Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: 8Vx5ZjK/YrzOzMd1ZxLc/8R/6UoY3qr6hu4gUnsaOw0=
Subject key identifier: 39:9B:D1:CC:BD:35:EB:15:8D:96:19:6E:F5:1F:B3:54:3E:5C:1D:A3
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019D2771F6D5ACCD677E37999B99322F0675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 0293
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: oue85EICXiRPxmfqbMIrtuDtmmPzzXZCzkdN0MCiwmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f6:d5:ac:cd:67:7e:37:99:9b:99:32:2f:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=399bd1ccbd35eb158d96196ef51fb3543e5c1da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:5b:8e:72:41:45:19:fa:6e:aa:d7:a6:57:
d0:5a:c1:84:ca:26:24:bb:19:10:6d:bc:d7:b3:14:
b8:ce:21:0b:ba:d1:71:ac:91:f6:4d:2f:35:a4:98:
a7:9a:83:13:01:02:0d:44:cc:79:27:b3:6f:b8:3a:
79:ea:80:d9:28:1d:a9:c4:b1:6b:13:a3:41:75:ea:
d1:bc:9b:0d:64:cf:a3:93:74:74:d2:92:9e:38:2f:
75:82:f2:f6:8e:46:5c:d3:ea:c1:1f:1c:5e:cb:33:
b5:e6:a4:02:70:62:6b:e0:af:7e:54:6f:c1:bf:77:
d1:d0:52:20:9d:db:3c:73:75:05:b3:38:f8:2e:8f:
e3:c1:9c:dd:0b:47:97:83:70:ab:95:42:57:ac:ef:
a4:5f:76:b5:f1:8d:10:94:a2:a8:fa:44:1b:47:e2:
8e:c3:13:dc:5a:2d:1f:46:ea:de:aa:2a:5b:96:4a:
92:37:6b:b1:87:9f:2c:02:2e:8b:20:4e:af:4e:19:
2d:be:94:5f:2e:58:15:4a:fe:14:74:55:39:16:53:
5a:88:aa:0a:6f:54:d2:0b:b8:6b:7d:8c:bd:c1:ed:
68:ce:92:1d:8b:a1:ee:1e:38:26:c3:ed:63:59:1b:
e3:71:4f:c3:86:d3:7b:43:77:77:70:8b:7a:f1:84:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:D1:CC:BD:35:EB:15:8D:96:19:6E:F5:1F:B3:54:3E:5C:1D:A3
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:66:d2:dd:61:d0:13:81:cb:f1:3d:6b:44:96:42:be:5d:
94:47:1f:7e:86:da:15:80:a2:3e:ee:45:bb:ca:10:e2:1d:ab:
cc:64:fe:0d:36:2e:e9:92:b6:0f:98:75:68:06:80:d0:65:83:
7f:6f:34:af:4b:66:49:68:38:5e:f5:0e:09:5a:24:3c:10:d3:
90:a1:96:2f:a6:60:82:2a:ae:a8:34:49:37:99:59:b8:b3:f6:
28:40:be:97:db:22:d7:c2:cb:fc:db:88:ab:27:8b:69:40:84:
84:be:e1:c8:1a:d8:90:58:ef:0a:0d:03:d1:7f:6e:90:c4:60:
06:d7:ec:fa:ed:46:20:7f:f5:aa:f3:4e:cf:52:50:cf:61:15:
a6:59:2d:79:84:d8:b1:05:e0:36:f1:bc:6d:c4:36:d5:df:8e:
0d:f9:fa:11:60:fa:ba:f8:cc:eb:0f:5a:7b:f0:10:e7:ee:f6:
c8:47:90:9f:95:03:e0:60:6b:72:34:96:72:e9:e4:b5:53:d3:
fe:5b:62:7a:4f:83:94:bd:83:db:94:c7:98:55:1c:83:9d:82:
64:fe:4d:53:c9:5e:e7:44:21:0a:50:0c:d2:b2:c0:14:d1:98:
a9:47:2a:d5:ce:10:ff:08:ce:6e:7f:b4:0f:77:db:94:8f:42:
ee:f9:a4:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfbVrM1nfjeZm5kyLwZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOGY2YzQ3NGE0YTQ0MTRhOWM5Mjc3YmU0ZDZhYWFlMmJl
ZGVhNGIwHhcNMjYwMzI2MDAwMTEzWhcNMjYwMzI3MDAwMTEzWjAzMTEwLwYDVQQD
EygzOTliZDFjY2JkMzVlYjE1OGQ5NjE5NmVmNTFmYjM1NDNlNWMxZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR5bjnJBRRn6bqrXplfQWsGEyiYk
uxkQbbzXsxS4ziELutFxrJH2TS81pJinmoMTAQINRMx5J7NvuDp56oDZKB2pxLFr
E6NBderRvJsNZM+jk3R00pKeOC91gvL2jkZc0+rBHxxeyzO15qQCcGJr4K9+VG/B
v3fR0FIgnds8c3UFszj4Lo/jwZzdC0eXg3CrlUJXrO+kX3a18Y0QlKKo+kQbR+KO
wxPcWi0fRureqipblkqSN2uxh58sAi6LIE6vThktvpRfLlgVSv4UdFU5FlNaiKoK
b1TSC7hrfYy9we1ozpIdi6HuHjgmw+1jWRvjcU/DhtN7Q3d3cIt68YRnXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmb0cy9NesVjZYZbvUfs1Q+XB2jMB8GA1UdIwQY
MBaAFMOPbEdKSkQUqckne+TWqq4r7epLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgt
YWU4NDAwMjhmNmIxLzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgtYWU4NDAwMjhmNmIx
LzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcpm0t1h
0BOBy/E9a0SWQr5dlEcffobaFYCiPu5Fu8oQ4h2rzGT+DTYu6ZK2D5h1aAaA0GWD
f280r0tmSWg4XvUOCVokPBDTkKGWL6ZggiquqDRJN5lZuLP2KEC+l9si18LL/NuI
qyeLaUCEhL7hyBrYkFjvCg0D0X9ukMRgBtfs+u1GIH/1qvNOz1JQz2EVplkteYTY
sQXgNvG8bcQ21d+ODfn6EWD6uvjM6w9ae/AQ5+72yEeQn5UD4GBrcjSWcunktVPT
/ltiek+DlL2D25THmFUcg52CZP5NU8le50QhClAM0rLAFNGYqUcq1c4Q/wjObn+0
D3fblI9C7vmkRw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:05 2026 by rpki-client