Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
File: M1lkDZyLY0Pghqr4vosw6MMdK40.mft (raw, json)
Hash identifier: ynvty91yIx7lzCa2AxsA+g5yWEILZmBnw3VfIv10VM8=
Subject key identifier: 32:5D:FB:4B:04:1D:01:F1:4D:09:AD:EA:90:71:6C:DA:E0:45:FF:72
Authority key identifier: 33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
Certificate issuer: /CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Certificate serial: 019D2703D12C9004D85DDDF9C83A21F21E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
Manifest number: 060D
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: M1lkDZyLY0Pghqr4vosw6MMdK40.crl (hash: DTuMH/Rc07pEMdnhbs6A8+wOdeqW5qN3psN4TAV9jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d1:2c:90:04:d8:5d:dd:f9:c8:3a:21:f2:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=325dfb4b041d01f14d09adea90716cdae045ff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:31:12:e3:09:fb:8f:dd:6c:b7:f5:c3:74:
62:75:0d:01:7b:4c:c4:8b:83:e7:dc:dc:d6:81:ed:
3a:cb:ac:3e:f9:e5:3a:f9:0c:a3:63:c9:26:b7:94:
3b:93:44:52:d0:1d:a0:46:b9:67:4b:e8:d4:74:4e:
eb:e7:fb:0c:79:c9:cc:c6:a1:59:14:d8:c2:62:35:
6a:f2:9e:fc:d9:c8:a0:2a:70:f4:17:a6:f5:c8:6b:
df:73:d5:b2:87:46:f0:cd:c9:1b:fe:4c:fa:1d:18:
93:98:81:3b:e4:5a:66:80:64:73:2c:8a:1f:ee:8e:
be:e8:95:6c:a8:4f:d6:01:a0:13:39:94:68:9c:46:
c2:fa:8f:61:5d:8d:0a:60:be:07:62:e2:ad:82:5a:
00:5c:8c:86:09:26:d5:69:11:1f:f9:f8:d5:1e:ef:
3c:cd:a0:ea:53:1a:6f:e3:2a:0c:2b:fa:d6:28:72:
1d:dd:2c:69:2f:1e:57:75:36:18:50:20:c0:69:e0:
58:fc:64:1d:85:f8:f2:45:e2:43:ba:93:c4:16:92:
bc:d9:27:0f:18:63:10:9a:75:ef:30:8e:fd:fb:3b:
c5:42:72:7d:e5:89:04:2c:24:14:01:cd:24:9c:a6:
76:92:aa:53:64:95:3b:3d:c2:da:77:d0:2c:ae:8e:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:FB:4B:04:1D:01:F1:4D:09:AD:EA:90:71:6C:DA:E0:45:FF:72
X509v3 Authority Key Identifier:
keyid:33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6f:d5:69:57:e1:38:7a:cd:cd:b2:83:fc:a8:aa:9e:c4:35:
53:2f:9c:71:46:51:2a:ea:80:a3:52:ec:cb:1d:43:29:71:81:
56:4f:c8:f8:30:ad:d4:c9:a6:c5:db:5f:7f:0c:9c:9d:32:00:
c4:b9:92:a3:ac:9f:d1:6e:b2:6e:d0:1a:4d:ad:78:39:a0:01:
ed:62:22:0e:e4:59:da:42:6d:4b:08:10:71:c3:dc:34:c0:5a:
d7:3e:96:0c:b6:2f:07:79:4d:4b:6c:ac:aa:6a:70:c5:2e:b1:
37:49:e4:ad:29:e3:13:63:8a:56:df:42:e6:3b:68:c7:15:a2:
2f:95:ab:ff:ae:cc:1d:5e:18:6c:81:c9:8f:60:ed:ea:b9:b0:
7c:a8:d1:5b:30:71:12:64:79:a3:eb:b6:71:c4:dc:0f:33:1d:
d2:8a:c2:81:36:bd:4f:03:b0:56:0a:f9:39:a9:48:e0:02:45:
1e:dc:ac:d6:76:3b:34:18:13:62:92:2a:34:93:69:40:65:88:
13:a4:63:d7:15:68:2a:c6:4b:2b:07:84:2a:22:83:1c:d3:74:
34:71:49:11:c7:e6:69:e9:00:e5:47:9e:6c:33:70:a9:20:72:
95:2e:00:b4:ca:00:0d:55:be:c2:c1:fc:f7:03:b0:6e:c8:6a:
6c:80:ce:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9EskATYXd35yDoh8h6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTk2NDBkOWM4YjYzNDNlMDg2YWFmOGJlOGIzMGU4YzMx
ZDJiOGQwHhcNMjYwMzI1MjIwMDU0WhcNMjYwMzI2MjIwMDU0WjAzMTEwLwYDVQQD
EygzMjVkZmI0YjA0MWQwMWYxNGQwOWFkZWE5MDcxNmNkYWUwNDVmZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FoxEuMJ+4/dbLf1w3RidQ0Be0zE
i4Pn3NzWge06y6w++eU6+QyjY8kmt5Q7k0RS0B2gRrlnS+jUdE7r5/sMecnMxqFZ
FNjCYjVq8p782cigKnD0F6b1yGvfc9Wyh0bwzckb/kz6HRiTmIE75FpmgGRzLIof
7o6+6JVsqE/WAaATOZRonEbC+o9hXY0KYL4HYuKtgloAXIyGCSbVaREf+fjVHu88
zaDqUxpv4yoMK/rWKHId3SxpLx5XdTYYUCDAaeBY/GQdhfjyReJDupPEFpK82ScP
GGMQmnXvMI79+zvFQnJ95YkELCQUAc0knKZ2kqpTZJU7PcLad9Asro4QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJd+0sEHQHxTQmt6pBxbNrgRf9yMB8GA1UdIwQY
MBaAFDNZZA2ci2ND4Iaq+L6LMOjDHSuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQt
YmRkYzMxNDNiMzEzLzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQtYmRkYzMxNDNiMzEz
LzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvW/VaVfh
OHrNzbKD/KiqnsQ1Uy+ccUZRKuqAo1Lsyx1DKXGBVk/I+DCt1MmmxdtffwycnTIA
xLmSo6yf0W6ybtAaTa14OaAB7WIiDuRZ2kJtSwgQccPcNMBa1z6WDLYvB3lNS2ys
qmpwxS6xN0nkrSnjE2OKVt9C5jtoxxWiL5Wr/67MHV4YbIHJj2Dt6rmwfKjRWzBx
EmR5o+u2ccTcDzMd0orCgTa9TwOwVgr5OalI4AJFHtys1nY7NBgTYpIqNJNpQGWI
E6Rj1xVoKsZLKweEKiKDHNN0NHFJEcfmaekA5UeebDNwqSBylS4AtMoADVW+wsH8
9wOwbshqbIDO4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:35 2026 by rpki-client