Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: 0y1bPvZrLtS2IwQ7C2foaKskqDZMRykOy7zGdRq/gRI=
Subject key identifier: 61:59:AF:98:FB:CC:5A:11:D6:2F:56:50:3E:91:E4:27:EF:29:46:4D
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 019D27A911C6AA494E0F0BD05C03FF9EB3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: VOt83bDDkAFl450RxX6Jw+7lYlx2iQNA21LByN8lb5c=)
2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:11:c6:aa:49:4e:0f:0b:d0:5c:03:ff:9e:b3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=6159af98fbcc5a11d62f56503e91e427ef29464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:b7:c9:90:eb:e6:3e:e6:35:0a:20:5b:b5:
19:cf:fa:3f:52:f2:10:bb:d3:38:8f:76:92:22:63:
87:86:bd:88:9a:78:42:2f:9c:e8:62:67:79:4d:cf:
99:96:12:38:b1:72:c4:b1:7a:22:6c:d5:b2:e7:c7:
77:8a:b9:fe:90:a6:53:b7:6b:53:0c:39:fc:df:e6:
51:2f:a7:22:6f:fe:e0:96:97:b1:91:c9:4e:e7:5e:
df:80:76:32:86:77:86:7b:51:63:94:84:68:47:b9:
a8:b3:41:c3:5a:83:20:fb:85:e9:9a:59:a9:8a:b1:
19:45:e0:3b:51:93:1d:83:8c:67:f1:7f:ca:82:03:
f6:f4:de:0d:17:bd:55:90:5d:a0:f3:a9:86:4b:0a:
9e:90:2d:7d:fc:2d:99:65:18:e2:20:24:86:4f:9a:
57:f4:5f:82:da:20:00:62:cf:e2:21:88:93:eb:19:
07:da:89:fa:28:ea:3b:db:75:92:de:98:03:99:a5:
ef:b9:21:31:de:45:13:7c:e6:6a:84:5a:c5:cf:59:
78:b6:f4:ee:7a:cb:06:64:d2:9d:8c:6b:be:cd:d1:
3d:f6:d2:e0:55:8b:29:97:23:43:e9:9a:a0:9f:e4:
23:0b:86:3c:35:6c:c5:4e:c0:0a:54:12:0a:c1:a9:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:AF:98:FB:CC:5A:11:D6:2F:56:50:3E:91:E4:27:EF:29:46:4D
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:db:5d:63:51:90:51:5a:07:0d:41:d2:a2:7b:1a:0a:0d:
48:b4:71:ea:58:ca:0a:c7:c0:d7:8d:e7:7f:cc:02:f0:1c:18:
75:cf:3e:98:01:76:74:63:8d:83:c0:1f:b3:db:8d:12:f5:08:
e0:b0:8f:a4:73:24:ab:5a:7c:c2:08:76:88:97:62:9d:37:e9:
e4:12:8f:a0:0e:a4:de:0a:8d:02:29:5f:eb:a1:48:df:18:06:
d3:1d:f9:0c:91:4d:fb:bd:fb:04:4d:66:55:e4:e1:5d:1c:d6:
f2:02:e4:e9:e4:45:b6:cb:59:50:a9:84:42:c7:e4:30:4f:fa:
40:c3:21:a3:17:8e:93:c1:0f:d2:0e:bd:a3:21:95:1b:12:05:
e4:55:44:75:4d:6a:d8:3c:39:9c:5f:bd:a9:5d:c3:d7:a6:97:
cf:a2:d5:ec:60:91:23:d8:f7:38:d4:f0:2a:2b:3d:a5:9b:9b:
09:ac:5b:0e:54:dc:f0:41:8d:89:13:a3:2c:65:89:ba:31:30:
16:99:c5:cd:d9:74:08:e0:5b:7d:0d:3e:9e:3c:82:b9:83:a1:
da:0e:ba:ac:80:e4:c3:ff:20:d9:0a:3c:4d:4e:f5:f3:04:12:
53:69:59:4f:5d:fa:08:d8:0e:05:37:57:4a:94:7e:a8:8b:e2:
bd:20:f7:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRHGqklODwvQXAP/nrO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0
NDVmYmUwHhcNMjYwMzI2MDEwMTI0WhcNMjYwMzI3MDEwMTI0WjAzMTEwLwYDVQQD
Eyg2MTU5YWY5OGZiY2M1YTExZDYyZjU2NTAzZTkxZTQyN2VmMjk0NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP63yZDr5j7mNQogW7UZz/o/UvIQ
u9M4j3aSImOHhr2ImnhCL5zoYmd5Tc+ZlhI4sXLEsXoibNWy58d3irn+kKZTt2tT
DDn83+ZRL6cib/7glpexkclO517fgHYyhneGe1FjlIRoR7mos0HDWoMg+4Xpmlmp
irEZReA7UZMdg4xn8X/KggP29N4NF71VkF2g86mGSwqekC19/C2ZZRjiICSGT5pX
9F+C2iAAYs/iIYiT6xkH2on6KOo723WS3pgDmaXvuSEx3kUTfOZqhFrFz1l4tvTu
essGZNKdjGu+zdE99tLgVYsplyND6Zqgn+QjC4Y8NWzFTsAKVBIKwak7qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFZr5j7zFoR1i9WUD6R5CfvKUZNMB8GA1UdIwQY
MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt
MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5
LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl3bXWNR
kFFaBw1B0qJ7GgoNSLRx6ljKCsfA143nf8wC8BwYdc8+mAF2dGONg8Afs9uNEvUI
4LCPpHMkq1p8wgh2iJdinTfp5BKPoA6k3gqNAilf66FI3xgG0x35DJFN+737BE1m
VeThXRzW8gLk6eRFtstZUKmEQsfkME/6QMMhoxeOk8EP0g69oyGVGxIF5FVEdU1q
2Dw5nF+9qV3D16aXz6LV7GCRI9j3ONTwKis9pZubCaxbDlTc8EGNiROjLGWJujEw
FpnFzdl0COBbfQ0+njyCuYOh2g66rIDkw/8g2Qo8TU718wQSU2lZT136CNgOBTdX
SpR+qIvivSD3dg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:06 2026 by rpki-client