Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: 52FLUy/dxfYmuGvIadrelNt4EDv150uV4SyjO4iDNek=
Subject key identifier: 85:5A:28:0C:C8:FA:E5:8E:8A:DF:95:AC:C7:02:E1:2D:AD:CB:94:F7
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 019D2996DDD7235B5866D5D9DAA632B0A648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 15BE
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: vsp8AUiaz1kn8VTYmXpTGwVuhuxyefd7R+m8l06ZWYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dd:d7:23:5b:58:66:d5:d9:da:a6:32:b0:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=855a280cc8fae58e8adf95acc702e12dadcb94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:f5:cc:20:4b:7c:db:07:62:99:01:e1:6c:
d7:91:d4:36:bd:11:af:89:89:71:69:56:ae:b0:fa:
7f:aa:15:62:07:8d:e7:f9:02:ff:2f:57:5e:10:b2:
db:7e:af:50:23:1f:a2:b6:72:1f:80:d8:42:5a:d5:
17:41:2f:62:48:c2:92:9c:21:4a:25:ef:a5:6b:ab:
d5:22:ce:03:f7:d4:2b:8a:e3:f3:cd:28:3f:9f:aa:
4b:5e:62:0c:d2:45:d7:0b:d9:3d:ed:12:ea:f0:5b:
51:a1:9f:6e:29:ab:7e:48:70:3d:79:5d:3b:5c:df:
eb:75:ef:d8:4a:58:8d:48:e5:f4:99:ad:88:a0:6f:
cf:80:f0:b6:c3:84:f5:3b:a3:56:24:b8:73:63:83:
d3:49:bf:d7:a4:c1:d1:42:e2:80:82:c1:0a:03:36:
77:5d:d4:25:77:6d:ba:3f:bd:68:38:eb:3a:83:94:
12:34:f1:12:55:9d:21:8e:6e:08:2b:b7:a9:a3:53:
83:3f:6d:23:cb:55:e6:9f:8a:5f:c4:0a:87:3f:3e:
4a:b2:8d:46:fc:21:ad:26:b2:64:39:d9:18:ad:e8:
1f:ca:47:0e:9a:24:04:d1:16:a8:e1:e5:d1:14:60:
1b:e7:07:a2:ce:17:01:8d:4d:70:d2:91:06:f4:99:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:28:0C:C8:FA:E5:8E:8A:DF:95:AC:C7:02:E1:2D:AD:CB:94:F7
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:fe:4d:e8:6a:81:a5:22:c3:61:b4:44:96:c8:b4:03:63:
b1:ef:9b:9c:2f:ee:1b:d4:d2:f8:1d:04:f2:d4:07:04:66:b7:
96:9a:d2:b1:2a:e9:12:7f:26:e6:bb:45:f1:df:9a:3a:33:7e:
1b:aa:27:fc:95:60:0e:45:7a:cc:2f:51:ab:3a:24:7c:05:9e:
85:74:9b:bd:be:91:e3:0e:7c:28:f9:16:ae:33:b7:35:1e:29:
0a:24:cc:5c:58:2f:fb:6b:7f:8c:6b:ee:ff:d2:e9:83:8b:80:
23:2e:58:a1:20:2a:9d:7c:14:ba:91:6d:34:fb:c1:b6:be:f4:
e8:d3:0d:5e:99:c0:cd:39:62:61:da:27:d2:09:0a:97:0a:bf:
56:5b:f3:e9:2b:89:89:24:74:97:ad:53:55:45:c8:b4:1d:e8:
e7:2f:95:5e:d0:82:18:37:d1:62:f4:e8:06:a7:95:52:ac:52:
8d:2d:e0:7d:45:0c:17:3f:77:b5:99:c2:e1:82:2a:5b:38:d5:
c4:88:95:52:93:15:bb:6a:87:e6:c6:10:01:fe:4d:b6:3c:31:
34:49:9f:57:df:e2:e1:91:5d:5d:ee:ac:a7:cf:a9:66:09:d0:
76:ef:3b:79:51:99:39:20:ca:22:6d:7c:af:bb:95:d6:92:21:
8b:af:01:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plt3XI1tYZtXZ2qYysKZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh
YTVhNDYwHhcNMjYwMzI2MTAwMDQ2WhcNMjYwMzI3MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg4NTVhMjgwY2M4ZmFlNThlOGFkZjk1YWNjNzAyZTEyZGFkY2I5NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hb1zCBLfNsHYpkB4WzXkdQ2vRGv
iYlxaVausPp/qhViB43n+QL/L1deELLbfq9QIx+itnIfgNhCWtUXQS9iSMKSnCFK
Je+la6vVIs4D99QriuPzzSg/n6pLXmIM0kXXC9k97RLq8FtRoZ9uKat+SHA9eV07
XN/rde/YSliNSOX0ma2IoG/PgPC2w4T1O6NWJLhzY4PTSb/XpMHRQuKAgsEKAzZ3
XdQld226P71oOOs6g5QSNPESVZ0hjm4IK7epo1ODP20jy1Xmn4pfxAqHPz5Kso1G
/CGtJrJkOdkYregfykcOmiQE0Rao4eXRFGAb5weizhcBjU1w0pEG9JlnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVaKAzI+uWOit+VrMcC4S2ty5T3MB8GA1UdIwQY
MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt
ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4
LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4v+Tehq
gaUiw2G0RJbItANjse+bnC/uG9TS+B0E8tQHBGa3lprSsSrpEn8m5rtF8d+aOjN+
G6on/JVgDkV6zC9RqzokfAWehXSbvb6R4w58KPkWrjO3NR4pCiTMXFgv+2t/jGvu
/9Lpg4uAIy5YoSAqnXwUupFtNPvBtr706NMNXpnAzTliYdon0gkKlwq/Vlvz6SuJ
iSR0l61TVUXItB3o5y+VXtCCGDfRYvToBqeVUqxSjS3gfUUMFz93tZnC4YIqWzjV
xIiVUpMVu2qH5sYQAf5NtjwxNEmfV9/i4ZFdXe6sp8+pZgnQdu87eVGZOSDKIm18
r7uV1pIhi68BpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:09 2026 by rpki-client