Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
File: 189nO-jwMimh57bmFhbzl0ziL_4.mft (raw, json)
Hash identifier: gKZw0ugQBVTunGef7sexyNcxzXaVZ+FPbwOioh7J+O0=
Subject key identifier: 7D:23:6D:89:72:9D:10:CA:17:8C:40:D7:57:CD:53:6C:9D:6C:AA:F5
Authority key identifier: D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
Certificate issuer: /CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Certificate serial: 019D37F75E6816CD2502B0C08A416D9035BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
Manifest number: 34
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: 189nO-jwMimh57bmFhbzl0ziL_4.crl (hash: KH1n4tMjteZXX4HJE/VmlsrpGHqFWvvKKMOh9L+nASo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5e:68:16:cd:25:02:b0:c0:8a:41:6d:90:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=7d236d89729d10ca178c40d757cd536c9d6caaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:8c:b7:fb:20:d6:92:02:a7:7e:f7:e4:7c:
77:49:7f:72:2a:84:43:28:25:b1:d0:e1:1a:f9:4e:
06:ae:f4:a7:d3:bd:08:dc:2d:2f:bb:d6:9e:31:94:
2a:bc:27:b7:cd:5a:0c:1a:40:66:d8:38:df:62:61:
83:b1:c2:f4:4d:44:53:15:3c:7c:54:e2:0b:a7:8b:
89:f9:40:e4:fb:c6:85:72:54:ab:37:7f:f7:fd:a6:
c8:7a:40:a1:17:9a:30:d4:d4:49:57:ad:a2:ca:0d:
f0:34:84:fb:ba:df:6d:25:3c:54:39:10:c3:77:70:
3b:c8:b1:92:6a:57:c8:e9:0b:09:37:fb:74:49:69:
a9:2e:b9:ff:ac:6d:b6:03:0c:e3:e7:22:0f:24:6a:
ff:29:92:84:b3:d8:92:3c:f1:69:a4:90:e5:66:71:
97:90:43:72:6b:55:b9:50:6c:41:2d:df:7f:14:29:
4b:ff:ba:f7:b7:a8:8b:e0:19:18:bc:53:13:23:bc:
8f:37:fe:9a:53:27:33:04:ea:f7:5e:0c:b0:9a:f5:
23:8d:98:9f:6c:58:45:33:ab:78:5f:ea:f2:99:4c:
ac:0c:09:96:64:f6:37:1d:9e:94:c6:b8:b4:1d:8b:
0f:2f:72:f3:0b:35:8b:03:51:a7:b9:ee:ee:32:72:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:23:6D:89:72:9D:10:CA:17:8C:40:D7:57:CD:53:6C:9D:6C:AA:F5
X509v3 Authority Key Identifier:
keyid:D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:28:0a:74:43:d4:68:4b:e2:1c:e7:d6:7f:4e:01:93:ef:
c0:4d:cc:c0:6b:cf:39:d8:87:86:d5:fe:05:cf:a6:0e:85:92:
b2:98:6a:9f:2d:b3:63:8d:1f:a3:17:39:e0:96:6c:9d:33:d4:
a7:2f:5f:ba:cb:7c:ad:fc:a0:e3:ec:54:6a:99:d1:08:c3:24:
ca:93:63:97:35:e9:67:cd:2c:f2:bc:8c:df:b9:58:7a:ff:c5:
0d:16:1f:f6:63:61:45:fb:dc:9b:49:dd:06:d2:8e:fc:00:0b:
dd:01:70:1d:49:5d:44:88:6c:34:72:09:3f:61:d2:35:56:e3:
93:d1:fc:77:c5:dd:4a:04:3e:4f:e7:09:43:e6:84:4a:a5:6a:
23:18:70:a6:ad:95:95:b9:f5:c0:0c:5e:32:7f:d4:0b:31:fe:
f2:ba:4f:a3:4a:fb:74:f4:fd:f2:09:d2:88:0f:d7:35:1f:b7:
bd:f8:e6:aa:e2:83:e8:93:7e:60:0e:06:27:6e:ad:c1:d1:ad:
66:a4:b5:51:a8:68:76:4f:41:3a:e5:24:d9:b0:55:d8:33:2e:
a8:7e:45:19:b2:04:01:2c:a3:79:65:72:65:d3:83:25:28:31:
9b:ec:2d:bb:35:37:dd:3f:9b:1a:75:4d:ae:e9:02:70:33:81:
c4:a0:dc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03915oFs0lArDAikFtkDW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2Y2NzNiZThmMDMyMjlhMWU3YjZlNjE2MTZmMzk3NGNl
MjJmZmUwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
Eyg3ZDIzNmQ4OTcyOWQxMGNhMTc4YzQwZDc1N2NkNTM2YzlkNmNhYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKMt/sg1pICp3735Hx3SX9yKoRD
KCWx0OEa+U4GrvSn070I3C0vu9aeMZQqvCe3zVoMGkBm2DjfYmGDscL0TURTFTx8
VOILp4uJ+UDk+8aFclSrN3/3/abIekChF5ow1NRJV62iyg3wNIT7ut9tJTxUORDD
d3A7yLGSalfI6QsJN/t0SWmpLrn/rG22Awzj5yIPJGr/KZKEs9iSPPFppJDlZnGX
kENya1W5UGxBLd9/FClL/7r3t6iL4BkYvFMTI7yPN/6aUyczBOr3XgywmvUjjZif
bFhFM6t4X+rymUysDAmWZPY3HZ6Uxri0HYsPL3LzCzWLA1Gnue7uMnLXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0jbYlynRDKF4xA11fNU2ydbKr1MB8GA1UdIwQY
MBaAFNfPZzvo8DIpoee25hYW85dM4i/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTg5bk8tandNaW1oNTdibUZoYnpsMHppTF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZDc5Y2EtYmI3YS00YTY1LTk4MzAt
MTUzN2U3OTQ1NTllLzEvMTg5bk8tandNaW1oNTdibUZoYnpsMHppTF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZDc5Y2EtYmI3YS00YTY1LTk4MzAtMTUzN2U3OTQ1NTll
LzEvMTg5bk8tandNaW1oNTdibUZoYnpsMHppTF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEsoCnRD
1GhL4hzn1n9OAZPvwE3MwGvPOdiHhtX+Bc+mDoWSsphqny2zY40foxc54JZsnTPU
py9fust8rfyg4+xUapnRCMMkypNjlzXpZ80s8ryM37lYev/FDRYf9mNhRfvcm0nd
BtKO/AAL3QFwHUldRIhsNHIJP2HSNVbjk9H8d8XdSgQ+T+cJQ+aESqVqIxhwpq2V
lbn1wAxeMn/UCzH+8rpPo0r7dPT98gnSiA/XNR+3vfjmquKD6JN+YA4GJ26twdGt
ZqS1Uahodk9BOuUk2bBV2DMuqH5FGbIEASyjeWVyZdODJSgxm+wtuzU33T+bGnVN
rukCcDOBxKDcoA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:07 2026 by rpki-client