Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: 2nAWbOi91iso8+1DLVbmhlNP7DIEXZPmpfiBJ2PhgVM=
Subject key identifier: A7:2F:33:84:25:4E:CC:0D:4F:AF:53:7E:9B:31:04:5D:9C:35:DE:38
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 019D28BB6FB32E7E7990D93FABCE684E1F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: VKDIhYt67/jn/B0Ly3fnhlNdO0bReRMIfMuhiRQtE7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6f:b3:2e:7e:79:90:d9:3f:ab:ce:68:4e:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=a72f3384254ecc0d4faf537e9b31045d9c35de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:0a:80:ee:27:9f:15:b8:9d:20:15:13:7b:
6e:f5:2a:3e:24:5f:67:ec:5d:55:8c:2d:6b:c7:55:
ab:bd:8f:df:a6:a1:96:ba:a4:55:32:99:78:14:6d:
ee:58:08:23:7c:5c:ca:52:d0:ab:b6:8f:d7:f2:4c:
f3:01:46:8a:e3:29:0e:2d:47:77:63:fe:5c:24:81:
b6:dd:a0:f3:a6:cb:ee:1c:7b:29:42:50:e7:4e:b5:
c1:f4:93:b2:82:0e:0c:e1:49:a7:ee:54:64:f3:9e:
88:61:8a:6c:6e:05:df:b4:f9:2d:59:78:67:76:f0:
d2:19:69:84:de:0b:e6:1a:5b:21:c2:00:92:67:5c:
8a:56:3b:0f:78:79:d1:c4:2e:7f:f6:3a:9f:19:2f:
0f:bd:24:bc:84:83:46:e5:5d:56:ee:32:6c:43:94:
93:39:66:90:d0:7c:04:82:b1:f7:94:18:95:94:af:
e6:05:02:6a:ba:1a:c7:26:44:b2:2b:30:83:7c:80:
8e:e7:26:77:4e:2b:20:3f:85:bc:ca:fb:d8:1c:29:
f2:40:05:1a:3b:ed:73:4a:36:a8:e8:6d:e6:78:33:
33:ca:47:7a:cd:09:c2:7e:f7:b5:d9:06:57:1d:fa:
51:07:2a:06:74:ee:dd:2c:38:80:e6:6c:b0:12:c8:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:33:84:25:4E:CC:0D:4F:AF:53:7E:9B:31:04:5D:9C:35:DE:38
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:39:4b:4f:73:e3:16:85:e9:88:69:30:a8:86:b7:38:a8:08:
0a:fa:9d:85:5d:3e:62:9a:49:2e:7d:54:4a:bf:84:21:da:e3:
9a:ca:e5:05:27:85:90:3b:e7:90:d5:f4:81:10:6a:59:ae:45:
e9:53:67:39:90:70:ca:86:b0:49:a9:5f:48:a8:e9:16:8b:a5:
48:0e:da:aa:40:2a:7a:4e:62:02:74:dc:d4:6e:9b:04:8d:1b:
91:9d:62:f3:17:78:af:9e:bc:f1:2b:6c:de:85:fc:b5:63:0d:
f0:17:78:17:c0:d5:14:25:4e:f0:dc:6b:d5:70:b5:49:2d:de:
97:7e:ad:5e:8e:7d:f4:ca:f3:1a:ef:38:53:60:20:08:67:20:
f5:e7:19:06:07:0f:3f:c2:92:fd:2a:9b:bb:17:66:d4:63:da:
72:dc:58:53:a5:76:02:fc:58:f1:6c:20:81:ff:65:fa:83:4d:
9e:4f:e5:ee:73:75:0c:6a:ce:5c:85:97:53:59:63:07:a3:37:
72:f2:fa:77:ba:b4:be:4a:7a:ef:f1:b0:24:d2:88:3c:ab:dd:
2d:c1:4e:76:90:18:5d:06:78:95:59:2a:30:a8:d0:c7:75:40:
c2:41:f8:c3:7e:73:3e:fa:9c:b1:13:b1:b7:2e:2d:fb:9b:73:
d2:fb:05:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2+zLn55kNk/q85oTh8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2
ZWJiMTUwHhcNMjYwMzI2MDYwMTA1WhcNMjYwMzI3MDYwMTA1WjAzMTEwLwYDVQQD
EyhhNzJmMzM4NDI1NGVjYzBkNGZhZjUzN2U5YjMxMDQ1ZDljMzVkZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4KgO4nnxW4nSAVE3tu9So+JF9n
7F1VjC1rx1WrvY/fpqGWuqRVMpl4FG3uWAgjfFzKUtCrto/X8kzzAUaK4ykOLUd3
Y/5cJIG23aDzpsvuHHspQlDnTrXB9JOygg4M4Umn7lRk856IYYpsbgXftPktWXhn
dvDSGWmE3gvmGlshwgCSZ1yKVjsPeHnRxC5/9jqfGS8PvSS8hING5V1W7jJsQ5ST
OWaQ0HwEgrH3lBiVlK/mBQJquhrHJkSyKzCDfICO5yZ3TisgP4W8yvvYHCnyQAUa
O+1zSjao6G3meDMzykd6zQnCfve12QZXHfpRByoGdO7dLDiA5mywEsirOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcvM4QlTswNT69TfpsxBF2cNd44MB8GA1UdIwQY
MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt
ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx
LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezlLT3Pj
FoXpiGkwqIa3OKgICvqdhV0+YppJLn1USr+EIdrjmsrlBSeFkDvnkNX0gRBqWa5F
6VNnOZBwyoawSalfSKjpFoulSA7aqkAqek5iAnTc1G6bBI0bkZ1i8xd4r5688Sts
3oX8tWMN8Bd4F8DVFCVO8Nxr1XC1SS3el36tXo599MrzGu84U2AgCGcg9ecZBgcP
P8KS/Sqbuxdm1GPactxYU6V2AvxY8Wwggf9l+oNNnk/l7nN1DGrOXIWXU1ljB6M3
cvL6d7q0vkp67/GwJNKIPKvdLcFOdpAYXQZ4lVkqMKjQx3VAwkH4w35zPvqcsROx
ty4t+5tz0vsF0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:56 2026 by rpki-client