Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: /DA1nMvSfmLB/8DMWRv/Jwk7NfTl5LpEKxkkUTgnrjw=
Subject key identifier: F6:78:2E:F4:A9:45:9E:E0:F0:91:1A:0D:9D:CE:FB:B1:E5:C8:6F:F7
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 019D31F54B57BABB19791CD4E4E45700C6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 1337
Signing time: Sat 28 Mar 2026 01:00:52 +0000
Manifest this update: Sat 28 Mar 2026 01:00:52 +0000
Manifest next update: Sun 29 Mar 2026 01:00:52 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: /gKDTZrnWKikrR9+bQwRWLPY9sWzZG78xZ9AgqMVhtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:4b:57:ba:bb:19:79:1c:d4:e4:e4:57:00:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Mar 28 01:00:52 2026 GMT
Not After : Mar 29 01:00:52 2026 GMT
Subject: CN=f6782ef4a9459ee0f0911a0d9dcefbb1e5c86ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:58:10:c6:bf:b6:e8:b8:89:99:b9:2f:d5:
48:71:c5:73:2a:39:a9:4a:87:33:f1:ec:3b:2e:24:
f6:56:a7:38:49:dc:71:97:74:26:d1:62:29:66:42:
67:e5:d9:20:e9:87:1d:fd:b0:65:b8:f2:a7:ed:8b:
b6:23:45:d4:52:9c:fa:2d:0b:17:65:b7:c7:56:06:
6e:93:f7:f2:db:70:7c:a0:3b:03:45:9b:71:ef:8c:
de:c7:55:a9:ca:c0:33:77:fa:4c:be:6c:68:fc:af:
23:3f:ae:63:1d:1d:ad:28:02:b9:0c:98:f7:49:75:
65:5d:8a:39:3d:ae:c3:53:41:9e:a6:2b:c8:d0:4f:
25:1c:d3:1f:3c:09:83:68:57:c4:d6:63:43:65:82:
35:87:79:9f:da:33:f7:f9:30:1e:9e:84:08:d4:db:
16:78:33:99:18:9b:07:a0:4c:4d:2a:50:a3:4c:04:
65:86:cb:77:01:aa:65:d0:e8:75:b7:a0:52:7b:e4:
04:f6:b7:4c:58:ca:64:c3:dd:37:e4:36:91:d0:e3:
f0:4d:ec:68:ff:47:8a:f3:12:e8:7c:e8:56:ad:19:
3e:c1:21:ee:d7:43:ac:3c:47:26:06:44:80:7a:3c:
aa:a9:f3:7c:82:27:df:63:30:d1:3f:6f:87:60:9b:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:2E:F4:A9:45:9E:E0:F0:91:1A:0D:9D:CE:FB:B1:E5:C8:6F:F7
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:ca:2e:cb:d6:81:ff:33:1f:a4:88:f6:2f:54:99:82:92:
af:81:0e:71:37:de:fd:94:3e:59:15:cc:54:72:4e:ae:81:f5:
81:ab:fa:e1:58:39:7f:5d:66:15:1e:fa:a0:e1:77:3f:12:86:
ed:9a:71:de:8a:a0:03:ad:43:1f:30:01:27:46:4a:4e:f3:ec:
ea:86:73:15:04:c9:54:c3:a0:61:ad:3f:49:1d:05:cd:e4:7a:
ca:cd:e2:d6:df:7a:fd:8e:6d:9d:e3:bb:cb:87:f7:7a:9a:37:
b0:c4:af:b1:03:06:5e:35:58:b4:96:fd:2e:25:ca:77:ff:01:
88:62:62:93:85:8c:6d:8e:92:2d:e2:36:aa:5d:88:db:b9:99:
a6:c0:25:f6:d3:91:b7:5a:3b:b0:f4:b3:65:f6:97:a3:fc:f2:
15:e4:57:27:9e:65:f2:41:c6:8e:21:cb:a4:d5:cf:ad:41:e1:
71:c8:29:f7:25:46:60:63:a2:08:9f:20:60:4c:77:54:c3:f0:
f4:6c:bd:ad:84:b8:e2:51:14:9f:1c:9d:3f:be:b1:44:c2:db:
5c:b1:8b:c7:7e:d1:4d:33:19:81:15:26:64:3c:87:6a:5b:02:
60:6c:5d:b8:d7:30:98:b0:c1:48:b3:3a:29:ad:f3:f5:53:0b:
d7:9e:d9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9UtXursZeRzU5ORXAMaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjUwNDFkYzM3MTgwZWUyYTBmOWZkZDVmNWQ2NWNkNmM2
Y2RmMDQwHhcNMjYwMzI4MDEwMDUyWhcNMjYwMzI5MDEwMDUyWjAzMTEwLwYDVQQD
EyhmNjc4MmVmNGE5NDU5ZWUwZjA5MTFhMGQ5ZGNlZmJiMWU1Yzg2ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDRYEMa/tui4iZm5L9VIccVzKjmp
Socz8ew7LiT2Vqc4Sdxxl3Qm0WIpZkJn5dkg6Ycd/bBluPKn7Yu2I0XUUpz6LQsX
ZbfHVgZuk/fy23B8oDsDRZtx74zex1WpysAzd/pMvmxo/K8jP65jHR2tKAK5DJj3
SXVlXYo5Pa7DU0GepivI0E8lHNMfPAmDaFfE1mNDZYI1h3mf2jP3+TAenoQI1NsW
eDOZGJsHoExNKlCjTARlhst3Aapl0Oh1t6BSe+QE9rdMWMpkw9035DaR0OPwTexo
/0eK8xLofOhWrRk+wSHu10OsPEcmBkSAejyqqfN8giffYzDRP2+HYJsfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ4LvSpRZ7g8JEaDZ3O+7HlyG/3MB8GA1UdIwQY
MBaAFHq1BB3DcYDuKg+f3V9dZc1sbN8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQt
M2RjZmZiNTQwYmJkLzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQtM2RjZmZiNTQwYmJk
LzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbc/KLsvW
gf8zH6SI9i9UmYKSr4EOcTfe/ZQ+WRXMVHJOroH1gav64Vg5f11mFR76oOF3PxKG
7Zpx3oqgA61DHzABJ0ZKTvPs6oZzFQTJVMOgYa0/SR0FzeR6ys3i1t96/Y5tneO7
y4f3epo3sMSvsQMGXjVYtJb9LiXKd/8BiGJik4WMbY6SLeI2ql2I27mZpsAl9tOR
t1o7sPSzZfaXo/zyFeRXJ55l8kHGjiHLpNXPrUHhccgp9yVGYGOiCJ8gYEx3VMPw
9Gy9rYS44lEUnxydP76xRMLbXLGLx37RTTMZgRUmZDyHalsCYGxduNcwmLDBSLM6
Ka3z9VML157Zwg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:01 2026 by rpki-client