Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 3xEc6jOzET67dd31p9ZFf+gbFQOPthCq9r+WLkSW1II=
Subject key identifier: B9:30:7C:3F:39:E2:C4:9A:41:24:2D:D5:75:AA:F7:3C:EA:66:37:0A
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 019D062F445E13F33562A76F8560A3DCBED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1871
Signing time: Thu 19 Mar 2026 13:00:54 +0000
Manifest this update: Thu 19 Mar 2026 13:00:54 +0000
Manifest next update: Fri 20 Mar 2026 13:00:54 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: rAovAAglt2iPYrE41xf/sqB0+kpBSoG4yG+eL/T84uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2f:44:5e:13:f3:35:62:a7:6f:85:60:a3:dc:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Mar 19 13:00:54 2026 GMT
Not After : Mar 20 13:00:54 2026 GMT
Subject: CN=b9307c3f39e2c49a41242dd575aaf73cea66370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:38:3b:12:90:b9:0f:d0:f3:6d:1c:42:ee:
66:a2:4d:78:1d:37:25:d9:d8:c0:92:d0:5c:8a:8f:
bc:e9:61:fd:21:1c:e8:d8:59:de:86:8e:0d:e2:d4:
1a:b2:75:c9:67:04:2c:c0:2d:fe:2d:22:e0:f0:0d:
ca:05:0f:e9:b2:12:39:5c:f1:e0:8a:34:99:a3:f6:
b4:27:80:23:d0:87:8a:7a:bf:4e:81:ea:70:9c:44:
45:4a:ee:41:53:76:72:3e:36:8d:bb:4c:a4:01:c2:
ce:52:07:b0:85:8a:fb:7c:87:5d:0a:c9:4a:68:3a:
28:84:92:c4:23:78:4a:06:2a:a4:57:09:db:92:00:
30:7c:51:ac:e3:01:79:ff:1d:b7:4f:41:7c:f4:a5:
cd:1d:bc:5c:05:a8:63:94:b4:a7:a3:9e:c4:fa:46:
16:64:e8:9e:ef:33:42:8b:71:66:d7:78:58:08:87:
c4:12:32:9d:82:55:36:e8:92:63:31:88:e3:5e:fa:
e5:33:28:62:1d:c0:19:76:d7:7c:08:8c:fd:45:bb:
d7:23:85:42:6b:0b:65:a2:df:46:b0:91:8f:62:c7:
f7:e4:78:05:86:ef:8b:9a:fd:53:80:c5:76:d3:1e:
5e:3b:09:36:97:7d:33:d5:7a:c9:3c:3f:31:51:0e:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:7C:3F:39:E2:C4:9A:41:24:2D:D5:75:AA:F7:3C:EA:66:37:0A
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:f9:c2:20:64:ea:4e:1b:67:69:b9:a4:63:31:8a:41:30:
14:4d:8d:94:dc:05:6c:63:bf:75:e2:0d:85:60:05:87:4c:2a:
11:b7:f4:8a:fd:d0:1b:2a:8e:85:08:0e:5b:d1:83:fc:29:1a:
fc:64:c7:d8:92:82:d9:48:4a:d8:40:a8:8e:e5:13:7d:9f:8b:
ec:a6:68:d3:9e:e7:07:71:1e:f7:53:c9:33:6c:c3:88:55:d9:
e2:76:ae:88:31:02:8d:fc:70:07:ef:57:a3:59:76:62:27:52:
63:18:04:e5:26:72:0b:9d:bf:cd:63:d7:a5:65:8f:64:83:57:
ff:96:f3:33:3c:85:26:dd:33:c9:03:51:f5:c6:5a:ba:cf:43:
db:db:4b:73:f8:1e:1d:c1:91:f4:03:db:33:9a:f1:62:c2:06:
0f:53:ca:50:8b:2c:ed:5e:00:d6:ef:58:4d:d6:14:da:dd:50:
e0:d3:be:3d:d6:d5:5a:b0:59:78:6f:53:22:e7:b7:12:42:d7:
ec:59:b4:aa:a5:d8:08:2d:d7:ad:26:dd:40:5a:c7:49:8b:74:
47:48:96:0b:04:18:38:c3:f4:bd:b6:c5:9b:cd:cb:02:be:09:
33:99:e9:f7:35:4b:f3:72:d1:ca:14:fd:7c:1d:a3:23:bf:bb:
1f:19:fb:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0GL0ReE/M1YqdvhWCj3L7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2
MWJmMjMwHhcNMjYwMzE5MTMwMDU0WhcNMjYwMzIwMTMwMDU0WjAzMTEwLwYDVQQD
EyhiOTMwN2MzZjM5ZTJjNDlhNDEyNDJkZDU3NWFhZjczY2VhNjYzNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbU4OxKQuQ/Q820cQu5mok14HTcl
2djAktBcio+86WH9IRzo2Fneho4N4tQasnXJZwQswC3+LSLg8A3KBQ/pshI5XPHg
ijSZo/a0J4Aj0IeKer9OgepwnERFSu5BU3ZyPjaNu0ykAcLOUgewhYr7fIddCslK
aDoohJLEI3hKBiqkVwnbkgAwfFGs4wF5/x23T0F89KXNHbxcBahjlLSno57E+kYW
ZOie7zNCi3Fm13hYCIfEEjKdglU26JJjMYjjXvrlMyhiHcAZdtd8CIz9RbvXI4VC
awtlot9GsJGPYsf35HgFhu+Lmv1TgMV20x5eOwk2l30z1XrJPD8xUQ4aYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkwfD854sSaQSQt1XWq9zzqZjcKMB8GA1UdIwQY
MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt
ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx
LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD35wiBk
6k4bZ2m5pGMxikEwFE2NlNwFbGO/deINhWAFh0wqEbf0iv3QGyqOhQgOW9GD/Cka
/GTH2JKC2UhK2ECojuUTfZ+L7KZo057nB3Ee91PJM2zDiFXZ4nauiDECjfxwB+9X
o1l2YidSYxgE5SZyC52/zWPXpWWPZINX/5bzMzyFJt0zyQNR9cZaus9D29tLc/ge
HcGR9APbM5rxYsIGD1PKUIss7V4A1u9YTdYU2t1Q4NO+PdbVWrBZeG9TIue3EkLX
7Fm0qqXYCC3XrSbdQFrHSYt0R0iWCwQYOMP0vbbFm83LAr4JM5np9zVL83LRyhT9
fB2jI7+7Hxn7SA==
-----END CERTIFICATE-----
Generated at Thu Mar 19 23:13:03 2026 by rpki-client