Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: sKXwYkfYyuw8HMOOCGWBpd9a4yvCo3QW+jhEVxaQ5ZY=
Subject key identifier: 3B:9B:3B:AF:5C:64:82:E9:61:6E:F0:10:F6:0A:E8:04:30:1E:70:9A
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01A0D048FD912D53AAC42742B633F1893BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 17A2
Signing time: Wed 23 Sep 2026 22:00:39 +0000
Manifest this update: Wed 23 Sep 2026 22:00:39 +0000
Manifest next update: Thu 24 Sep 2026 22:00:39 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: Nb0zuq8GQvkxrD+RBXJaC2lomILnyAK+L9ZvvKc4KZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:fd:91:2d:53:aa:c4:27:42:b6:33:f1:89:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Sep 23 22:00:39 2026 GMT
Not After : Sep 24 22:00:39 2026 GMT
Subject: CN=3b9b3baf5c6482e9616ef010f60ae804301e709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:09:56:9d:38:c1:15:48:35:ca:d2:9b:20:
9f:7d:ab:6b:a3:5e:53:c1:7f:5c:c6:70:76:69:22:
5f:3c:96:a9:6d:29:d9:18:c0:f4:8f:6d:f1:c5:fc:
65:bc:e7:9c:2f:b1:ab:2a:4d:6f:d1:3e:fd:af:d2:
23:b6:08:56:c9:d6:1a:73:21:29:75:bf:3d:77:71:
37:43:97:9e:af:74:d7:b4:77:66:76:ad:99:15:04:
22:d6:50:6e:cd:65:66:b3:a8:51:2c:62:be:e3:58:
cd:0c:40:4f:fc:68:6a:07:b8:6d:26:54:51:6e:a7:
e0:56:f0:bd:a3:34:4a:fb:95:0b:d2:fa:20:7a:b1:
62:fd:42:e9:73:a9:9f:85:f5:d6:54:de:e9:e5:c8:
fe:1b:e4:66:6a:b8:6e:a5:e1:c3:38:55:c0:59:5d:
b6:f8:e3:91:86:52:0e:4b:2a:44:37:d4:ad:f3:f0:
4e:e5:4b:12:11:4b:45:6e:e4:af:35:b0:cb:6d:80:
b2:78:f9:f3:94:7e:33:cf:da:e0:9f:67:d2:96:d0:
de:48:08:f5:66:ba:12:66:ed:9c:bf:d4:c1:c1:be:
eb:45:1f:a2:66:f2:82:00:6c:c9:9d:57:32:64:f9:
b6:5b:d3:09:0b:60:76:de:0b:6c:3c:f5:e9:b7:e9:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:3B:AF:5C:64:82:E9:61:6E:F0:10:F6:0A:E8:04:30:1E:70:9A
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2e:4f:d0:bc:15:0d:c9:89:ee:a5:e1:3c:a1:eb:e5:b0:d9:
39:ea:ab:73:3e:17:e3:f7:ca:21:c7:59:42:c2:c4:30:e6:5d:
91:5e:e2:f5:5d:bc:13:c1:a2:1c:0a:7a:cb:d0:68:dd:e2:9d:
cc:46:98:ec:31:40:1f:be:54:c7:ff:54:ac:e5:ab:13:41:f3:
49:b3:46:95:c7:d7:51:3c:b1:5a:69:3f:25:37:f6:2d:5b:3f:
9d:db:fb:44:d2:eb:8d:88:bb:2e:29:1e:ce:2f:b1:09:c1:d4:
82:b6:5b:e5:c4:63:be:23:2f:17:0c:c3:c2:97:3d:f7:9d:2c:
cf:28:ae:17:e1:b2:d9:d3:c6:b3:fa:09:b8:5a:8a:82:15:5a:
91:78:6e:b3:c6:ac:cc:be:8d:37:5d:d4:7c:e3:bb:4c:48:2b:
c0:a5:c0:c2:cb:7b:44:05:1e:fc:3a:a9:36:ac:53:22:28:db:
56:96:72:46:48:b3:d8:03:d2:f9:2c:3b:ba:ad:a6:2b:b3:de:
3c:ba:05:48:4f:fd:ab:85:70:94:74:43:3f:bc:57:90:43:d3:
2c:22:0e:eb:fe:23:03:af:1c:1b:bd:6d:3e:06:a9:85:2a:17:
1e:c9:12:d1:16:27:97:ee:9b:d1:69:13:a4:f9:7d:16:be:29:
bf:c2:51:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSP2RLVOqxCdCtjPxiTu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh
YTVhNDYwHhcNMjYwOTIzMjIwMDM5WhcNMjYwOTI0MjIwMDM5WjAzMTEwLwYDVQQD
EygzYjliM2JhZjVjNjQ4MmU5NjE2ZWYwMTBmNjBhZTgwNDMwMWU3MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hQJVp04wRVINcrSmyCffatro15T
wX9cxnB2aSJfPJapbSnZGMD0j23xxfxlvOecL7GrKk1v0T79r9IjtghWydYacyEp
db89d3E3Q5eer3TXtHdmdq2ZFQQi1lBuzWVms6hRLGK+41jNDEBP/GhqB7htJlRR
bqfgVvC9ozRK+5UL0vogerFi/ULpc6mfhfXWVN7p5cj+G+RmarhupeHDOFXAWV22
+OORhlIOSypEN9St8/BO5UsSEUtFbuSvNbDLbYCyePnzlH4zz9rgn2fSltDeSAj1
ZroSZu2cv9TBwb7rRR+iZvKCAGzJnVcyZPm2W9MJC2B23gtsPPXpt+m0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDubO69cZILpYW7wEPYK6AQwHnCaMB8GA1UdIwQY
MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt
ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4
LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy5P0LwV
DcmJ7qXhPKHr5bDZOeqrcz4X4/fKIcdZQsLEMOZdkV7i9V28E8GiHAp6y9Bo3eKd
zEaY7DFAH75Ux/9UrOWrE0HzSbNGlcfXUTyxWmk/JTf2LVs/ndv7RNLrjYi7Like
zi+xCcHUgrZb5cRjviMvFwzDwpc9950szyiuF+Gy2dPGs/oJuFqKghVakXhus8as
zL6NN13UfOO7TEgrwKXAwst7RAUe/DqpNqxTIijbVpZyRkiz2APS+Sw7uq2mK7Pe
PLoFSE/9q4VwlHRDP7xXkEPTLCIO6/4jA68cG71tPgaphSoXHskS0RYnl+6b0WkT
pPl9Fr4pv8JR8Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:45:39 2026 by rpki-client