Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: Kw/ITGkMxF0BSpFIaQHoPBwoBPg4ufkd4QYxej+JReQ=
Subject key identifier: 32:4C:50:9D:59:D8:24:EE:F1:27:86:06:23:F0:90:95:90:32:48:11
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 019D37F6EB1FF30B5C9636AABEDB05F3228B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: KwctrYLeRKoApU1-lNG2pUzIRFY.roa (hash: 1By8fKUFtlATKn4LhCiJ+z6rFS67TtSuGlxf5SYKGN4=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: NlHOThVz8cMT8a/1dU0MmCEROHONepayW3alvvDisP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:eb:1f:f3:0b:5c:96:36:aa:be:db:05:f3:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=324c509d59d824eef127860623f0909590324811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:a5:5e:61:ec:ca:8c:ae:42:ae:2d:9e:93:
59:66:79:d0:6e:1d:39:8c:90:77:a4:97:35:4d:8b:
4d:29:b2:bc:31:5a:0b:8a:29:02:f7:d3:d1:14:13:
f9:95:ca:e7:34:9a:08:95:f1:fe:17:ec:8f:a8:05:
96:c7:fd:4c:59:c3:9f:16:18:3e:bd:70:4e:79:21:
9a:66:53:9f:78:94:d7:4e:7b:a7:11:31:b6:af:ef:
c4:d1:49:33:f8:64:97:1e:59:ac:f2:f0:4d:9b:aa:
14:b7:1b:dd:00:c7:a8:82:0a:1a:22:64:8c:50:51:
ce:35:61:db:c3:de:1d:ff:94:04:e7:49:d5:99:a7:
2f:87:13:6f:d9:ec:5c:b9:17:86:1d:65:8e:29:7c:
25:a0:e7:de:78:a5:19:ed:ee:1f:3f:17:d0:e5:e5:
b9:5f:16:8b:3e:b8:40:40:e6:47:93:1c:fe:36:b3:
b3:5c:90:cb:7a:1a:32:5d:cc:92:77:0a:a9:f7:8c:
73:7a:8a:32:40:58:42:51:64:c2:b6:b9:d0:c8:b9:
bb:1c:99:5e:da:2c:4b:5b:65:f2:92:13:c4:44:d9:
bb:06:f5:7f:c5:6c:12:8a:25:95:e7:8b:c3:0b:46:
02:00:91:4c:83:56:e0:f4:b4:8d:86:fc:cc:30:70:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:50:9D:59:D8:24:EE:F1:27:86:06:23:F0:90:95:90:32:48:11
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:46:62:a0:16:90:ad:c8:db:d1:02:b9:31:39:68:75:69:54:
1e:54:14:89:fc:a9:b1:f5:ae:80:b2:cd:73:b5:b2:25:8b:e2:
a2:20:e1:da:4b:1b:f1:c7:9f:39:9f:cd:79:cc:8e:15:89:02:
cc:ed:06:d9:1a:6b:f7:61:b3:a7:07:76:28:ff:72:99:60:04:
28:b4:64:9d:a7:2d:f3:df:27:27:5f:62:c7:64:49:f1:61:5d:
ea:d9:2b:dc:47:59:81:f2:46:34:d2:73:26:fb:51:51:b2:3a:
c4:28:e1:e3:de:af:97:73:12:38:fd:15:2b:67:bc:20:92:71:
c1:7c:41:3d:9a:6c:6b:17:d7:ff:99:c5:c6:bf:a7:00:a6:2c:
9b:b1:19:68:c8:73:34:20:80:63:a8:8d:cb:80:64:4c:d5:c6:
ec:86:75:a7:03:80:bf:c0:ab:af:4d:8f:78:54:f6:e8:cb:03:
10:fd:05:33:52:8f:96:89:f5:5a:3e:6c:d4:55:88:b9:9d:fa:
20:2c:79:4d:95:94:06:5d:11:f9:d2:cb:91:19:9d:e9:df:aa:
93:e9:bf:f3:d4:82:3b:46:db:e0:a2:b3:93:d8:54:d5:df:18:
30:4a:da:17:dd:79:e3:41:15:2c:62:23:42:36:bf:8b:46:00:
b9:2b:cb:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039usf8wtcljaqvtsF8yKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5
NDNjNWYwHhcNMjYwMzI5MDUwMDIyWhcNMjYwMzMwMDUwMDIyWjAzMTEwLwYDVQQD
EygzMjRjNTA5ZDU5ZDgyNGVlZjEyNzg2MDYyM2YwOTA5NTkwMzI0ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LilXmHsyoyuQq4tnpNZZnnQbh05
jJB3pJc1TYtNKbK8MVoLiikC99PRFBP5lcrnNJoIlfH+F+yPqAWWx/1MWcOfFhg+
vXBOeSGaZlOfeJTXTnunETG2r+/E0Ukz+GSXHlms8vBNm6oUtxvdAMeoggoaImSM
UFHONWHbw94d/5QE50nVmacvhxNv2excuReGHWWOKXwloOfeeKUZ7e4fPxfQ5eW5
XxaLPrhAQOZHkxz+NrOzXJDLehoyXcySdwqp94xzeooyQFhCUWTCtrnQyLm7HJle
2ixLW2XykhPERNm7BvV/xWwSiiWV54vDC0YCAJFMg1bg9LSNhvzMMHBU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJMUJ1Z2CTu8SeGBiPwkJWQMkgRMB8GA1UdIwQY
MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt
MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4
LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkZioBaQ
rcjb0QK5MTlodWlUHlQUifypsfWugLLNc7WyJYvioiDh2ksb8cefOZ/NecyOFYkC
zO0G2Rpr92Gzpwd2KP9ymWAEKLRknact898nJ19ix2RJ8WFd6tkr3EdZgfJGNNJz
JvtRUbI6xCjh496vl3MSOP0VK2e8IJJxwXxBPZpsaxfX/5nFxr+nAKYsm7EZaMhz
NCCAY6iNy4BkTNXG7IZ1pwOAv8Crr02PeFT26MsDEP0FM1KPlon1Wj5s1FWIuZ36
ICx5TZWUBl0R+dLLkRmd6d+qk+m/89SCO0bb4KKzk9hU1d8YMEraF91540EVLGIj
Qja/i0YAuSvLjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client