Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
File: 461v6kSDfaCdkjFcYPCcewaz6wc.mft (raw, json)
Hash identifier: hgiZjfMYJBC3GoVTfDDwGglVtVAwjmGp64jovkn6tBI=
Subject key identifier: F1:7F:46:BB:80:A8:D2:C0:C6:3B:C8:28:7B:D0:3B:B5:6A:79:60:F0
Authority key identifier: E3:AD:6F:EA:44:83:7D:A0:9D:92:31:5C:60:F0:9C:7B:06:B3:EB:07
Certificate issuer: /CN=e3ad6fea44837da09d92315c60f09c7b06b3eb07
Certificate serial: 019D3865F4EF617D333DFD10ECE2B78788BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
Manifest number: D3
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: 461v6kSDfaCdkjFcYPCcewaz6wc.crl (hash: zBSGqODnuriULbJbwoKbBspA9b9rCG6iLXZ7hxwupZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:ef:61:7d:33:3d:fd:10:ec:e2:b7:87:88:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ad6fea44837da09d92315c60f09c7b06b3eb07
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=f17f46bb80a8d2c0c63bc8287bd03bb56a7960f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:e4:8b:95:09:ef:7d:da:33:e1:bd:af:8b:
05:16:84:6b:00:d9:0e:d6:54:53:ec:9b:2a:a6:e9:
62:41:95:0a:81:6a:1c:26:e1:46:78:aa:92:c3:60:
c3:a4:92:36:da:e5:47:82:4a:cb:f6:e6:5d:b4:d5:
10:f3:10:da:0e:e7:34:ed:71:05:5b:82:c0:d3:43:
44:6f:e9:ce:7c:c3:6b:f1:53:63:b7:79:fb:b3:30:
90:fd:b9:f6:8f:a7:3d:b6:07:91:66:3e:d8:4a:77:
a1:db:5e:f9:81:b0:68:54:11:37:f0:fb:53:ab:33:
b9:ea:23:9a:23:6a:66:a7:43:3c:e8:1a:d8:e8:45:
6d:cd:4b:37:3f:5e:b4:96:fd:7b:99:01:7e:80:ba:
3b:cc:c2:ed:f8:c0:44:7a:1b:6e:e6:70:32:e5:7b:
8c:ca:07:8e:04:06:45:a3:ee:85:63:51:b2:52:59:
96:c4:82:a6:73:5c:bd:ea:57:f2:99:34:ea:e1:2f:
56:a8:9f:1b:37:c2:47:dc:af:3b:6f:50:e3:b1:89:
e6:29:46:04:be:a5:d8:eb:99:95:29:dd:6c:ba:b1:
b2:fe:03:f7:f4:94:cd:ea:32:a1:3b:a6:5b:56:b7:
ce:48:c7:3e:1f:55:ae:60:ec:7c:4c:05:ba:7a:9b:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:46:BB:80:A8:D2:C0:C6:3B:C8:28:7B:D0:3B:B5:6A:79:60:F0
X509v3 Authority Key Identifier:
keyid:E3:AD:6F:EA:44:83:7D:A0:9D:92:31:5C:60:F0:9C:7B:06:B3:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:af:e9:0f:98:8a:a2:7c:d7:d6:ad:da:43:38:13:93:98:
fc:6c:26:a9:24:6e:e7:60:82:b3:e3:09:e2:95:4d:5d:7c:76:
7d:cd:ab:20:77:7f:11:d9:ff:5d:82:d0:9a:71:b1:b0:2f:8e:
82:29:62:34:87:82:3c:f9:72:f8:cd:3b:2e:07:45:88:ab:1d:
12:a0:ee:b8:e7:1d:1f:63:04:9c:af:24:a5:ad:2a:36:38:c6:
bc:a6:4d:54:9f:0c:84:70:83:0b:9f:fc:9d:0d:e2:42:40:1b:
d7:cc:90:7d:9a:c6:bc:9a:ef:e1:8e:40:94:5e:e1:f3:b3:b4:
93:00:60:b2:9c:f7:a5:5a:2d:59:f0:5f:59:80:9f:c1:58:7a:
0d:c4:08:fe:c4:8b:67:00:c0:39:37:a5:59:15:d8:7a:9d:08:
75:d0:56:4b:09:99:94:c8:74:ea:dd:58:7f:b8:c2:50:6f:ac:
65:01:d3:6a:04:31:37:e8:73:47:22:4e:51:f3:80:f8:85:2a:
13:d2:8e:34:90:36:81:4d:a7:76:2c:e9:08:08:e0:3d:70:10:
e1:6c:86:49:b6:37:90:b3:b4:06:17:39:0e:5a:d7:77:ce:1d:
b3:6f:bf:10:a5:13:2d:6b:95:32:29:cd:5e:53:f8:38:09:22:
ec:36:dc:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZfTvYX0zPf0Q7OK3h4i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWQ2ZmVhNDQ4MzdkYTA5ZDkyMzE1YzYwZjA5YzdiMDZi
M2ViMDcwHhcNMjYwMzI5MDcwMTM5WhcNMjYwMzMwMDcwMTM5WjAzMTEwLwYDVQQD
EyhmMTdmNDZiYjgwYThkMmMwYzYzYmM4Mjg3YmQwM2JiNTZhNzk2MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZPki5UJ733aM+G9r4sFFoRrANkO
1lRT7JsqpuliQZUKgWocJuFGeKqSw2DDpJI22uVHgkrL9uZdtNUQ8xDaDuc07XEF
W4LA00NEb+nOfMNr8VNjt3n7szCQ/bn2j6c9tgeRZj7YSneh2175gbBoVBE38PtT
qzO56iOaI2pmp0M86BrY6EVtzUs3P160lv17mQF+gLo7zMLt+MBEehtu5nAy5XuM
ygeOBAZFo+6FY1GyUlmWxIKmc1y96lfymTTq4S9WqJ8bN8JH3K87b1DjsYnmKUYE
vqXY65mVKd1surGy/gP39JTN6jKhO6ZbVrfOSMc+H1WuYOx8TAW6epth9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF/RruAqNLAxjvIKHvQO7VqeWDwMB8GA1UdIwQY
MBaAFOOtb+pEg32gnZIxXGDwnHsGs+sHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDYxdjZrU0RmYUNka2pGY1lQQ2Nld2F6NndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kNjBhYTctNWRiZS00ZGMwLWJmMDgt
ZDcxM2ZlZmE3YmEwLzEvNDYxdjZrU0RmYUNka2pGY1lQQ2Nld2F6NndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kNjBhYTctNWRiZS00ZGMwLWJmMDgtZDcxM2ZlZmE3YmEw
LzEvNDYxdjZrU0RmYUNka2pGY1lQQ2Nld2F6NndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0Ov6Q+Y
iqJ819at2kM4E5OY/GwmqSRu52CCs+MJ4pVNXXx2fc2rIHd/Edn/XYLQmnGxsC+O
giliNIeCPPly+M07LgdFiKsdEqDuuOcdH2MEnK8kpa0qNjjGvKZNVJ8MhHCDC5/8
nQ3iQkAb18yQfZrGvJrv4Y5AlF7h87O0kwBgspz3pVotWfBfWYCfwVh6DcQI/sSL
ZwDAOTelWRXYep0IddBWSwmZlMh06t1Yf7jCUG+sZQHTagQxN+hzRyJOUfOA+IUq
E9KONJA2gU2ndizpCAjgPXAQ4WyGSbY3kLO0Bhc5DlrXd84ds2+/EKUTLWuVMinN
XlP4OAki7Dbc1w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:59 2026 by rpki-client