Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: JQTtC4IkGcyUegOibj9KL379pDoq1akTVCYMJx4Ylc8=
Subject key identifier: 86:B9:0B:44:89:A2:62:3F:C4:C6:1A:16:4E:6D:B2:FE:EB:85:F1:AF
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 019CAB6B7C2FAB97710C6A0D9D093B5D0327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 0A3B
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: lFaIJu2J8a/ztyrCTFQnRgLPYf5NnatdhkRD8ALH3ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7c:2f:ab:97:71:0c:6a:0d:9d:09:3b:5d:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=86b90b4489a2623fc4c61a164e6db2feeb85f1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:2e:ad:ce:b8:35:ac:70:3c:d2:df:b0:b7:
d5:ba:4e:e2:a7:4b:87:6a:eb:37:55:f9:09:13:ed:
d1:ca:e4:4d:3b:59:6d:77:73:0d:ac:32:f0:95:a7:
41:c1:b1:75:b8:d6:d9:b0:59:8c:38:b3:d6:c3:bc:
a4:11:59:2b:fa:f8:ed:46:69:86:5b:93:e9:87:ea:
85:90:80:57:ba:d0:f6:78:72:2d:b5:cf:37:8d:74:
80:3d:ea:18:8e:2f:c8:a3:dc:b1:74:b4:fa:8f:fb:
da:e2:c5:2f:2b:84:e5:6c:d9:f8:92:b9:9d:d9:81:
89:17:ef:c7:48:47:26:ca:b8:ac:14:1f:40:60:c1:
66:6f:3e:e2:4e:0d:22:7e:58:ca:03:a3:2c:28:cd:
f1:70:fe:23:dd:3b:82:57:e7:ac:40:bb:84:e3:2f:
36:24:8e:a5:d5:70:8a:a5:f3:50:c2:28:92:a2:a8:
05:03:51:17:fe:44:f2:2e:02:23:ad:74:af:d2:78:
fc:b3:e7:64:d6:ab:dc:88:4d:07:95:d7:11:09:9c:
ac:a9:6b:20:7b:5c:1d:8a:58:b8:d2:79:99:fe:5e:
bc:3d:e2:c8:7f:a1:77:3c:dc:f1:01:dc:1f:e1:6d:
69:df:08:88:90:d9:34:6b:a5:8c:6d:4c:54:77:7a:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:0B:44:89:A2:62:3F:C4:C6:1A:16:4E:6D:B2:FE:EB:85:F1:AF
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c9:4f:61:db:b8:76:7b:bf:86:aa:62:49:c3:c0:5c:df:87:
00:8b:3f:32:32:b7:dc:c0:80:ba:92:70:4e:2b:1c:77:b9:9a:
95:40:a3:7c:6e:d7:88:50:30:b9:83:ae:0b:a5:09:f3:43:cc:
4c:1a:b1:11:d0:0d:55:ed:27:26:22:a3:bb:85:f7:0f:50:24:
08:fa:08:a9:ff:da:5f:b9:72:3c:04:a0:5e:9b:3f:a1:65:8d:
eb:66:39:01:f2:1e:4e:be:60:ac:61:89:b0:d5:d3:f4:ae:2d:
26:39:18:5d:f9:73:d5:c8:da:3f:51:af:f8:f1:ba:ca:38:60:
a7:32:20:ca:51:79:10:f7:de:80:1f:ac:3a:5c:86:6b:4d:61:
f2:4a:a8:d5:b1:ed:e4:ea:f5:b9:38:da:09:31:58:db:d6:68:
9e:da:3f:4a:55:c3:11:e8:5b:35:14:b6:a8:89:db:3b:de:3e:
59:66:05:dc:c5:e4:09:f8:6a:1e:8b:a2:a3:f0:15:50:9b:9e:
27:c3:1c:ff:b5:ea:ea:c6:8b:e1:bd:0f:05:0c:32:6a:78:d8:
33:a4:f9:2a:9e:07:e4:78:8a:fd:60:50:3a:f4:ba:3e:d4:f8:
20:1f:e1:ea:4b:83:d6:78:77:bb:e0:1c:88:d1:45:93:df:92:
7a:de:3d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3wvq5dxDGoNnQk7XQMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjMwZDE0MmVlYzdmNmE5OWIwZGI0MDk2ZjkzYTA0MjA0
ODNmZTYwHhcNMjYwMzAxMjIwMTEzWhcNMjYwMzAyMjIwMTEzWjAzMTEwLwYDVQQD
Eyg4NmI5MGI0NDg5YTI2MjNmYzRjNjFhMTY0ZTZkYjJmZWViODVmMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwEurc64NaxwPNLfsLfVuk7ip0uH
aus3VfkJE+3RyuRNO1ltd3MNrDLwladBwbF1uNbZsFmMOLPWw7ykEVkr+vjtRmmG
W5Pph+qFkIBXutD2eHIttc83jXSAPeoYji/Io9yxdLT6j/va4sUvK4TlbNn4krmd
2YGJF+/HSEcmyrisFB9AYMFmbz7iTg0ifljKA6MsKM3xcP4j3TuCV+esQLuE4y82
JI6l1XCKpfNQwiiSoqgFA1EX/kTyLgIjrXSv0nj8s+dk1qvciE0HldcRCZysqWsg
e1wdili40nmZ/l68PeLIf6F3PNzxAdwf4W1p3wiIkNk0a6WMbUxUd3oFgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa5C0SJomI/xMYaFk5tsv7rhfGvMB8GA1UdIwQY
MBaAFHQjDRQu7H9qmbDbQJb5OgQgSD/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQt
Y2UxYzAzNDAwZDRkLzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQtY2UxYzAzNDAwZDRk
LzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZclPYdu4
dnu/hqpiScPAXN+HAIs/MjK33MCAupJwTiscd7malUCjfG7XiFAwuYOuC6UJ80PM
TBqxEdANVe0nJiKju4X3D1AkCPoIqf/aX7lyPASgXps/oWWN62Y5AfIeTr5grGGJ
sNXT9K4tJjkYXflz1cjaP1Gv+PG6yjhgpzIgylF5EPfegB+sOlyGa01h8kqo1bHt
5Or1uTjaCTFY29Zonto/SlXDEehbNRS2qInbO94+WWYF3MXkCfhqHouio/AVUJue
J8Mc/7Xq6saL4b0PBQwyanjYM6T5Kp4H5HiK/WBQOvS6PtT4IB/h6kuD1nh3u+Ac
iNFFk9+Set49qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:36 2026 by rpki-client