Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: ysJnDTCqmK4jxlzzhTGQxMukWbA/3eOz67ppYslgfc4=
Subject key identifier: 66:06:51:BD:CA:27:FD:45:B9:6C:CA:EE:68:DC:C6:3A:9C:FF:DC:C6
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019D2A3BFA749D17B7921360B20AB40D2D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0C97
Signing time: Thu 26 Mar 2026 13:01:06 +0000
Manifest this update: Thu 26 Mar 2026 13:01:06 +0000
Manifest next update: Fri 27 Mar 2026 13:01:06 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: SvzpFDwZT6VXdLtJ+RQcCIEeHYPRISiFJFsoTyh2B5g=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fa:74:9d:17:b7:92:13:60:b2:0a:b4:0d:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Mar 26 13:01:06 2026 GMT
Not After : Mar 27 13:01:06 2026 GMT
Subject: CN=660651bdca27fd45b96ccaee68dcc63a9cffdcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:92:02:db:89:c7:c9:a5:e2:8b:07:e6:4c:
15:09:37:9b:ce:4e:a6:7f:0d:d9:7a:e9:07:e4:4e:
e7:bf:72:f2:73:f8:04:ef:08:1f:f0:f2:22:58:92:
fc:97:ca:a8:29:57:14:8a:d2:0b:0b:be:94:d0:30:
7a:b6:26:97:ed:92:56:bb:c4:62:8c:80:02:e7:fe:
68:33:77:e3:3e:ec:23:34:bd:3d:64:9e:2f:cf:43:
95:5d:c9:7f:63:2e:39:38:12:52:31:41:f0:cd:a6:
82:d8:8f:42:36:01:d3:58:4e:0e:ee:9c:0a:bc:b1:
f7:db:8c:fb:f2:96:aa:bf:0e:66:f9:60:b9:7d:48:
23:e5:6a:4d:06:b0:fc:c6:6b:55:e0:57:41:64:b4:
97:f6:4c:86:d2:9e:00:6e:36:c4:45:74:85:a4:d5:
83:6b:0e:77:00:c4:46:34:4f:4d:9a:c6:68:1f:fc:
dc:9e:54:e6:5e:2a:31:90:98:25:50:63:77:31:6d:
50:3c:44:f9:77:f8:60:71:1f:96:61:15:eb:9a:66:
40:63:fe:1a:60:dc:8a:3f:84:8b:65:d4:b1:56:07:
d6:f3:ea:21:af:5c:e9:95:ae:0a:63:e5:d2:35:ab:
5a:f1:d0:b2:08:62:b0:10:65:db:56:64:2c:65:07:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:51:BD:CA:27:FD:45:B9:6C:CA:EE:68:DC:C6:3A:9C:FF:DC:C6
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:57:e2:ac:a3:94:d0:bf:63:fe:70:ac:ed:e6:72:cf:87:55:
24:bd:53:fe:be:9d:1c:a6:06:52:e4:1f:92:54:7b:8f:42:83:
08:46:45:54:ed:a7:10:82:ff:d7:15:a3:f7:15:7e:c6:62:d9:
53:af:9d:90:b6:38:f3:d7:56:51:39:4c:36:a5:17:47:3b:ff:
67:be:43:01:38:ce:fc:c9:15:21:b4:c5:69:5e:52:a4:34:9e:
ed:6f:51:4e:9e:63:de:2e:44:50:f7:3d:6b:1a:b3:05:9d:c1:
cb:11:99:23:4a:5c:a0:f3:4c:65:0e:38:7e:3a:40:e7:fa:a8:
e6:2b:da:f4:ff:9e:44:18:7d:25:23:ac:76:9f:59:b5:9d:63:
6c:95:63:fd:a9:ac:39:ab:b2:c1:fe:f6:22:54:6d:72:c1:19:
29:ba:df:7a:0e:91:72:95:77:35:fd:28:2d:41:34:7f:da:16:
ea:2b:c9:09:80:86:62:cc:fc:19:f1:b2:ec:8b:c5:12:df:2b:
ef:4c:de:07:f6:f1:88:e4:56:e9:47:7a:ea:64:b3:ff:93:7a:
ab:8a:8e:7a:39:de:23:39:47:08:d9:c7:5e:bf:d2:3a:06:d9:
53:e0:80:a9:83:45:8d:37:65:a8:04:56:46:7d:34:df:ca:e9:
e4:ec:31:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO/p0nRe3khNgsgq0DS0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0
ZGFhYjkwHhcNMjYwMzI2MTMwMTA2WhcNMjYwMzI3MTMwMTA2WjAzMTEwLwYDVQQD
Eyg2NjA2NTFiZGNhMjdmZDQ1Yjk2Y2NhZWU2OGRjYzYzYTljZmZkY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNCSAtuJx8ml4osH5kwVCTebzk6m
fw3ZeukH5E7nv3Lyc/gE7wgf8PIiWJL8l8qoKVcUitILC76U0DB6tiaX7ZJWu8Ri
jIAC5/5oM3fjPuwjNL09ZJ4vz0OVXcl/Yy45OBJSMUHwzaaC2I9CNgHTWE4O7pwK
vLH324z78paqvw5m+WC5fUgj5WpNBrD8xmtV4FdBZLSX9kyG0p4AbjbERXSFpNWD
aw53AMRGNE9NmsZoH/zcnlTmXioxkJglUGN3MW1QPET5d/hgcR+WYRXrmmZAY/4a
YNyKP4SLZdSxVgfW8+ohr1zpla4KY+XSNata8dCyCGKwEGXbVmQsZQeuSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYGUb3KJ/1FuWzK7mjcxjqc/9zGMB8GA1UdIwQY
MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt
M2NhZGVjNDZlNWMzLzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz
LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlfirKOU
0L9j/nCs7eZyz4dVJL1T/r6dHKYGUuQfklR7j0KDCEZFVO2nEIL/1xWj9xV+xmLZ
U6+dkLY489dWUTlMNqUXRzv/Z75DATjO/MkVIbTFaV5SpDSe7W9RTp5j3i5EUPc9
axqzBZ3ByxGZI0pcoPNMZQ44fjpA5/qo5iva9P+eRBh9JSOsdp9ZtZ1jbJVj/ams
Oauywf72IlRtcsEZKbrfeg6RcpV3Nf0oLUE0f9oW6ivJCYCGYsz8GfGy7IvFEt8r
70zeB/bxiORW6Ud66mSz/5N6q4qOejneIzlHCNnHXr/SOgbZU+CAqYNFjTdlqARW
Rn0038rp5Owx/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:36 2026 by rpki-client