Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: zRfZ4QtPy5zIn88IkWl0iADvEHoI7d/N7E54G0lHeaU=
Subject key identifier: 40:F5:62:CC:46:F4:A0:8B:0A:39:CC:4F:B1:6D:D0:35:69:9C:95:89
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 019D394116FF2895677E76EFDC23B799F0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: eL8YmTeUVkGrK2XdY9pblQ6dJKmnyXp6Wp53ZPtBJUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:16:ff:28:95:67:7e:76:ef:dc:23:b7:99:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=40f562cc46f4a08b0a39cc4fb16dd035699c9589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:68:84:c7:31:27:e4:38:6b:95:8a:ca:f2:
3f:9b:8b:c6:2d:55:5e:85:00:d8:59:c9:f3:21:f1:
bc:d6:ea:3c:8c:a2:6e:fb:6e:1a:07:6c:9c:9d:99:
24:d1:fe:f3:24:e5:35:b0:5d:8f:6d:5e:95:05:3b:
66:a3:ec:2b:80:bf:6d:f6:58:1c:f3:fb:3b:1c:76:
4d:e2:0b:19:c1:07:35:58:6a:2e:2b:6f:13:7f:90:
5a:46:b7:b9:c9:b5:6e:03:c5:12:5f:8c:37:74:96:
b6:8e:5b:81:b3:8f:38:1f:58:1b:21:d1:a2:25:18:
c6:3d:18:ad:f6:35:ae:58:fe:56:e0:03:55:23:c5:
c2:d9:e1:ae:b2:64:14:7e:69:e9:dc:6a:8c:a1:8e:
6e:27:c9:37:0b:c0:21:56:30:a7:e9:85:48:55:0c:
35:47:d4:40:35:4e:f2:c8:d7:86:5a:51:7e:8a:69:
26:19:17:53:51:e2:d1:6e:29:27:2e:b4:ce:1b:ec:
2a:19:03:94:62:3c:04:8a:fe:d2:b6:6f:21:5f:f3:
d3:ad:3f:8b:a3:c6:10:7e:3b:3d:fc:7f:15:ef:97:
29:fd:90:31:1d:25:1a:ad:d4:ef:ab:87:dc:38:94:
28:cc:29:fb:0d:82:91:96:8d:94:f1:e9:3e:62:0e:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:62:CC:46:F4:A0:8B:0A:39:CC:4F:B1:6D:D0:35:69:9C:95:89
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:14:c1:25:ab:13:b2:68:b7:38:d4:1f:6d:57:85:7a:71:71:
1b:a4:14:64:3c:61:3f:7d:5d:a1:2c:87:12:b0:ad:9e:9a:17:
7e:59:39:e3:cf:65:6c:c7:45:36:ea:46:38:22:b9:5e:8d:2a:
77:fd:fb:44:75:0f:e3:71:5c:8b:80:93:de:ea:ba:13:cb:6a:
1f:75:48:4e:e0:21:94:ff:c9:80:8c:af:4e:a3:6b:04:0e:cc:
69:3b:bb:94:c6:ad:62:d7:ad:96:fc:59:57:88:bf:e4:07:6a:
20:90:f5:33:0e:7e:ee:93:cb:c3:b5:da:72:02:b1:5f:c4:8e:
6b:1b:b4:33:23:4f:75:0d:39:d0:d0:e6:35:51:54:96:13:29:
48:e3:0d:a8:53:80:29:9b:96:51:eb:46:72:74:ec:be:6d:63:
ba:7a:d4:42:cd:a1:52:1f:dd:3d:41:4c:5a:28:2a:21:8f:04:
41:11:5e:c7:53:c5:fe:77:4a:26:2d:a9:4c:8a:7f:81:38:bb:
45:8b:04:32:c1:ae:bb:a3:5d:f0:37:a9:3a:13:7f:56:2c:fb:
6e:69:f9:b0:be:f7:93:47:97:c7:b9:9a:4b:1a:46:b8:68:c9:
36:76:4f:1e:c6:4e:5d:74:f6:df:af:9d:98:12:16:13:bd:f5:
b2:c2:2a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRb/KJVnfnbv3CO3mfDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjYwMzI5MTEwMDU5WhcNMjYwMzMwMTEwMDU5WjAzMTEwLwYDVQQD
Eyg0MGY1NjJjYzQ2ZjRhMDhiMGEzOWNjNGZiMTZkZDAzNTY5OWM5NTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop1ohMcxJ+Q4a5WKyvI/m4vGLVVe
hQDYWcnzIfG81uo8jKJu+24aB2ycnZkk0f7zJOU1sF2PbV6VBTtmo+wrgL9t9lgc
8/s7HHZN4gsZwQc1WGouK28Tf5BaRre5ybVuA8USX4w3dJa2jluBs484H1gbIdGi
JRjGPRit9jWuWP5W4ANVI8XC2eGusmQUfmnp3GqMoY5uJ8k3C8AhVjCn6YVIVQw1
R9RANU7yyNeGWlF+imkmGRdTUeLRbiknLrTOG+wqGQOUYjwEiv7Stm8hX/PTrT+L
o8YQfjs9/H8V75cp/ZAxHSUardTvq4fcOJQozCn7DYKRlo2U8ek+Yg72xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED1YsxG9KCLCjnMT7Ft0DVpnJWJMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhTBJasT
smi3ONQfbVeFenFxG6QUZDxhP31doSyHErCtnpoXflk5489lbMdFNupGOCK5Xo0q
d/37RHUP43Fci4CT3uq6E8tqH3VITuAhlP/JgIyvTqNrBA7MaTu7lMatYtetlvxZ
V4i/5AdqIJD1Mw5+7pPLw7XacgKxX8SOaxu0MyNPdQ050NDmNVFUlhMpSOMNqFOA
KZuWUetGcnTsvm1junrUQs2hUh/dPUFMWigqIY8EQRFex1PF/ndKJi2pTIp/gTi7
RYsEMsGuu6Nd8DepOhN/Viz7bmn5sL73k0eXx7maSxpGuGjJNnZPHsZOXXT236+d
mBIWE731ssIqMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:23 2026 by rpki-client