Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: PHnPrxUle7Mel3qfUouu2p4dJmkZpN8ymrUbiQGYiB4=
Subject key identifier: AC:53:47:FC:6B:A0:8F:9A:28:60:94:2E:54:72:D8:3D:7A:65:C0:6F
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019D2583781EAE0A0E8EEF2E99D1BA4EB137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0C70
Signing time: Wed 25 Mar 2026 15:01:06 +0000
Manifest this update: Wed 25 Mar 2026 15:01:06 +0000
Manifest next update: Thu 26 Mar 2026 15:01:06 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: OPOnqArSqZ+vxWZ0erxU7KAyV3WruMPfYxSvWs94MKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:78:1e:ae:0a:0e:8e:ef:2e:99:d1:ba:4e:b1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Mar 25 15:01:06 2026 GMT
Not After : Mar 26 15:01:06 2026 GMT
Subject: CN=ac5347fc6ba08f9a2860942e5472d83d7a65c06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:c8:78:fa:29:d9:05:95:82:5d:d5:42:63:
d2:54:22:fc:19:26:6d:a5:e5:d4:ee:2b:ef:c6:31:
36:50:e6:b9:06:c1:1b:83:d6:84:55:e4:f4:6c:fc:
63:93:16:66:df:44:1c:81:f6:c8:dc:d9:0c:85:2c:
e5:45:18:b5:cd:e4:9f:96:56:47:9e:cc:e9:c9:9a:
36:02:ee:50:97:3b:a0:29:4f:0a:86:f4:80:c5:be:
1f:e6:7d:63:5c:f1:19:10:c2:04:af:88:76:75:39:
7b:58:b1:21:66:a0:6e:02:23:17:04:1d:7c:95:c9:
c2:29:7f:b0:0a:56:82:35:06:1d:16:34:9f:cb:48:
c9:9d:80:b0:95:1a:76:a4:3d:2a:5d:e0:18:86:11:
42:32:30:ce:02:4f:b9:21:42:e3:71:17:95:ab:eb:
df:d7:fa:cd:55:ee:fe:63:a2:dc:99:62:c8:8a:eb:
97:4d:a8:37:a9:e5:50:61:c3:ba:ce:8f:67:74:c0:
b0:86:6b:91:d5:b0:f8:a1:59:ee:03:c9:59:62:c6:
bf:34:f7:7f:6a:44:a4:ff:2b:e6:36:a9:e2:4a:e3:
fe:4a:b8:a0:66:ff:ef:02:95:ed:79:69:ba:97:29:
29:ea:fd:fd:94:03:95:4e:6d:29:bb:ab:02:b7:91:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:47:FC:6B:A0:8F:9A:28:60:94:2E:54:72:D8:3D:7A:65:C0:6F
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:a0:f9:6f:ba:19:36:fb:90:13:57:2c:ae:96:2e:aa:9b:
66:c9:7a:98:3c:0c:51:65:76:52:ac:40:79:8e:bb:a7:76:47:
e6:cd:ef:5d:64:de:b0:d7:a7:9b:3a:d4:70:6f:84:ae:5d:2a:
25:4a:a3:f3:7e:65:c3:81:66:83:7b:f6:e5:1c:7c:90:50:08:
f4:3c:e2:44:71:97:ac:7a:68:b7:fb:50:42:77:03:4e:08:13:
92:4c:ba:2c:f6:7e:97:48:40:c5:df:b2:f1:3f:ac:eb:1b:25:
d4:17:0f:73:32:1f:cb:fa:a4:aa:15:aa:5e:c3:a8:b7:dc:c6:
c3:2f:74:22:7e:8b:f8:16:5d:08:0f:5e:28:2e:83:45:2b:17:
5d:8f:d2:23:8c:12:34:01:3a:83:0b:47:b4:38:66:4a:c3:7f:
d0:1d:81:ea:0f:4b:ac:27:9b:95:ff:b4:24:4b:ed:da:00:19:
97:b9:96:c5:7f:73:bd:61:7f:29:1b:a1:ea:d6:23:81:7f:62:
0a:42:4a:0e:05:4b:8c:80:ab:40:88:d3:86:50:0f:ed:f5:b3:
2a:1e:ac:02:64:08:e4:f1:1c:7b:38:ac:a5:e1:3c:42:cc:d3:
ae:36:3a:d0:b4:18:a3:d9:83:8e:be:a8:27:61:aa:59:1f:25:
8e:1b:41:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3gergoOju8umdG6TrE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjYwMzI1MTUwMTA2WhcNMjYwMzI2MTUwMTA2WjAzMTEwLwYDVQQD
EyhhYzUzNDdmYzZiYTA4ZjlhMjg2MDk0MmU1NDcyZDgzZDdhNjVjMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vDIePop2QWVgl3VQmPSVCL8GSZt
peXU7ivvxjE2UOa5BsEbg9aEVeT0bPxjkxZm30QcgfbI3NkMhSzlRRi1zeSfllZH
nszpyZo2Au5QlzugKU8KhvSAxb4f5n1jXPEZEMIEr4h2dTl7WLEhZqBuAiMXBB18
lcnCKX+wClaCNQYdFjSfy0jJnYCwlRp2pD0qXeAYhhFCMjDOAk+5IULjcReVq+vf
1/rNVe7+Y6LcmWLIiuuXTag3qeVQYcO6zo9ndMCwhmuR1bD4oVnuA8lZYsa/NPd/
akSk/yvmNqniSuP+SrigZv/vApXteWm6lykp6v39lAOVTm0pu6sCt5GojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxTR/xroI+aKGCULlRy2D16ZcBvMB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2Cg+W+6
GTb7kBNXLK6WLqqbZsl6mDwMUWV2UqxAeY67p3ZH5s3vXWTesNenmzrUcG+Erl0q
JUqj835lw4Fmg3v25Rx8kFAI9DziRHGXrHpot/tQQncDTggTkky6LPZ+l0hAxd+y
8T+s6xsl1BcPczIfy/qkqhWqXsOot9zGwy90In6L+BZdCA9eKC6DRSsXXY/SI4wS
NAE6gwtHtDhmSsN/0B2B6g9LrCeblf+0JEvt2gAZl7mWxX9zvWF/KRuh6tYjgX9i
CkJKDgVLjICrQIjThlAP7fWzKh6sAmQI5PEcezispeE8QszTrjY60LQYo9mDjr6o
J2GqWR8ljhtBIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:54 2026 by rpki-client