Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: 9O5KfWaVTg3F/758ewzO6WVpI8Op14fVtjQ0nLeSaSU=
Subject key identifier: 57:7F:30:48:F0:9F:79:75:76:FF:6F:E7:C6:93:8A:1C:0C:A6:00:A6
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 019CAC0FD9C30E56F262FAD6CDF154347D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 157D
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: vjA9PbAlZORWMvdyrZDg+HagXrkjOYnVyoiyhf4W/xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d9:c3:0e:56:f2:62:fa:d6:cd:f1:54:34:7d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=577f3048f09f797576ff6fe7c6938a1c0ca600a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:7d:e3:9e:01:d2:53:c6:0b:8c:7f:b4:89:
8a:3e:3f:d6:b7:f0:45:c9:d0:5b:65:77:45:61:6d:
5b:8e:1a:35:bf:d9:14:79:16:93:4f:9e:72:8f:4a:
88:c0:3f:a5:1c:ee:46:18:13:4c:41:dc:5f:af:cd:
4d:a3:f6:b6:9a:5b:a2:ac:d3:36:37:ea:2b:28:f1:
9b:b2:bd:36:54:72:aa:87:af:c5:79:b8:10:fb:d2:
90:d8:7f:fa:47:18:cd:30:7c:ff:e6:24:b5:01:5b:
20:d3:d7:db:a0:01:40:8a:60:2f:cf:96:ff:d5:3a:
5b:28:6b:8d:63:b5:08:88:f9:90:f6:e4:a0:3c:b5:
33:c2:9f:c1:d5:3c:89:05:f9:98:a6:4c:12:93:ed:
d2:07:4b:cf:ed:be:6f:a8:ba:d7:47:13:cf:e7:c4:
ca:71:03:11:9b:91:c1:15:14:cc:cc:ec:7e:7a:ac:
05:7f:a2:4a:4c:7a:f6:ac:af:1a:03:1d:01:a5:d2:
54:6c:e0:02:7b:8a:79:c3:b7:2d:62:e0:d8:da:36:
73:8d:65:da:04:90:28:2e:38:61:9c:75:f9:7a:10:
2f:98:d6:ba:d8:5b:dc:ec:54:51:56:7b:ee:a9:1a:
e7:a7:ad:3f:53:aa:e5:0e:b4:5f:b5:cd:86:09:80:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:30:48:F0:9F:79:75:76:FF:6F:E7:C6:93:8A:1C:0C:A6:00:A6
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:83:ee:53:32:aa:6b:0c:68:3d:47:a4:1e:9e:99:3d:b7:af:
c7:09:8d:ee:92:85:5c:24:82:ef:76:dd:fb:51:2b:11:a6:59:
26:46:dc:01:62:e1:93:7b:d2:c2:3a:68:ee:48:55:4d:9c:f3:
90:fd:3b:50:df:e5:b6:ee:b4:a6:ed:00:da:eb:48:4c:3f:1b:
2f:41:57:c7:6d:ea:5c:ec:6a:39:0a:2b:86:fa:b2:02:e2:6d:
c6:aa:21:40:62:1f:81:d7:28:88:b8:61:73:db:c4:7f:df:05:
09:9f:08:cf:4a:25:d7:e0:8d:85:7c:63:0f:af:83:a4:6b:e3:
5e:bc:30:8f:20:bc:95:37:25:8d:76:43:e8:36:33:48:78:b3:
b4:b5:8a:1e:f0:cb:7a:dd:79:46:67:ee:54:cc:27:83:f9:e5:
ec:25:8f:73:74:0e:1a:13:42:b5:29:2a:d0:de:56:fd:fd:bc:
3f:63:d3:c8:4d:99:af:78:6c:87:73:88:a5:1d:68:8d:82:cf:
bf:0c:4c:2a:f0:97:a7:e7:6e:f3:e9:4d:72:d9:6b:e2:03:a8:
5c:29:b7:88:72:dd:9e:82:b6:e8:bc:dc:87:5e:b0:79:6f:5b:
7d:68:c6:01:18:4b:b4:c7:50:61:7c:49:9f:d6:1e:64:51:45:
f5:0b:18:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9nDDlbyYvrWzfFUNH2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh
YTVhNDYwHhcNMjYwMzAyMDEwMDQ1WhcNMjYwMzAzMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg1NzdmMzA0OGYwOWY3OTc1NzZmZjZmZTdjNjkzOGExYzBjYTYwMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55t9454B0lPGC4x/tImKPj/Wt/BF
ydBbZXdFYW1bjho1v9kUeRaTT55yj0qIwD+lHO5GGBNMQdxfr81No/a2mluirNM2
N+orKPGbsr02VHKqh6/FebgQ+9KQ2H/6RxjNMHz/5iS1AVsg09fboAFAimAvz5b/
1TpbKGuNY7UIiPmQ9uSgPLUzwp/B1TyJBfmYpkwSk+3SB0vP7b5vqLrXRxPP58TK
cQMRm5HBFRTMzOx+eqwFf6JKTHr2rK8aAx0BpdJUbOACe4p5w7ctYuDY2jZzjWXa
BJAoLjhhnHX5ehAvmNa62Fvc7FRRVnvuqRrnp60/U6rlDrRftc2GCYAvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd/MEjwn3l1dv9v58aTihwMpgCmMB8GA1UdIwQY
MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt
ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4
LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYPuUzKq
awxoPUekHp6ZPbevxwmN7pKFXCSC73bd+1ErEaZZJkbcAWLhk3vSwjpo7khVTZzz
kP07UN/ltu60pu0A2utITD8bL0FXx23qXOxqOQorhvqyAuJtxqohQGIfgdcoiLhh
c9vEf98FCZ8Iz0ol1+CNhXxjD6+DpGvjXrwwjyC8lTcljXZD6DYzSHiztLWKHvDL
et15RmfuVMwng/nl7CWPc3QOGhNCtSkq0N5W/f28P2PTyE2Zr3hsh3OIpR1ojYLP
vwxMKvCXp+du8+lNctlr4gOoXCm3iHLdnoK26Lzch16weW9bfWjGARhLtMdQYXxJ
n9YeZFFF9QsYGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:51 2026 by rpki-client