Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: 7Vx5cjcaYutUir8Lgzx7FhIWURTiFUNSgTxHR8W1aZU=
Subject key identifier: C7:CA:5F:67:9C:2A:FC:48:CE:E6:D0:69:4C:71:3A:A2:67:14:88:6D
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019D2703E7FB013F4EA30F926417EE665B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 1146
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: kiAO+nesdKoh9mEvtWwOqBCyKICyncVojAzIPh986hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e7:fb:01:3f:4e:a3:0f:92:64:17:ee:66:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=c7ca5f679c2afc48cee6d0694c713aa26714886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:b0:0b:55:8f:d3:3d:a3:dd:32:9e:91:cd:
84:b5:58:e4:a8:9f:ac:58:6e:f7:24:67:2a:cb:eb:
39:f6:7b:f8:36:98:2d:99:0b:85:48:ad:92:27:46:
61:0f:6d:5f:f5:96:6c:fd:bc:6c:df:da:ab:e1:64:
cd:c8:5e:27:18:23:7c:b8:e8:2e:1b:e6:8a:d3:7c:
ba:2d:18:cf:12:04:00:4c:21:80:1a:8f:53:e3:1a:
b7:40:cd:56:5b:84:62:a8:0b:03:29:49:44:a8:ce:
cb:d9:38:e2:51:f7:3d:ed:04:e9:61:d3:33:ee:a3:
c1:1f:c3:76:63:26:b7:b9:03:3c:37:0b:d8:da:63:
6c:5b:71:2d:f1:c3:62:06:3a:07:6c:03:f0:38:dd:
20:a4:ea:84:55:83:44:02:69:70:12:55:da:c4:cb:
b5:de:56:ad:b6:77:f0:96:4a:07:f0:16:4b:02:3d:
0c:08:b2:2d:12:0a:c4:ff:e1:3c:c0:8f:fd:56:fd:
e5:b0:38:b6:8e:a8:92:b6:d7:4d:7a:70:55:50:da:
52:05:ed:d6:f4:75:06:b6:d8:da:06:df:41:30:5c:
1d:c0:21:b2:b1:d8:54:cd:41:c2:8f:95:f1:da:f4:
c4:44:0e:12:c5:de:11:52:64:ae:1c:17:d4:16:a2:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:5F:67:9C:2A:FC:48:CE:E6:D0:69:4C:71:3A:A2:67:14:88:6D
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:2a:66:1c:b0:50:09:67:a0:4c:ef:76:c7:5f:09:77:92:
38:7f:5c:f8:0f:2d:f2:a6:fb:6a:45:27:eb:ba:00:08:a8:5e:
79:e0:8d:8e:c1:53:43:7a:55:54:b0:91:b4:51:54:f6:6e:c2:
a2:55:b5:ea:46:0c:91:b7:97:94:b0:5d:cb:4e:2c:67:e6:ab:
45:95:90:3b:2d:7c:f2:f6:fc:4e:6e:c0:77:67:a8:48:9e:8d:
48:88:9d:af:84:b3:53:dc:27:02:5a:ad:03:f4:89:42:f5:bf:
c7:66:a7:76:10:0e:0c:53:fe:f3:27:d8:54:6e:fe:69:2d:8d:
06:d7:fa:41:bd:1f:c4:71:aa:33:5b:88:ad:f5:cc:f2:b0:7a:
28:96:02:08:e5:17:1a:a4:ca:66:0f:fc:9d:33:bc:60:28:f5:
c8:3f:04:f5:26:9e:27:fb:27:88:66:49:21:fd:0b:db:6e:63:
48:e7:ae:a3:02:62:1a:fd:fc:90:0a:9b:43:2b:22:04:77:83:
98:80:59:35:a5:ac:e6:2e:21:60:92:ca:04:41:ad:48:55:79:
e0:5f:fc:6f:58:cf:be:d3:f0:7f:ac:d5:c0:24:0b:2c:ca:cb:
20:e1:b4:7e:9c:4d:66:36:87:e7:e4:ef:25:62:30:9b:c9:48:
d5:df:4f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+f7AT9Oow+SZBfuZlsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjZmZWUwZjMwODg2NTdmYmZkMjNhNzgyZGY1Nzc5Y2Y5
MTNhNjMwHhcNMjYwMzI1MjIwMTAwWhcNMjYwMzI2MjIwMTAwWjAzMTEwLwYDVQQD
EyhjN2NhNWY2NzljMmFmYzQ4Y2VlNmQwNjk0YzcxM2FhMjY3MTQ4ODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n+wC1WP0z2j3TKekc2EtVjkqJ+s
WG73JGcqy+s59nv4NpgtmQuFSK2SJ0ZhD21f9ZZs/bxs39qr4WTNyF4nGCN8uOgu
G+aK03y6LRjPEgQATCGAGo9T4xq3QM1WW4RiqAsDKUlEqM7L2TjiUfc97QTpYdMz
7qPBH8N2Yya3uQM8NwvY2mNsW3Et8cNiBjoHbAPwON0gpOqEVYNEAmlwElXaxMu1
3lattnfwlkoH8BZLAj0MCLItEgrE/+E8wI/9Vv3lsDi2jqiSttdNenBVUNpSBe3W
9HUGttjaBt9BMFwdwCGysdhUzUHCj5Xx2vTERA4Sxd4RUmSuHBfUFqL8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfKX2ecKvxIzubQaUxxOqJnFIhtMB8GA1UdIwQY
MBaAFA1m/uDzCIZX+/0jp4LfV3nPkTpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMt
OGU2ZWZmMTZhNmY4LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMtOGU2ZWZmMTZhNmY4
LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeacqZhyw
UAlnoEzvdsdfCXeSOH9c+A8t8qb7akUn67oACKheeeCNjsFTQ3pVVLCRtFFU9m7C
olW16kYMkbeXlLBdy04sZ+arRZWQOy188vb8Tm7Ad2eoSJ6NSIidr4SzU9wnAlqt
A/SJQvW/x2andhAODFP+8yfYVG7+aS2NBtf6Qb0fxHGqM1uIrfXM8rB6KJYCCOUX
GqTKZg/8nTO8YCj1yD8E9SaeJ/sniGZJIf0L225jSOeuowJiGv38kAqbQysiBHeD
mIBZNaWs5i4hYJLKBEGtSFV54F/8b1jPvtPwf6zVwCQLLMrLIOG0fpxNZjaH5+Tv
JWIwm8lI1d9PmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:07 2026 by rpki-client