Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: 70C1HzYE2cWqkyFg4Aoi9d0D4MTweILTqmxmh/235Vk=
Subject key identifier: 14:D2:E8:17:6E:56:0D:12:4A:E9:DB:59:D3:6B:EC:CB:3C:D6:2E:5E
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019CACB4F897B89175413414F3B79D3AF9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 06CA
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: WxyDFI0yxmBJm2LSuWk22QuRjCPMQW8Pfhc5TPNBiBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f8:97:b8:91:75:41:34:14:f3:b7:9d:3a:f9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=14d2e8176e560d124ae9db59d36beccb3cd62e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:8e:c3:a0:9e:8f:72:ba:9c:16:f1:c7:35:
48:28:5e:6d:78:75:8d:aa:19:aa:8c:57:53:27:08:
f7:1f:22:d9:18:66:45:9a:4f:be:44:be:2d:2d:b2:
45:d1:be:79:d8:2f:c7:2b:98:50:23:91:0b:57:02:
b1:42:2a:c7:44:19:01:d5:dd:cc:b1:44:cc:6b:96:
d6:c2:55:23:ed:02:9f:df:cb:3e:9e:2b:43:6b:c2:
b0:a9:76:98:42:87:e1:04:96:ed:19:05:fa:45:62:
73:83:72:9c:b4:f3:b6:e1:e4:63:38:9c:f7:38:7c:
4e:43:b4:b3:ff:a5:b4:dd:d4:8c:b7:b0:09:cc:fb:
88:88:11:b2:26:a3:1e:a6:4c:82:5a:69:69:f9:28:
3d:9b:9a:09:1b:0a:5a:97:8e:b1:cc:35:93:8d:72:
00:e8:bc:89:24:2d:a3:96:a3:d3:c7:86:fe:29:e6:
a3:c7:66:f2:3a:f7:55:00:15:77:f0:81:5c:37:39:
2e:7b:0c:83:87:a5:8a:c6:75:c9:6c:9b:b7:38:2c:
83:be:f7:23:ba:c1:b2:29:58:43:b2:7a:dd:05:36:
3d:ae:7d:1f:27:c2:04:50:0f:0f:80:6a:df:c8:5f:
85:21:c2:b0:d5:94:e1:8b:a1:87:f5:d7:1d:97:4a:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:E8:17:6E:56:0D:12:4A:E9:DB:59:D3:6B:EC:CB:3C:D6:2E:5E
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:9e:8c:67:ff:10:d7:b1:62:25:a1:96:77:50:d6:06:43:
f4:f7:15:56:be:2e:19:70:4a:25:c9:69:23:24:7e:f5:71:8d:
ab:42:39:25:81:82:ee:a7:b0:0c:8a:7c:32:8c:34:b2:f9:e0:
19:e7:3c:e5:b1:f5:49:9c:84:26:b8:01:cb:56:f5:33:5e:49:
7d:f0:ec:da:e8:da:de:47:75:5b:bb:ca:ff:9a:c2:83:52:b2:
c5:5f:7c:9c:de:9c:3d:60:ea:36:44:93:c6:f4:81:d5:c1:08:
dc:3a:0d:36:a5:3c:be:b5:1b:c2:e6:00:d4:69:4c:bb:6c:ec:
b9:b8:ce:55:c6:2c:76:3e:ab:db:42:2e:6d:2e:c7:86:8a:af:
c5:eb:b9:9a:8e:48:74:8e:7c:d3:e5:21:30:a6:99:fc:32:91:
4e:ac:bc:fc:6c:81:87:b7:54:9d:ce:35:fe:8f:de:5d:2f:b3:
9c:5a:ce:4e:83:62:a9:1b:21:cf:ec:3e:37:44:75:aa:55:30:
3f:79:8e:c2:0d:74:fd:1b:f3:9f:45:a9:53:d2:30:3c:86:35:
25:54:e5:2b:33:10:e7:20:38:cc:bf:36:39:d4:fb:78:d9:ab:
4c:59:d8:8a:28:5d:34:a6:24:81:17:63:54:17:96:b8:a2:b6:
2e:88:3b:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystPiXuJF1QTQU87edOvnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjYwMzAyMDQwMTA3WhcNMjYwMzAzMDQwMTA3WjAzMTEwLwYDVQQD
EygxNGQyZTgxNzZlNTYwZDEyNGFlOWRiNTlkMzZiZWNjYjNjZDYyZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuaOw6Cej3K6nBbxxzVIKF5teHWN
qhmqjFdTJwj3HyLZGGZFmk++RL4tLbJF0b552C/HK5hQI5ELVwKxQirHRBkB1d3M
sUTMa5bWwlUj7QKf38s+nitDa8KwqXaYQofhBJbtGQX6RWJzg3KctPO24eRjOJz3
OHxOQ7Sz/6W03dSMt7AJzPuIiBGyJqMepkyCWmlp+Sg9m5oJGwpal46xzDWTjXIA
6LyJJC2jlqPTx4b+Keajx2byOvdVABV38IFcNzkuewyDh6WKxnXJbJu3OCyDvvcj
usGyKVhDsnrdBTY9rn0fJ8IEUA8PgGrfyF+FIcKw1ZThi6GH9dcdl0r88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTS6BduVg0SSunbWdNr7Ms81i5eMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv2ejGf/
ENexYiWhlndQ1gZD9PcVVr4uGXBKJclpIyR+9XGNq0I5JYGC7qewDIp8Mow0svng
Gec85bH1SZyEJrgBy1b1M15JffDs2uja3kd1W7vK/5rCg1KyxV98nN6cPWDqNkST
xvSB1cEI3DoNNqU8vrUbwuYA1GlMu2zsubjOVcYsdj6r20IubS7Hhoqvxeu5mo5I
dI580+UhMKaZ/DKRTqy8/GyBh7dUnc41/o/eXS+znFrOToNiqRshz+w+N0R1qlUw
P3mOwg10/Rvzn0WpU9IwPIY1JVTlKzMQ5yA4zL82OdT7eNmrTFnYiihdNKYkgRdj
VBeWuKK2Log7qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:33 2026 by rpki-client