Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: Ib9rrMvfsDV/1EisH4X4q+N/X+ET0pQcJAbbRYmeHIw=
Subject key identifier: 3C:D7:5C:9A:39:03:09:D1:AC:A4:AE:5B:28:27:94:E7:89:80:92:FD
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019D992B0D25CF998505846F277958687028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 11B5
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: Svdi0/GCDsHUSewOfdPydYumyF6XsRXYGU8qmMWD8fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0d:25:cf:99:85:05:84:6f:27:79:58:68:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=3cd75c9a390309d1aca4ae5b282794e7898092fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:0c:f9:82:a0:9b:c1:e0:b0:3c:e3:13:5f:
73:7d:a0:b6:41:f1:f2:b9:ec:89:55:c7:12:06:95:
ab:08:5e:71:10:8a:9b:79:68:f1:11:b7:eb:ba:7a:
79:f2:21:3f:e5:f2:dc:6a:d7:ab:06:4f:d3:bf:b4:
80:13:10:f7:33:fb:70:ae:bf:8b:61:d7:d5:2e:9f:
5f:5c:0e:f2:c1:94:c8:aa:40:8b:4a:80:34:5e:16:
fb:eb:4c:61:08:04:74:99:28:7c:ac:c8:87:c7:0b:
c5:90:94:2a:fd:46:9a:c4:d0:9f:5a:03:7f:2a:7f:
27:d3:b2:f1:99:5a:8d:72:30:a2:ef:42:e5:44:d4:
a6:ae:0c:d1:d3:1d:9b:db:89:96:1d:60:24:27:31:
b6:ec:f5:df:59:30:13:1e:16:53:54:58:15:f7:f7:
b4:b5:4a:f2:5a:5e:4f:65:78:33:7c:62:b3:56:e2:
74:23:53:9c:91:db:66:30:c1:85:90:51:63:02:51:
d3:43:ab:14:dc:b9:8b:07:60:60:7a:b3:49:b8:2c:
6f:26:87:e2:ff:49:18:42:48:2a:ae:a2:90:df:03:
cf:c6:82:3b:17:78:e6:4b:90:0e:40:9f:23:98:68:
f5:66:cb:69:ab:0a:ee:44:d2:de:3b:d7:ed:33:4b:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:5C:9A:39:03:09:D1:AC:A4:AE:5B:28:27:94:E7:89:80:92:FD
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:b5:de:08:8d:2c:8d:24:2f:10:00:00:d5:35:89:2b:50:a4:
69:08:b7:e6:83:f0:ee:cb:b1:b0:0c:f9:f9:b3:b2:69:77:38:
f4:c0:cc:ce:bd:61:77:88:f6:43:f0:ea:b9:07:48:33:04:cb:
c2:6c:27:13:67:08:a3:4f:27:22:c0:df:82:53:95:fb:29:f3:
11:4f:5e:a2:49:bf:0a:ba:10:df:14:0a:02:f4:1a:50:69:17:
bc:4a:9d:65:b2:39:c0:19:a5:b2:be:18:33:d8:d3:af:c9:c3:
f7:7e:2e:79:59:b4:3e:27:af:ef:82:79:a0:bd:7a:be:b0:b5:
f0:62:39:b0:e7:cf:60:2f:fb:33:98:d9:73:d9:46:2d:3c:8e:
57:20:75:45:88:2c:90:98:91:f4:0a:e1:82:3f:de:65:e0:1a:
36:f8:ed:d0:cc:38:df:c3:1c:b5:06:4f:5a:f5:54:13:7b:60:
3b:44:4c:2f:45:94:8a:29:d9:82:cc:c8:2f:8e:11:f0:91:72:
ef:28:15:6a:15:f0:0e:ab:79:7a:04:dc:56:20:96:e3:9b:3e:
6e:22:7a:5a:36:f3:e5:b2:33:84:88:c5:ed:61:f4:20:df:23:
f5:16:0e:7a:a7:23:03:7a:b7:80:19:2e:97:9c:d5:f2:d2:6b:
e3:b2:c9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKw0lz5mFBYRvJ3lYaHAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzJlYjhmODAxNWViMWJjMjllYTMxNjJmODNlNmFjZWRi
YjQyN2UwHhcNMjYwNDE3MDIwMDI4WhcNMjYwNDE4MDIwMDI4WjAzMTEwLwYDVQQD
EygzY2Q3NWM5YTM5MDMwOWQxYWNhNGFlNWIyODI3OTRlNzg5ODA5MmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowUM+YKgm8HgsDzjE19zfaC2QfHy
ueyJVccSBpWrCF5xEIqbeWjxEbfrunp58iE/5fLcaterBk/Tv7SAExD3M/twrr+L
YdfVLp9fXA7ywZTIqkCLSoA0Xhb760xhCAR0mSh8rMiHxwvFkJQq/UaaxNCfWgN/
Kn8n07LxmVqNcjCi70LlRNSmrgzR0x2b24mWHWAkJzG27PXfWTATHhZTVFgV9/e0
tUryWl5PZXgzfGKzVuJ0I1OckdtmMMGFkFFjAlHTQ6sU3LmLB2BgerNJuCxvJofi
/0kYQkgqrqKQ3wPPxoI7F3jmS5AOQJ8jmGj1ZstpqwruRNLeO9ftM0tuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzXXJo5AwnRrKSuWygnlOeJgJL9MB8GA1UdIwQY
MBaAFHRy64+AFesbwp6jFi+D5qztu0J+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2Et
MWJmZmRhMzgyZWJlLzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2EtMWJmZmRhMzgyZWJl
LzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA67XeCI0s
jSQvEAAA1TWJK1CkaQi35oPw7suxsAz5+bOyaXc49MDMzr1hd4j2Q/DquQdIMwTL
wmwnE2cIo08nIsDfglOV+ynzEU9eokm/CroQ3xQKAvQaUGkXvEqdZbI5wBmlsr4Y
M9jTr8nD934ueVm0Piev74J5oL16vrC18GI5sOfPYC/7M5jZc9lGLTyOVyB1RYgs
kJiR9Arhgj/eZeAaNvjt0Mw438MctQZPWvVUE3tgO0RML0WUiinZgszIL44R8JFy
7ygVahXwDqt5egTcViCW45s+biJ6Wjbz5bIzhIjF7WH0IN8j9RYOeqcjA3q3gBku
l5zV8tJr47LJ9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:05 2026 by rpki-client