Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: MKw2reO9nBg5QVQLYnDNB5TYCts19krjIlj/j/nko+A=
Subject key identifier: 92:59:21:76:A6:09:B3:25:4B:0E:83:8D:2C:34:85:0C:A2:23:82:E5
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 019D27041A9BFE5A63F0C1346B3AB3443080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 127E
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: fMiPg6asK/u9TE4DAF2H+FLH32SqepsGJkF88wxkjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1a:9b:fe:5a:63:f0:c1:34:6b:3a:b3:44:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=92592176a609b3254b0e838d2c34850ca22382e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:84:44:89:8d:9d:36:20:06:93:60:07:8c:
43:01:e9:3d:94:f8:5a:4a:f1:db:a8:dc:fb:e9:fe:
5b:46:60:cd:e7:d9:c8:c5:7b:80:9e:5b:2c:1a:46:
c5:4f:2b:8c:c5:a0:94:24:90:27:0c:9b:94:ed:9a:
3d:76:7c:15:ac:50:99:fc:54:b3:46:3d:1b:b5:8f:
83:d1:62:60:c9:10:18:9c:e3:7a:18:69:dd:5d:15:
cb:4a:36:93:73:32:7b:09:a6:f6:26:ca:4a:61:0f:
df:76:99:cf:17:cc:9d:b1:81:bb:b0:0d:cd:24:50:
8d:e2:01:71:b0:8d:8e:78:41:ba:10:38:34:c4:97:
96:3d:32:9a:b0:2a:08:06:4d:e7:5a:7c:33:95:cb:
c8:e7:e1:dc:72:de:c7:15:ed:60:dc:10:fa:f9:de:
65:65:2b:85:8f:48:ac:64:f1:53:ab:b9:5d:0e:95:
2d:93:80:e4:16:9b:17:dd:76:37:f7:f2:df:e2:00:
f6:76:88:9e:33:e5:28:1e:44:f1:91:a6:80:7e:4d:
05:d3:8f:10:4d:02:ca:9a:30:86:d3:33:70:17:f7:
76:0c:fd:71:54:d6:4a:4c:eb:03:59:7e:40:18:25:
65:05:2b:3b:a6:72:4e:bf:a3:7c:15:fa:49:0d:2b:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:21:76:A6:09:B3:25:4B:0E:83:8D:2C:34:85:0C:A2:23:82:E5
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:1c:47:fb:78:03:65:b1:60:c3:a3:55:f1:4d:7f:76:d8:
95:df:0a:79:35:6b:ad:0e:e9:c6:0a:f6:d3:90:c2:4c:c0:84:
c9:2b:00:d0:b4:75:55:11:25:63:b9:ad:05:bc:eb:c4:63:31:
53:92:3d:70:20:cc:f5:06:42:15:34:0f:d1:15:cb:8b:d5:8e:
57:82:40:df:4d:d7:d7:8d:f9:f8:d1:c4:31:f0:44:64:6a:9e:
24:bd:5a:9d:21:f3:4b:1c:86:c8:93:47:01:7d:03:c9:e9:9c:
86:f4:b6:b9:73:09:ac:f6:18:da:84:2a:78:b2:80:c5:a5:0e:
61:26:25:8d:15:84:bd:ce:1e:23:5d:fc:3b:4b:e8:9d:1e:1b:
2a:2b:6a:b0:e8:65:97:3b:dc:b7:89:5a:56:1a:d4:a0:27:57:
a5:37:09:bd:ab:c3:13:02:26:99:03:3d:42:5c:8d:60:ef:bc:
94:1d:a6:df:98:07:29:b8:c2:8f:fb:d9:d9:84:86:bf:a5:92:
85:3f:5a:28:a1:da:5c:91:fd:82:66:f3:34:58:38:c1:e2:9d:
04:b1:41:3f:64:3b:fa:53:ef:0d:96:60:a6:71:4d:2d:08:12:
fd:07:14:45:89:0e:91:5a:9b:7d:0d:be:73:47:de:d4:ff:ee:
b2:30:0d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBqb/lpj8ME0azqzRDCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjYxMTYyNzFhZDJkMTExOTYwYTJkOTYxYWE5YzE2MmY5
NTgwYTYwHhcNMjYwMzI1MjIwMTEzWhcNMjYwMzI2MjIwMTEzWjAzMTEwLwYDVQQD
Eyg5MjU5MjE3NmE2MDliMzI1NGIwZTgzOGQyYzM0ODUwY2EyMjM4MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSaERImNnTYgBpNgB4xDAek9lPha
SvHbqNz76f5bRmDN59nIxXuAnlssGkbFTyuMxaCUJJAnDJuU7Zo9dnwVrFCZ/FSz
Rj0btY+D0WJgyRAYnON6GGndXRXLSjaTczJ7Cab2JspKYQ/fdpnPF8ydsYG7sA3N
JFCN4gFxsI2OeEG6EDg0xJeWPTKasCoIBk3nWnwzlcvI5+Hcct7HFe1g3BD6+d5l
ZSuFj0isZPFTq7ldDpUtk4DkFpsX3XY39/Lf4gD2doieM+UoHkTxkaaAfk0F048Q
TQLKmjCG0zNwF/d2DP1xVNZKTOsDWX5AGCVlBSs7pnJOv6N8FfpJDStpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJZIXamCbMlSw6DjSw0hQyiI4LlMB8GA1UdIwQY
MBaAFHT2EWJxrS0RGWCi2WGqnBYvlYCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYt
NWEwNWI5MWIyYjhjLzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYtNWEwNWI5MWIyYjhj
LzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYEcR/t4
A2WxYMOjVfFNf3bYld8KeTVrrQ7pxgr205DCTMCEySsA0LR1VRElY7mtBbzrxGMx
U5I9cCDM9QZCFTQP0RXLi9WOV4JA303X1435+NHEMfBEZGqeJL1anSHzSxyGyJNH
AX0DyemchvS2uXMJrPYY2oQqeLKAxaUOYSYljRWEvc4eI138O0vonR4bKitqsOhl
lzvct4laVhrUoCdXpTcJvavDEwImmQM9QlyNYO+8lB2m35gHKbjCj/vZ2YSGv6WS
hT9aKKHaXJH9gmbzNFg4weKdBLFBP2Q7+lPvDZZgpnFNLQgS/QcURYkOkVqbfQ2+
c0fe1P/usjANtw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:20 2026 by rpki-client