Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: 58NKbgOl29utPjEa6dbngPapRqvD/HW00fMxlo7DbGI=
Subject key identifier: 36:D2:9E:FA:CD:95:D0:E3:D6:85:05:6B:76:C1:0B:41:EB:D2:EF:02
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019D3262D5F2AFF8083F07E65A658007D346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 0A
Signing time: Sat 28 Mar 2026 03:00:31 +0000
Manifest this update: Sat 28 Mar 2026 03:00:31 +0000
Manifest next update: Sun 29 Mar 2026 03:00:31 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: DRY3jubiT6dfdedJdp8yxK8MuoV7Ql0M6Y1cqdlDh44=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:d5:f2:af:f8:08:3f:07:e6:5a:65:80:07:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Mar 28 03:00:31 2026 GMT
Not After : Mar 29 03:00:31 2026 GMT
Subject: CN=36d29efacd95d0e3d685056b76c10b41ebd2ef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:c9:76:c4:c4:36:0d:d3:5e:d3:fa:4d:bd:
9f:23:90:dc:90:03:68:f2:88:bd:24:29:46:4f:0f:
ee:5d:f6:18:97:9d:70:a2:81:e7:f8:cc:ec:4c:8a:
6c:a6:c3:79:eb:1c:73:f4:13:7d:2b:c5:60:ba:63:
76:30:79:41:92:d7:71:68:ff:ef:7a:c7:ed:56:07:
4c:1a:63:77:2a:28:54:68:bd:1e:8c:c1:38:a1:51:
49:d9:c9:b8:88:c6:3f:17:95:21:05:d2:19:c9:ad:
8a:3a:ad:eb:bb:02:30:fc:2f:23:14:4f:4c:a3:02:
0d:63:2d:b5:14:87:a9:95:f0:db:ed:9c:90:4e:d8:
1b:80:18:2a:08:f3:d5:4b:ce:61:08:06:1a:23:b4:
4a:e8:ac:58:24:13:78:7f:dd:c2:ab:81:27:82:eb:
e3:97:8d:a5:42:2f:fd:c7:ba:dd:4d:66:ab:20:f9:
2b:b6:48:91:68:6b:fb:d4:24:1b:33:5d:50:1e:d8:
62:91:ab:24:d0:4b:b4:d0:5d:5a:ac:48:0f:52:53:
fe:1b:55:fa:f8:dc:a6:d7:b3:c0:bc:82:eb:9d:fb:
af:dc:3d:4d:39:a1:83:25:ea:f1:1e:3e:75:83:9d:
82:79:a4:4b:62:73:71:78:13:f2:8d:3e:00:31:5c:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:9E:FA:CD:95:D0:E3:D6:85:05:6B:76:C1:0B:41:EB:D2:EF:02
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:49:40:a6:6b:de:23:55:c9:cb:da:6f:46:2d:78:86:59:aa:
c6:08:07:d0:b3:0c:06:9d:30:0a:0b:8f:33:ab:3f:d1:39:5d:
25:fe:d2:95:94:0a:16:99:a7:b3:c3:80:08:75:17:90:0d:cb:
18:ef:8e:65:71:33:e2:36:bb:b2:c9:6c:40:43:62:ad:df:39:
d8:0a:bd:86:d7:1c:d5:c9:dc:ff:e3:b6:1e:65:b4:cb:67:e1:
4c:f0:48:90:39:91:8d:f0:70:58:8b:9c:ff:a8:ce:5c:b8:00:
14:d1:15:55:d9:08:82:ff:c5:66:d1:9d:22:90:52:9b:63:cf:
04:e1:77:c5:18:7c:d9:e0:eb:77:03:f3:d4:40:56:3c:65:b9:
5a:c6:0f:82:91:30:11:d6:3c:2d:c2:8e:74:50:f4:c8:14:a1:
42:58:68:56:ad:b9:1a:09:98:bc:4e:14:97:98:00:8b:7f:de:
6b:5a:f1:37:1d:99:51:fc:06:29:1f:4d:8f:75:5b:05:83:fd:
dd:fb:c8:8e:f7:78:af:61:c1:ba:da:91:4d:12:cd:ed:2e:44:
5f:ca:ec:86:22:8a:60:b0:85:e3:f0:ad:1d:eb:50:41:72:d4:
0f:16:94:59:87:a8:2e:61:81:ff:90:98:a8:55:ba:b4:c7:d2:
15:25:2c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYtXyr/gIPwfmWmWAB9NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmUxZjU4MWNkMTFlMWQwYTJiNjkzYTUzZDNhNWI2ZmRl
ZDRkZmEwHhcNMjYwMzI4MDMwMDMxWhcNMjYwMzI5MDMwMDMxWjAzMTEwLwYDVQQD
EygzNmQyOWVmYWNkOTVkMGUzZDY4NTA1NmI3NmMxMGI0MWViZDJlZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3JdsTENg3TXtP6Tb2fI5DckANo
8oi9JClGTw/uXfYYl51wooHn+MzsTIpspsN56xxz9BN9K8VgumN2MHlBktdxaP/v
esftVgdMGmN3KihUaL0ejME4oVFJ2cm4iMY/F5UhBdIZya2KOq3ruwIw/C8jFE9M
owINYy21FIeplfDb7ZyQTtgbgBgqCPPVS85hCAYaI7RK6KxYJBN4f93Cq4Enguvj
l42lQi/9x7rdTWarIPkrtkiRaGv71CQbM11QHthikask0Eu00F1arEgPUlP+G1X6
+Nym17PAvILrnfuv3D1NOaGDJerxHj51g52CeaRLYnNxeBPyjT4AMVyrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbSnvrNldDj1oUFa3bBC0Hr0u8CMB8GA1UdIwQY
MBaAFNIuH1gc0R4dCitpOlPTpbb97U36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgt
M2ZhMTk0NjIzMTNjLzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgtM2ZhMTk0NjIzMTNj
LzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfElApmve
I1XJy9pvRi14hlmqxggH0LMMBp0wCguPM6s/0TldJf7SlZQKFpmns8OACHUXkA3L
GO+OZXEz4ja7sslsQENird852Aq9htcc1cnc/+O2HmW0y2fhTPBIkDmRjfBwWIuc
/6jOXLgAFNEVVdkIgv/FZtGdIpBSm2PPBOF3xRh82eDrdwPz1EBWPGW5WsYPgpEw
EdY8LcKOdFD0yBShQlhoVq25GgmYvE4Ul5gAi3/ea1rxNx2ZUfwGKR9Nj3VbBYP9
3fvIjvd4r2HButqRTRLN7S5EX8rshiKKYLCF4/CtHetQQXLUDxaUWYeoLmGB/5CY
qFW6tMfSFSUsQQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:30 2026 by rpki-client