pH3acE1/XBtji3XPWwuKgBEbyACHF1TkSAaPTYidSBIK4FwMyy8D5
6VEI9987tkIne6NgE7oO0+Ppbh/8NZMbGfYRZZDK2VMP5aJYtDMIEg4LYvNmiXQ1
D8/qb6hqXnoAQw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client