Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: GYZyLeHjFmUMdXl+BfxfH/EHAScGdLmuOJxlWnlj8Y4=
Subject key identifier: CC:78:6C:70:29:77:82:5C:8E:57:DB:5B:33:EE:98:94:96:EB:A1:C0
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019CA9B401B716F37EF6FB7805CB7039AEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 14:01:12 +0000
Manifest this update: Sun 01 Mar 2026 14:01:12 +0000
Manifest next update: Mon 02 Mar 2026 14:01:12 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: gP5EvTAavigHR2vdf4xCnTH42ZaafYx7hbeMyp0jLDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b4:01:b7:16:f3:7e:f6:fb:78:05:cb:70:39:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Mar 1 14:01:12 2026 GMT
Not After : Mar 2 14:01:12 2026 GMT
Subject: CN=cc786c702977825c8e57db5b33ee989496eba1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:8a:29:b9:51:e2:a0:37:50:c3:b4:ff:22:
5b:64:bb:90:0a:83:48:ad:56:5d:60:dc:93:3b:22:
db:71:57:30:aa:0b:4e:a6:15:f9:b7:7e:44:ac:e3:
13:ce:e0:f0:57:2f:39:db:4e:0d:6c:46:ea:58:33:
81:c5:79:70:bb:7e:30:31:9d:20:36:53:e4:c8:12:
1f:24:a9:b0:a9:1e:5b:f1:18:0e:0e:8b:3d:99:32:
63:d4:2b:31:a2:a8:bd:a8:e1:32:7b:ae:f3:1e:53:
d1:a4:04:45:1c:78:f6:b9:e2:39:6d:ae:16:8c:6f:
cf:50:f3:2a:2d:90:0a:60:ce:17:0e:3e:44:00:ff:
8e:87:67:77:6e:9d:d5:ef:64:76:e5:0b:1a:20:81:
c9:c8:d9:62:8c:b3:7d:d8:32:90:df:7a:e1:00:d9:
fc:9f:51:86:43:4c:1b:76:21:37:bd:ed:4b:28:02:
0f:12:e8:8f:40:28:8d:aa:48:44:d9:5c:f5:93:e8:
2a:ea:f1:0b:41:79:eb:d4:8c:a2:da:e4:67:a2:a0:
cd:4c:9c:d3:b8:77:2d:1b:0c:4f:82:d1:e3:bb:00:
09:e0:60:0f:5e:c2:68:42:cb:76:a9:57:c2:ec:4a:
8f:e3:2d:2b:00:d7:a8:b9:a6:d3:88:9d:e7:47:8a:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:6C:70:29:77:82:5C:8E:57:DB:5B:33:EE:98:94:96:EB:A1:C0
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2e:c8:23:89:9c:a5:0b:f9:36:c2:7b:29:84:b5:16:35:67:
d6:17:35:93:b0:83:64:cc:11:66:b2:29:1b:32:85:d5:67:96:
af:4d:3d:da:04:3d:7b:9f:34:05:41:f4:81:98:4a:ff:57:20:
43:36:49:01:ec:aa:8c:16:4d:99:a6:e1:9b:7e:cb:75:44:7d:
4a:11:f6:3d:2d:f7:52:7b:18:5e:a9:ff:7b:75:bd:2f:29:1e:
a2:a8:da:30:bb:b1:91:da:aa:5c:64:50:23:7c:db:36:58:01:
db:d9:80:3b:67:26:13:67:4d:22:95:a6:34:27:6f:53:dc:70:
da:81:05:4c:24:d6:27:a6:65:50:f3:03:7b:ac:1a:e3:bd:92:
4e:1d:d2:18:6f:72:d4:c3:67:c1:74:85:10:5c:12:a9:e6:ff:
3e:10:83:21:61:d4:bf:cb:f8:47:60:cf:e4:8c:8b:fa:3a:d6:
29:00:b2:35:aa:e4:5e:06:dd:a5:26:08:67:ea:d6:69:9b:a0:
a5:12:0d:c8:33:44:29:09:e0:30:74:ab:a3:dd:c9:fd:c1:07:
fb:29:28:3c:cb:1e:f5:6d:43:a0:7c:a8:96:9b:d9:b4:d5:35:
05:23:fc:58:51:6d:ac:28:2c:cf:18:75:53:19:87:8c:13:c4:
26:ae:3d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyptAG3FvN+9vt4BctwOa6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjYwMzAxMTQwMTEyWhcNMjYwMzAyMTQwMTEyWjAzMTEwLwYDVQQD
EyhjYzc4NmM3MDI5Nzc4MjVjOGU1N2RiNWIzM2VlOTg5NDk2ZWJhMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIqKKblR4qA3UMO0/yJbZLuQCoNI
rVZdYNyTOyLbcVcwqgtOphX5t35ErOMTzuDwVy85204NbEbqWDOBxXlwu34wMZ0g
NlPkyBIfJKmwqR5b8RgODos9mTJj1Csxoqi9qOEye67zHlPRpARFHHj2ueI5ba4W
jG/PUPMqLZAKYM4XDj5EAP+Oh2d3bp3V72R25QsaIIHJyNlijLN92DKQ33rhANn8
n1GGQ0wbdiE3ve1LKAIPEuiPQCiNqkhE2Vz1k+gq6vELQXnr1Iyi2uRnoqDNTJzT
uHctGwxPgtHjuwAJ4GAPXsJoQst2qVfC7EqP4y0rANeouabTiJ3nR4qUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx4bHApd4JcjlfbWzPumJSW66HAMB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtS7II4mc
pQv5NsJ7KYS1FjVn1hc1k7CDZMwRZrIpGzKF1WeWr0092gQ9e580BUH0gZhK/1cg
QzZJAeyqjBZNmabhm37LdUR9ShH2PS33UnsYXqn/e3W9LykeoqjaMLuxkdqqXGRQ
I3zbNlgB29mAO2cmE2dNIpWmNCdvU9xw2oEFTCTWJ6ZlUPMDe6wa472STh3SGG9y
1MNnwXSFEFwSqeb/PhCDIWHUv8v4R2DP5IyL+jrWKQCyNarkXgbdpSYIZ+rWaZug
pRINyDNEKQngMHSro93J/cEH+ykoPMse9W1DoHyolpvZtNU1BSP8WFFtrCgszxh1
UxmHjBPEJq49NQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:46 2026 by rpki-client