Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: KdS3KXvP18sqVTXxSADhIij+XI9+y0/R64YbCaFXWlk=
Subject key identifier: 5E:4D:5E:4A:4B:37:87:BD:34:79:21:5C:49:59:14:27:D6:CD:5F:A0
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019D2703BC9344AC9CC728F7A4820C54F862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: 4GhRVbZR92A3oiwouuWFGaSlvLwRHkOLvwmnvDDfpIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bc:93:44:ac:9c:c7:28:f7:a4:82:0c:54:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=5e4d5e4a4b3787bd3479215c49591427d6cd5fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:61:0c:7d:21:24:94:55:be:73:cc:83:73:
e7:95:4c:83:2b:00:28:7e:b7:95:f5:85:2f:71:72:
cc:18:e3:1a:3b:dd:b0:5e:10:fc:5c:ec:eb:18:70:
8a:ec:62:13:99:c3:a1:28:56:d3:46:8e:fe:f0:59:
e4:58:c0:1b:48:8c:79:9e:92:e9:94:4e:54:e0:7b:
22:2c:cd:2c:18:59:64:0c:f2:77:5d:fd:8a:58:64:
95:5e:0a:d2:0a:ae:44:4c:ef:db:5d:34:89:ba:e4:
60:68:3e:93:d4:ca:27:a7:29:62:b9:9e:4c:3e:9d:
fc:3b:59:02:19:8f:16:23:ad:b2:67:be:0b:a3:34:
81:34:ea:0b:24:0b:c8:23:fd:97:12:ab:d4:0f:14:
23:a5:ad:5c:fd:a2:d9:39:09:55:63:73:17:17:b6:
ae:86:25:62:48:42:1b:f5:d8:3f:8b:09:23:83:7c:
22:16:53:27:fe:b4:6b:6e:fa:9a:c9:90:df:c2:6a:
15:24:68:9e:44:88:60:ca:0f:88:ef:3d:7e:1d:c0:
94:64:c7:72:e5:47:0b:ab:de:3e:fa:31:e9:10:6b:
97:21:b6:68:a5:ec:40:4c:0a:d5:62:c4:5f:fd:6a:
5e:52:8b:4d:f6:39:a7:a5:5d:ba:c7:43:01:1f:58:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4D:5E:4A:4B:37:87:BD:34:79:21:5C:49:59:14:27:D6:CD:5F:A0
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:51:20:95:43:30:59:93:08:7f:9e:7c:d1:4f:bf:c4:49:
73:df:a2:87:68:42:d9:2f:c3:dd:c7:3c:45:43:b3:2e:c2:9f:
7e:f6:b4:13:df:e0:b3:94:8f:7a:8d:cf:61:cb:fc:00:82:11:
bf:5d:be:8f:e6:b9:30:cc:00:8f:76:81:14:f1:4a:21:db:77:
df:1a:2e:cd:19:2d:1f:d3:90:aa:3d:7f:1c:d3:ce:94:a2:95:
0f:e1:07:5b:08:a0:46:b6:6c:43:7a:e4:3f:8b:f8:c6:1d:32:
36:4a:6a:6a:71:10:9d:85:1c:4e:f6:a7:5e:be:d4:f5:7f:f8:
1d:26:ea:69:76:cf:62:a2:10:16:59:98:c9:14:8c:18:f6:b9:
a5:25:d8:de:6e:2f:9b:96:71:79:8c:a5:b5:cb:5a:74:f7:b1:
d1:1e:65:1a:89:a5:d1:5a:d7:88:98:6d:b9:36:18:dd:e5:a2:
65:4d:2c:0c:bd:a5:b2:dd:1b:83:b7:d8:c7:75:67:55:fb:f1:
f9:e0:00:3b:52:a2:6d:c9:33:b5:8e:6b:04:32:76:bd:8b:fa:
74:56:ce:cd:16:07:df:d3:2e:01:4b:93:e1:49:99:9b:07:f1:
1a:9d:f4:44:07:27:1a:24:b8:ff:c9:d8:9e:13:40:54:d2:13:
54:c7:ee:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7yTRKycxyj3pIIMVPhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjA4MzY1MDI5NTE4OWYwMDlhYTc0YzEyY2JjNjFlZTIz
ZmE3NTMwHhcNMjYwMzI1MjIwMDQ5WhcNMjYwMzI2MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZTRkNWU0YTRiMzc4N2JkMzQ3OTIxNWM0OTU5MTQyN2Q2Y2Q1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2hhDH0hJJRVvnPMg3PnlUyDKwAo
freV9YUvcXLMGOMaO92wXhD8XOzrGHCK7GITmcOhKFbTRo7+8FnkWMAbSIx5npLp
lE5U4HsiLM0sGFlkDPJ3Xf2KWGSVXgrSCq5ETO/bXTSJuuRgaD6T1MonpyliuZ5M
Pp38O1kCGY8WI62yZ74LozSBNOoLJAvII/2XEqvUDxQjpa1c/aLZOQlVY3MXF7au
hiViSEIb9dg/iwkjg3wiFlMn/rRrbvqayZDfwmoVJGieRIhgyg+I7z1+HcCUZMdy
5UcLq94++jHpEGuXIbZopexATArVYsRf/WpeUotN9jmnpV26x0MBH1iu5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5NXkpLN4e9NHkhXElZFCfWzV+gMB8GA1UdIwQY
MBaAFHSwg2UClRifAJqnTBLLxh7iP6dTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQt
NTI4NzY5OGFmZjNjLzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQtNTI4NzY5OGFmZjNj
LzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIZRIJVD
MFmTCH+efNFPv8RJc9+ih2hC2S/D3cc8RUOzLsKffva0E9/gs5SPeo3PYcv8AIIR
v12+j+a5MMwAj3aBFPFKIdt33xouzRktH9OQqj1/HNPOlKKVD+EHWwigRrZsQ3rk
P4v4xh0yNkpqanEQnYUcTvanXr7U9X/4HSbqaXbPYqIQFlmYyRSMGPa5pSXY3m4v
m5ZxeYyltctadPex0R5lGoml0VrXiJhtuTYY3eWiZU0sDL2lst0bg7fYx3VnVfvx
+eAAO1KibckztY5rBDJ2vYv6dFbOzRYH39MuAUuT4UmZmwfxGp30RAcnGiS4/8nY
nhNAVNITVMfuzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:45 2026 by rpki-client