Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: wAedWJYmbJomRBWxD0hPIYA1YOyGMOXhM87c/vOZYA8=
Subject key identifier: 55:0B:91:ED:8A:7B:38:E4:E1:0E:72:07:36:FD:3C:56:F9:DA:CE:D7
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 019D254C8714E57A60F10893CBC91093CD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 03A2
Signing time: Wed 25 Mar 2026 14:01:05 +0000
Manifest this update: Wed 25 Mar 2026 14:01:05 +0000
Manifest next update: Thu 26 Mar 2026 14:01:05 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: DKOTkxkS/i06/UNnYNa7cHnzhKqLLjeFg6PhdVsna40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:87:14:e5:7a:60:f1:08:93:cb:c9:10:93:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Mar 25 14:01:05 2026 GMT
Not After : Mar 26 14:01:05 2026 GMT
Subject: CN=550b91ed8a7b38e4e10e720736fd3c56f9daced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:0c:0e:22:b3:1b:62:12:03:ff:96:05:30:
5f:c8:c7:a6:09:39:d8:69:17:cd:ed:a2:ae:90:74:
27:db:ee:dd:16:d3:2a:f3:3a:c8:97:d3:0d:06:1c:
2b:44:72:58:37:ac:73:b1:d5:0c:5e:ee:13:5d:32:
cc:99:72:ae:58:95:ba:7d:3a:35:63:a0:ed:f9:e5:
59:6d:6d:d6:9c:75:c5:0a:12:0b:10:38:a5:0a:47:
b1:c0:c3:dd:42:51:39:f5:b1:49:6c:f3:13:74:cc:
6b:aa:75:54:5a:9a:e9:57:12:0d:90:d5:f0:3f:d4:
69:a0:20:24:d3:d4:62:24:24:74:43:3e:36:30:af:
ed:2f:91:40:47:7a:60:e3:4b:d9:9f:93:1e:f1:22:
c6:97:6f:76:74:e4:00:f0:cc:e8:44:5f:33:81:cb:
28:24:01:df:69:c7:5f:2a:1d:95:e1:88:80:06:0b:
7d:6f:b0:f7:8a:b7:01:dd:c7:16:4f:b9:1d:5a:ec:
6e:aa:69:66:a7:15:03:37:d4:a3:81:c0:36:5a:63:
1b:8f:25:f8:47:a4:c7:12:96:a6:62:39:a3:bb:df:
31:73:f7:c7:1e:58:e9:2c:68:f0:19:f6:57:5d:ed:
1e:35:bc:04:1d:7a:10:8d:57:54:be:2a:62:9b:83:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:91:ED:8A:7B:38:E4:E1:0E:72:07:36:FD:3C:56:F9:DA:CE:D7
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:4b:cb:0e:fb:78:1d:7b:f8:32:24:d5:53:e4:da:82:2e:
c4:22:5a:19:32:67:75:5e:e6:53:23:5c:a2:2b:ed:6d:5d:29:
01:b7:14:7f:de:9d:0f:83:9c:c2:d9:6f:4d:43:ea:84:27:21:
ff:eb:46:fc:7f:06:ed:67:89:00:86:de:c0:7a:00:eb:a9:0e:
5d:05:90:88:83:6d:e9:96:3f:97:49:11:12:33:2c:64:73:a1:
22:a5:03:4e:ea:bc:a3:d0:8c:56:7e:45:43:29:a5:a1:f2:0f:
66:4b:9d:ce:88:62:8a:c7:d4:3e:58:df:1d:d1:53:0b:83:e5:
a4:48:03:fd:7d:46:8f:b0:ea:19:50:03:f1:67:cb:52:01:57:
b9:a3:28:e5:a2:77:3c:c9:e8:44:cc:3a:d3:7a:0f:73:1e:df:
91:9c:da:3e:ba:88:4c:9a:90:b6:14:65:51:55:9d:72:c2:ee:
79:78:6c:9a:30:41:2b:ca:0f:42:24:4d:3b:07:d6:03:b0:fd:
fd:5b:61:17:ff:ae:36:78:fa:c3:17:52:4a:67:77:07:db:8b:
16:be:10:23:90:7b:6c:34:44:8b:72:67:fc:35:8f:c4:b0:ed:
17:2a:da:8b:20:04:74:2c:90:03:1a:67:e3:7c:f2:12:dd:af:
53:6e:31:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTIcU5Xpg8QiTy8kQk80TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3
OTEyYjkwHhcNMjYwMzI1MTQwMTA1WhcNMjYwMzI2MTQwMTA1WjAzMTEwLwYDVQQD
Eyg1NTBiOTFlZDhhN2IzOGU0ZTEwZTcyMDczNmZkM2M1NmY5ZGFjZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRwMDiKzG2ISA/+WBTBfyMemCTnY
aRfN7aKukHQn2+7dFtMq8zrIl9MNBhwrRHJYN6xzsdUMXu4TXTLMmXKuWJW6fTo1
Y6Dt+eVZbW3WnHXFChILEDilCkexwMPdQlE59bFJbPMTdMxrqnVUWprpVxINkNXw
P9RpoCAk09RiJCR0Qz42MK/tL5FAR3pg40vZn5Me8SLGl292dOQA8MzoRF8zgcso
JAHfacdfKh2V4YiABgt9b7D3ircB3ccWT7kdWuxuqmlmpxUDN9SjgcA2WmMbjyX4
R6THEpamYjmju98xc/fHHljpLGjwGfZXXe0eNbwEHXoQjVdUvipim4OHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFULke2Kezjk4Q5yBzb9PFb52s7XMB8GA1UdIwQY
MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt
NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0
LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgxLyw77
eB17+DIk1VPk2oIuxCJaGTJndV7mUyNcoivtbV0pAbcUf96dD4OcwtlvTUPqhCch
/+tG/H8G7WeJAIbewHoA66kOXQWQiINt6ZY/l0kREjMsZHOhIqUDTuq8o9CMVn5F
QymlofIPZkudzohiisfUPljfHdFTC4PlpEgD/X1Gj7DqGVAD8WfLUgFXuaMo5aJ3
PMnoRMw603oPcx7fkZzaPrqITJqQthRlUVWdcsLueXhsmjBBK8oPQiRNOwfWA7D9
/VthF/+uNnj6wxdSSmd3B9uLFr4QI5B7bDREi3Jn/DWPxLDtFyraiyAEdCyQAxpn
43zyEt2vU24xIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:55 2026 by rpki-client