Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: SfRPSwW1D5aCm6FHUzmdrf/aMC9l2XB6kZbL0OvgzoQ=
Subject key identifier: 0C:51:4B:9E:67:94:2E:32:B5:D4:40:35:82:FA:10:71:65:3E:45:CB
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 019D38667A79EA97ABFBAECA4FB5066951AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0F33
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: uYNtpHOCHfosxm5cyVIFuaz37d+gHfht9QEqEb2tE7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7a:79:ea:97:ab:fb:ae:ca:4f:b5:06:69:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=0c514b9e67942e32b5d4403582fa1071653e45cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:cc:fa:da:0e:ed:f4:e0:c2:6d:33:81:9b:
7b:16:ca:65:53:8c:6a:f1:2d:01:55:91:2b:cc:3e:
92:38:c9:4c:7e:9e:9c:d4:83:d7:b0:84:40:81:30:
43:93:8b:c1:85:b1:7c:94:97:ef:dd:01:2f:0c:de:
a6:03:56:89:b2:f0:b5:ec:83:93:4b:bb:b6:2a:4d:
61:93:f5:ef:ca:6c:18:b4:2a:5d:ad:49:1b:2c:60:
85:9c:f0:5c:cf:2e:1b:9f:fa:04:63:88:71:e8:65:
e1:11:d0:43:db:36:cf:b8:33:4e:0a:4c:f7:c2:ed:
7a:ab:51:f5:cf:cf:93:db:92:f3:78:9f:22:c5:e7:
26:b0:1d:9a:52:61:03:f8:9f:c5:3f:53:e4:de:59:
10:0f:e9:22:6d:66:41:53:5b:11:78:bd:cb:72:45:
4f:77:29:a0:69:1b:c9:5d:66:17:4c:6a:02:6c:b8:
bb:0d:55:c5:dc:81:03:31:db:2b:4c:2b:8f:ed:4c:
7f:55:20:ca:dc:4a:74:f7:57:76:16:1e:05:37:96:
4d:13:17:38:6c:4f:5e:6c:e5:68:ff:e0:8a:19:a1:
33:22:0b:3c:84:06:7b:72:c1:44:58:d4:62:6d:9c:
4d:4c:25:83:ba:1b:d2:12:d7:ff:64:17:c0:ac:a2:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:4B:9E:67:94:2E:32:B5:D4:40:35:82:FA:10:71:65:3E:45:CB
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:8d:0d:c7:bb:a4:3a:cc:a1:f2:87:67:f2:32:9b:e5:30:
47:38:13:86:2a:c2:60:b9:cd:4f:ee:7e:b4:8e:1e:25:df:9d:
f3:51:80:ad:12:80:41:93:88:f1:4f:59:6b:e9:8a:0b:df:81:
19:bd:33:a0:ae:43:29:40:41:28:98:f2:b7:5a:34:d2:97:9b:
90:14:e0:8e:85:77:bd:59:bc:8e:38:3b:73:ae:f6:a3:8a:73:
52:41:4f:e1:0b:0f:fe:56:04:54:ca:18:74:76:7c:11:ca:1c:
38:5e:a4:76:52:87:d0:10:3e:88:a8:42:fe:34:7e:df:67:e8:
63:b9:84:70:56:3f:4c:88:52:b2:c9:37:fa:d8:12:e9:fb:82:
d6:6e:b9:dd:cc:85:95:2f:0c:66:44:c9:ae:5e:1e:d2:17:4f:
40:53:7d:b4:bb:a1:34:65:8f:61:2f:b0:71:b3:95:77:38:92:
28:5b:ef:cb:54:4b:22:cf:bf:88:69:a6:7b:e4:30:12:70:46:
0e:84:fd:d1:91:e2:a6:8d:e9:5b:2d:1c:40:b2:e4:d2:6f:ec:
a6:14:d8:ac:60:db:c0:cf:b0:ed:a9:b8:46:5f:ec:5b:44:69:
80:95:8c:33:37:71:56:cf:4f:6d:ad:0e:44:54:b8:08:f2:44:
9f:23:f2:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Znp56per+67KT7UGaVGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5
ZmYyY2MwHhcNMjYwMzI5MDcwMjEzWhcNMjYwMzMwMDcwMjEzWjAzMTEwLwYDVQQD
EygwYzUxNGI5ZTY3OTQyZTMyYjVkNDQwMzU4MmZhMTA3MTY1M2U0NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/M+toO7fTgwm0zgZt7FsplU4xq
8S0BVZErzD6SOMlMfp6c1IPXsIRAgTBDk4vBhbF8lJfv3QEvDN6mA1aJsvC17IOT
S7u2Kk1hk/XvymwYtCpdrUkbLGCFnPBczy4bn/oEY4hx6GXhEdBD2zbPuDNOCkz3
wu16q1H1z8+T25LzeJ8ixecmsB2aUmED+J/FP1Pk3lkQD+kibWZBU1sReL3LckVP
dymgaRvJXWYXTGoCbLi7DVXF3IEDMdsrTCuP7Ux/VSDK3Ep091d2Fh4FN5ZNExc4
bE9ebOVo/+CKGaEzIgs8hAZ7csFEWNRibZxNTCWDuhvSEtf/ZBfArKIWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxRS55nlC4ytdRANYL6EHFlPkXLMB8GA1UdIwQY
MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt
MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy
LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtueNDce7
pDrMofKHZ/Iym+UwRzgThirCYLnNT+5+tI4eJd+d81GArRKAQZOI8U9Za+mKC9+B
Gb0zoK5DKUBBKJjyt1o00pebkBTgjoV3vVm8jjg7c672o4pzUkFP4QsP/lYEVMoY
dHZ8EcocOF6kdlKH0BA+iKhC/jR+32foY7mEcFY/TIhSssk3+tgS6fuC1m653cyF
lS8MZkTJrl4e0hdPQFN9tLuhNGWPYS+wcbOVdziSKFvvy1RLIs+/iGmme+QwEnBG
DoT90ZHipo3pWy0cQLLk0m/sphTYrGDbwM+w7am4Rl/sW0RpgJWMMzdxVs9Pba0O
RFS4CPJEnyPyXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:34 2026 by rpki-client