Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: dIRaJrXWK/COFAfcmDO+MGAsqPBNdeXaQQRTbEWb5B4=
Subject key identifier: AF:44:A4:BC:3A:40:75:53:84:67:FC:5B:48:B8:FA:FF:3A:37:8F:B7
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019D38667B7E739B92B1BF8216FB91BBFDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 114F
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: 5luwXFNBwlTgwc15jmqdV4rQXtvobAzVPOvsO/6s2yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7b:7e:73:9b:92:b1:bf:82:16:fb:91:bb:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=af44a4bc3a4075538467fc5b48b8faff3a378fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:23:33:8d:7f:f7:13:00:34:d5:20:4d:a3:14:
d0:4d:bd:87:e4:87:06:6d:06:82:57:04:c4:e2:09:
e0:a8:95:25:d2:4a:95:a3:14:f1:e6:71:2c:f5:a9:
75:8a:96:00:56:dd:eb:f9:6a:9c:ab:d5:3a:98:dd:
c7:af:f5:c2:86:f5:9b:81:1c:09:4b:fd:3d:d0:a3:
d0:c9:bf:0f:84:3f:7c:d2:d8:fd:9a:d1:2f:70:d9:
f3:d0:8a:0f:cb:74:da:31:d2:88:9f:aa:28:4a:ec:
be:c0:b5:cb:31:e3:81:46:32:73:a3:5a:64:f4:91:
ea:ed:d2:88:a3:e4:5c:bb:2d:15:d9:6f:62:1f:37:
e7:c0:15:6c:75:e3:4d:fe:e3:85:6a:d0:20:43:db:
7d:81:05:af:66:98:ac:89:f3:c4:a2:73:a0:68:1c:
f7:73:d1:b6:5f:23:18:55:9b:f1:14:82:b5:ca:24:
b9:cc:15:66:14:7d:c6:75:5e:ff:1b:a6:84:c3:e9:
6e:a2:d4:4d:ea:b3:b1:48:18:aa:69:c9:fb:37:f5:
43:a0:0c:1c:48:c9:99:d3:61:d6:73:23:61:64:d3:
5d:7c:5a:30:d7:80:76:18:2d:e0:f3:d9:f8:47:13:
e4:39:5c:35:2e:b5:23:aa:e7:5c:46:d2:9d:6f:d3:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:A4:BC:3A:40:75:53:84:67:FC:5B:48:B8:FA:FF:3A:37:8F:B7
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ca:b3:a6:e1:82:3f:83:6c:79:c9:39:bd:36:db:7a:f3:e8:
07:62:c7:f2:85:04:8a:c4:3d:57:38:c1:b3:68:ba:05:bd:99:
ce:9f:81:a5:d2:04:60:32:e8:8e:0e:bc:66:a2:bb:35:ef:66:
84:4d:ab:de:39:35:1c:9b:05:f7:23:65:50:71:96:6a:8f:40:
aa:f4:48:96:91:b7:44:0c:a6:9f:a3:3e:2e:a2:77:7c:fd:89:
80:8c:34:a4:91:bb:6f:7f:98:1d:b4:41:86:cf:50:47:69:04:
be:d1:22:2b:f1:09:bd:99:82:86:de:74:ba:24:bf:7f:7c:19:
bb:26:63:df:b2:16:95:f3:37:8a:94:24:88:5c:15:45:e1:3e:
52:95:de:9f:2f:75:d0:06:9f:11:2c:20:b9:7f:8b:72:f6:bf:
10:3c:b6:15:93:e8:dc:d2:9d:31:59:57:57:a6:14:a1:40:ca:
7c:99:92:b9:ab:f3:df:0d:e1:f1:07:69:8e:12:09:22:13:a3:
f5:f6:24:67:f1:8c:86:18:85:67:35:86:ef:ee:f7:e8:93:c5:
8d:f1:99:06:cd:73:4e:15:a6:74:52:0f:86:02:32:7a:4c:70:
91:ca:1f:90:af:5a:53:8e:f4:cf:6c:23:4c:20:5c:03:8a:e1:
02:46:6f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Znt+c5uSsb+CFvuRu/38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjZmZWUwZjMwODg2NTdmYmZkMjNhNzgyZGY1Nzc5Y2Y5
MTNhNjMwHhcNMjYwMzI5MDcwMjEzWhcNMjYwMzMwMDcwMjEzWjAzMTEwLwYDVQQD
EyhhZjQ0YTRiYzNhNDA3NTUzODQ2N2ZjNWI0OGI4ZmFmZjNhMzc4ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iMzjX/3EwA01SBNoxTQTb2H5IcG
bQaCVwTE4gngqJUl0kqVoxTx5nEs9al1ipYAVt3r+Wqcq9U6mN3Hr/XChvWbgRwJ
S/090KPQyb8PhD980tj9mtEvcNnz0IoPy3TaMdKIn6ooSuy+wLXLMeOBRjJzo1pk
9JHq7dKIo+Rcuy0V2W9iHzfnwBVsdeNN/uOFatAgQ9t9gQWvZpisifPEonOgaBz3
c9G2XyMYVZvxFIK1yiS5zBVmFH3GdV7/G6aEw+luotRN6rOxSBiqacn7N/VDoAwc
SMmZ02HWcyNhZNNdfFow14B2GC3g89n4RxPkOVw1LrUjqudcRtKdb9No1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9EpLw6QHVThGf8W0i4+v86N4+3MB8GA1UdIwQY
MBaAFA1m/uDzCIZX+/0jp4LfV3nPkTpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMt
OGU2ZWZmMTZhNmY4LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMtOGU2ZWZmMTZhNmY4
LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcqzpuGC
P4Nseck5vTbbevPoB2LH8oUEisQ9VzjBs2i6Bb2Zzp+BpdIEYDLojg68ZqK7Ne9m
hE2r3jk1HJsF9yNlUHGWao9AqvRIlpG3RAymn6M+LqJ3fP2JgIw0pJG7b3+YHbRB
hs9QR2kEvtEiK/EJvZmCht50uiS/f3wZuyZj37IWlfM3ipQkiFwVReE+UpXeny91
0AafESwguX+Lcva/EDy2FZPo3NKdMVlXV6YUoUDKfJmSuavz3w3h8QdpjhIJIhOj
9fYkZ/GMhhiFZzWG7+736JPFjfGZBs1zThWmdFIPhgIyekxwkcofkK9aU470z2wj
TCBcA4rhAkZvhA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:58 2026 by rpki-client