Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: 9DVPznG/lEYhD/LgTgVboA8oHTX2iPk9H8skeWhwQNU=
Subject key identifier: 79:75:5E:D6:64:B4:98:56:5F:AC:41:15:75:B2:BC:9E:0C:91:0D:19
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 019D333E5B77FE40F002BC9C0DF3547D12AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 55
Signing time: Sat 28 Mar 2026 07:00:17 +0000
Manifest this update: Sat 28 Mar 2026 07:00:17 +0000
Manifest next update: Sun 29 Mar 2026 07:00:17 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: JHvprDWH5u1x9JLS2iwv8UqzEtQvQxehHlKgTQGYTZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:5b:77:fe:40:f0:02:bc:9c:0d:f3:54:7d:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Mar 28 07:00:17 2026 GMT
Not After : Mar 29 07:00:17 2026 GMT
Subject: CN=79755ed664b498565fac411575b2bc9e0c910d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1c:97:69:d6:45:37:d7:70:6f:dd:5c:d4:6d:
52:58:28:8d:66:fa:b5:b4:5f:37:48:cf:b9:54:42:
e6:f3:84:7d:8e:da:8c:38:15:73:12:93:4b:7c:7a:
af:08:ed:d8:ec:5d:8b:ee:10:21:44:b0:04:f6:0c:
91:95:f3:e8:40:5b:32:78:f0:b2:88:3c:70:7b:41:
2a:4f:21:c4:0b:98:b4:bd:ad:6e:a3:26:2a:da:68:
88:cc:58:9b:5f:d2:ac:31:09:e5:8e:c0:de:64:60:
28:51:11:d0:0b:d1:08:92:77:fc:06:2c:06:1f:18:
c5:a3:54:84:33:1c:28:b8:9e:ae:59:27:4e:2a:55:
85:03:3f:00:b1:19:4c:78:32:e9:6a:bc:f3:24:60:
0d:3e:76:35:6f:c5:11:8d:f9:c1:27:60:35:74:52:
ed:d7:9b:49:bc:1d:8d:f3:32:83:e3:79:44:eb:53:
ae:eb:3c:5f:3b:a0:d5:fa:a9:16:dc:51:6a:3a:4d:
2b:8b:73:f3:65:89:e6:5d:db:95:94:01:70:72:2f:
3d:c7:4f:0a:a0:13:85:e5:29:55:c4:e6:55:54:4e:
76:fb:c1:5b:0d:a6:67:d9:f1:a4:e2:10:50:91:28:
07:83:ea:e7:c4:c1:3d:e7:84:dc:07:c3:d3:53:f2:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:5E:D6:64:B4:98:56:5F:AC:41:15:75:B2:BC:9E:0C:91:0D:19
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c4:2b:9d:49:02:cc:10:62:a9:1c:96:d7:6f:d2:f7:57:fa:
b2:16:1b:0e:72:70:93:fb:8c:5e:60:7d:f7:f2:7c:27:85:58:
b3:50:a1:89:35:de:26:ef:aa:cd:19:a2:08:fc:c1:64:97:88:
98:b9:8a:dc:35:fa:e8:a0:6a:6d:36:3d:ca:e0:07:f8:89:9c:
e8:5f:6e:18:f8:f0:f9:8b:34:4f:02:a6:92:4d:cb:3e:a1:f8:
37:03:a4:3e:19:5c:a8:cb:b4:8c:ee:35:50:9c:6b:46:56:6e:
c2:5b:98:01:51:8c:1d:71:4c:d6:ce:f9:8e:a2:2b:ea:5a:c6:
a3:8a:18:3d:4f:f9:f0:44:ba:ed:07:64:4a:e7:95:ff:77:3d:
d6:60:ec:07:79:47:c0:ca:da:8a:52:55:c9:5b:7e:58:ff:7c:
eb:ca:ac:bb:26:9c:5f:16:bb:8a:13:69:6b:a2:b9:cd:72:91:
b5:7b:2f:da:4d:67:90:5b:67:c8:35:3a:ac:1e:33:7c:f0:55:
6b:1d:ea:f2:07:12:8b:96:80:6a:ce:1f:99:76:b7:0c:e0:b2:
78:e8:4d:5c:24:58:ae:bb:0b:64:e7:8c:3b:17:81:7d:ab:f4:
fc:fb:1a:c3:eb:36:b9:96:df:99:9a:b1:d9:41:d9:ff:15:14:
eb:da:8e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPlt3/kDwArycDfNUfRKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzBlMWJjOGVlZGQ5NDc4NjEwYjFhZmYwOTMwZjQwMzQ3
NTI2ZTUwHhcNMjYwMzI4MDcwMDE3WhcNMjYwMzI5MDcwMDE3WjAzMTEwLwYDVQQD
Eyg3OTc1NWVkNjY0YjQ5ODU2NWZhYzQxMTU3NWIyYmM5ZTBjOTEwZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xyXadZFN9dwb91c1G1SWCiNZvq1
tF83SM+5VELm84R9jtqMOBVzEpNLfHqvCO3Y7F2L7hAhRLAE9gyRlfPoQFsyePCy
iDxwe0EqTyHEC5i0va1uoyYq2miIzFibX9KsMQnljsDeZGAoURHQC9EIknf8BiwG
HxjFo1SEMxwouJ6uWSdOKlWFAz8AsRlMeDLparzzJGANPnY1b8URjfnBJ2A1dFLt
15tJvB2N8zKD43lE61Ou6zxfO6DV+qkW3FFqOk0ri3PzZYnmXduVlAFwci89x08K
oBOF5SlVxOZVVE52+8FbDaZn2fGk4hBQkSgHg+rnxME954TcB8PTU/KepQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl1XtZktJhWX6xBFXWyvJ4MkQ0ZMB8GA1UdIwQY
MBaAFEpw4byO7dlHhhCxr/CTD0A0dSblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUt
YWE5Yjg3M2Q3Zjk2LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUtYWE5Yjg3M2Q3Zjk2
LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8QrnUkC
zBBiqRyW12/S91f6shYbDnJwk/uMXmB99/J8J4VYs1ChiTXeJu+qzRmiCPzBZJeI
mLmK3DX66KBqbTY9yuAH+Imc6F9uGPjw+Ys0TwKmkk3LPqH4NwOkPhlcqMu0jO41
UJxrRlZuwluYAVGMHXFM1s75jqIr6lrGo4oYPU/58ES67QdkSueV/3c91mDsB3lH
wMrailJVyVt+WP9868qsuyacXxa7ihNpa6K5zXKRtXsv2k1nkFtnyDU6rB4zfPBV
ax3q8gcSi5aAas4fmXa3DOCyeOhNXCRYrrsLZOeMOxeBfav0/Psaw+s2uZbfmZqx
2UHZ/xUU69qO3Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:55 2026 by rpki-client