Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: fDzMqpZCF+DMHtk2Yc7lj+qbLZccysQ4ZHJLpq33xkY=
Subject key identifier: 7A:3B:42:00:12:F9:97:A3:C6:7A:B6:5F:28:46:30:D6:A6:F2:E6:91
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019D38663EA2A90299DCB694C7D555739BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: is8aohEHMuROptS5FMia709WxajcYQPMLqJPuaovjEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3e:a2:a9:02:99:dc:b6:94:c7:d5:55:73:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=7a3b420012f997a3c67ab65f284630d6a6f2e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:08:38:ea:0d:81:be:ea:a1:f3:74:93:85:
f9:55:43:39:6b:de:16:eb:14:0b:d5:c3:04:52:db:
54:03:47:21:e4:ee:bc:de:3e:8e:1b:8d:47:a4:f0:
ae:bf:bf:2f:61:a6:c0:27:d1:c4:d0:44:f1:f3:77:
b7:20:03:b3:9b:12:95:b1:4f:b3:9c:8e:bb:7e:72:
f1:44:8e:6b:6a:ef:da:50:00:64:59:be:e3:33:1d:
ce:84:70:b6:19:c0:96:8d:ed:80:cf:64:24:85:31:
0f:b3:9d:bb:3f:1f:ed:07:14:1b:73:a5:17:a0:ec:
81:d8:eb:30:ae:d1:3d:a3:f9:3a:fc:3d:77:0d:1c:
c6:21:e2:6d:5d:60:aa:02:f2:f8:d3:a9:cd:10:1a:
8f:af:36:e9:be:81:6b:a3:19:c3:0a:40:64:c1:42:
4a:27:d2:c3:1d:ce:76:14:06:fe:2f:07:29:25:98:
9c:68:80:44:d8:ed:ca:87:e9:72:be:fd:bb:63:f1:
1e:fe:78:19:6f:74:0d:c4:af:76:82:e1:5a:4c:54:
fb:d2:5a:5c:c7:d3:89:90:64:05:df:f0:be:c6:8b:
6b:4e:6b:b9:59:f4:09:ae:ea:99:ad:93:27:24:38:
76:34:b5:6d:c0:f0:a2:34:2b:7e:f6:b1:a1:6c:b3:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:42:00:12:F9:97:A3:C6:7A:B6:5F:28:46:30:D6:A6:F2:E6:91
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:0f:4e:ab:8d:28:f9:b3:6f:4b:cd:9f:97:00:34:ec:68:
99:e3:5c:a3:b4:30:5d:66:68:11:e6:e2:05:5c:83:19:49:42:
b5:0f:eb:c4:e5:15:1f:e1:0f:ff:d0:79:2a:28:c3:94:10:25:
b0:a5:a4:b1:cb:d5:d2:81:ed:7f:23:bd:96:53:e4:b7:9b:cb:
6e:1a:a2:dd:ca:97:33:fc:16:81:fe:e1:e4:a7:60:25:f2:78:
c2:95:e4:37:6f:8f:08:5a:78:b9:22:1d:2d:81:bf:5a:89:43:
97:fc:77:3d:e7:18:62:8a:13:75:cf:59:48:b8:a9:6f:da:90:
83:a7:2d:d6:48:0a:82:bb:ae:01:6f:e0:24:c8:a7:25:d8:d0:
80:d2:72:d4:7c:bb:18:e5:f7:2b:4f:a9:69:c4:8e:bc:cc:ca:
6f:5f:79:15:0b:fc:de:b6:5e:0f:a3:54:49:b3:52:7d:8c:3b:
7e:6d:f3:16:78:36:82:fe:5a:3b:22:77:73:1c:48:24:76:fa:
d9:0a:9a:64:5e:84:d6:7a:02:cc:a0:51:10:f2:f1:6b:25:fa:
85:e1:c4:aa:d0:36:87:52:83:7e:f1:bc:bc:67:51:9e:e5:bd:
f9:0d:1d:6f:aa:01:f0:0b:83:1f:45:61:99:e8:16:c5:6a:7b:
93:fd:f2:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zj6iqQKZ3LaUx9VVc5vXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjYwMzI5MDcwMTU3WhcNMjYwMzMwMDcwMTU3WjAzMTEwLwYDVQQD
Eyg3YTNiNDIwMDEyZjk5N2EzYzY3YWI2NWYyODQ2MzBkNmE2ZjJlNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tAIOOoNgb7qofN0k4X5VUM5a94W
6xQL1cMEUttUA0ch5O683j6OG41HpPCuv78vYabAJ9HE0ETx83e3IAOzmxKVsU+z
nI67fnLxRI5rau/aUABkWb7jMx3OhHC2GcCWje2Az2QkhTEPs527Px/tBxQbc6UX
oOyB2OswrtE9o/k6/D13DRzGIeJtXWCqAvL406nNEBqPrzbpvoFroxnDCkBkwUJK
J9LDHc52FAb+LwcpJZicaIBE2O3Kh+lyvv27Y/Ee/ngZb3QNxK92guFaTFT70lpc
x9OJkGQF3/C+xotrTmu5WfQJruqZrZMnJDh2NLVtwPCiNCt+9rGhbLNOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo7QgAS+Zejxnq2XyhGMNam8uaRMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwwPTquN
KPmzb0vNn5cANOxomeNco7QwXWZoEebiBVyDGUlCtQ/rxOUVH+EP/9B5KijDlBAl
sKWkscvV0oHtfyO9llPkt5vLbhqi3cqXM/wWgf7h5KdgJfJ4wpXkN2+PCFp4uSId
LYG/WolDl/x3PecYYooTdc9ZSLipb9qQg6ct1kgKgruuAW/gJMinJdjQgNJy1Hy7
GOX3K0+pacSOvMzKb195FQv83rZeD6NUSbNSfYw7fm3zFng2gv5aOyJ3cxxIJHb6
2QqaZF6E1noCzKBREPLxayX6heHEqtA2h1KDfvG8vGdRnuW9+Q0db6oB8AuDH0Vh
megWxWp7k/3yJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:12 2026 by rpki-client