Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: 5ZOEaUmAHWLxpd7JY8deUPcrpunC0NLQamuNxCN1GQ8=
Subject key identifier: 6B:95:A6:89:AC:28:AA:E7:70:A1:A4:10:01:42:5A:4F:7B:69:BF:39
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 019D2772DD01FF41019F4BAFBDCBBAA7FA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0CC1
Signing time: Thu 26 Mar 2026 00:02:12 +0000
Manifest this update: Thu 26 Mar 2026 00:02:12 +0000
Manifest next update: Fri 27 Mar 2026 00:02:12 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: 8RpQSFJJL7QLTNGRPk4uMnj6gA5/2fLGaj0SdNCuweA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:dd:01:ff:41:01:9f:4b:af:bd:cb:ba:a7:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Mar 26 00:02:12 2026 GMT
Not After : Mar 27 00:02:12 2026 GMT
Subject: CN=6b95a689ac28aae770a1a41001425a4f7b69bf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:d3:fa:9d:ea:85:dd:59:7e:02:9f:63:ce:
56:b6:41:51:73:f2:e0:22:e9:69:67:ef:9f:aa:6a:
c2:68:ad:85:de:67:1c:67:48:43:6a:c3:80:c7:4f:
f3:1e:b4:87:30:cd:55:3b:81:7d:ff:ee:31:53:1c:
50:23:7b:4c:a0:b4:d4:83:c4:1e:51:f5:9b:2e:0d:
51:c4:aa:16:25:8d:43:58:da:b2:f7:a5:88:2f:93:
5f:77:a9:f3:26:39:1f:47:41:76:80:47:1d:c0:91:
2e:1c:21:0b:cf:c7:6e:9f:2d:ce:76:1c:fe:a5:24:
cf:fb:ba:e6:ea:9d:fc:2f:fd:bb:70:1e:58:4e:70:
fa:2b:e7:b4:f7:03:7b:2d:de:f7:5c:f6:0a:41:3c:
c0:d8:a2:e1:62:ed:11:5e:7c:da:41:3d:6a:44:e7:
40:bf:db:6f:06:41:b8:ea:01:de:b1:60:41:e9:de:
b7:10:c0:8c:24:f3:ab:1f:e4:e3:a0:6d:da:67:96:
cf:53:34:a1:3c:58:48:04:2d:f9:ea:20:92:df:af:
e5:11:e1:3c:8f:ab:5c:e8:30:7d:88:2a:3e:6d:78:
ef:77:09:7a:62:7e:8d:78:af:16:d7:9a:a9:c1:42:
6e:d6:76:52:1a:24:4c:32:82:14:cc:06:e2:14:89:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:A6:89:AC:28:AA:E7:70:A1:A4:10:01:42:5A:4F:7B:69:BF:39
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:7e:2f:28:6c:de:38:8d:e9:4a:fb:3b:68:12:0f:b7:83:
48:5b:d0:40:ac:3c:7b:37:d7:28:ac:a7:32:0e:17:eb:c6:e7:
ea:6d:dc:c8:72:2e:48:26:7e:1e:cf:79:1e:a4:2c:1f:67:53:
19:11:31:40:e5:c5:84:2d:40:ca:59:a5:b0:65:72:d0:ed:fd:
ee:06:c8:bd:bf:15:35:ed:51:cd:1b:cc:b9:18:8c:44:45:52:
37:5b:74:80:00:93:62:cd:07:98:62:63:d8:77:c8:d2:ab:55:
ee:73:c9:21:2b:98:f0:26:4d:ff:66:7a:6e:3e:aa:0c:0c:45:
a8:27:46:47:fd:4c:22:aa:7b:c8:fb:58:9d:d4:50:93:3c:fc:
94:b0:df:6e:68:33:84:bb:ce:7b:93:81:3a:f0:80:aa:6a:12:
84:4b:18:25:5d:20:28:34:d1:f0:95:6f:1f:1f:ef:d1:f0:29:
3c:af:be:72:0b:ac:7f:89:e6:a6:07:f5:0b:6c:dc:f4:cd:05:
3d:58:64:ce:fe:f6:eb:d2:b3:65:98:56:d3:e6:41:ea:aa:56:
d7:bf:57:35:a2:2e:8c:27:6b:cf:f0:57:27:88:c0:2e:70:15:
4b:20:b5:73:96:9b:62:a9:f6:19:6f:95:85:52:1b:fd:55:96:
62:e5:d7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nct0B/0EBn0uvvcu6p/pCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWQ3NGRmNDQzY2I4MDUxN2NlNDE1MGRjZTIyNjYyOTQw
ZjFkN2MwHhcNMjYwMzI2MDAwMjEyWhcNMjYwMzI3MDAwMjEyWjAzMTEwLwYDVQQD
Eyg2Yjk1YTY4OWFjMjhhYWU3NzBhMWE0MTAwMTQyNWE0ZjdiNjliZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2vT+p3qhd1ZfgKfY85WtkFRc/Lg
IulpZ++fqmrCaK2F3mccZ0hDasOAx0/zHrSHMM1VO4F9/+4xUxxQI3tMoLTUg8Qe
UfWbLg1RxKoWJY1DWNqy96WIL5Nfd6nzJjkfR0F2gEcdwJEuHCELz8duny3Odhz+
pSTP+7rm6p38L/27cB5YTnD6K+e09wN7Ld73XPYKQTzA2KLhYu0RXnzaQT1qROdA
v9tvBkG46gHesWBB6d63EMCMJPOrH+TjoG3aZ5bPUzShPFhIBC356iCS36/lEeE8
j6tc6DB9iCo+bXjvdwl6Yn6NeK8W15qpwUJu1nZSGiRMMoIUzAbiFIku/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuVpomsKKrncKGkEAFCWk97ab85MB8GA1UdIwQY
MBaAFHdddN9EPLgFF85BUNziJmKUDx18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUt
NmY3NTg2MTk4MzdmLzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUtNmY3NTg2MTk4Mzdm
LzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcJ+Lyhs
3jiN6Ur7O2gSD7eDSFvQQKw8ezfXKKynMg4X68bn6m3cyHIuSCZ+Hs95HqQsH2dT
GRExQOXFhC1AylmlsGVy0O397gbIvb8VNe1RzRvMuRiMREVSN1t0gACTYs0HmGJj
2HfI0qtV7nPJISuY8CZN/2Z6bj6qDAxFqCdGR/1MIqp7yPtYndRQkzz8lLDfbmgz
hLvOe5OBOvCAqmoShEsYJV0gKDTR8JVvHx/v0fApPK++cgusf4nmpgf1C2zc9M0F
PVhkzv7269KzZZhW0+ZB6qpW179XNaIujCdrz/BXJ4jALnAVSyC1c5abYqn2GW+V
hVIb/VWWYuXXlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:10 2026 by rpki-client