Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: Q0d4So298OYNS3k7YCkKfrhhOUgim/EcUOq1GgMkQW0=
Subject key identifier: D0:2B:1D:23:80:05:33:8D:B7:CA:0E:31:96:29:BC:17:47:A0:A7:E8
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 019D28F2A87F7AFF6A360B71630CF5675DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:01:24 +0000
Manifest this update: Thu 26 Mar 2026 07:01:24 +0000
Manifest next update: Fri 27 Mar 2026 07:01:24 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: 71vspX4FRB0VvWbZJcWfOQhQ8r68yRg4Ql0m5VdUu/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a8:7f:7a:ff:6a:36:0b:71:63:0c:f5:67:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: Mar 26 07:01:24 2026 GMT
Not After : Mar 27 07:01:24 2026 GMT
Subject: CN=d02b1d238005338db7ca0e319629bc1747a0a7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:0a:7f:ee:9f:8c:4e:67:e1:46:c9:c8:ca:
f8:24:d5:03:f7:99:01:cc:5e:9b:8e:6a:99:74:a6:
03:b5:31:5c:eb:20:36:a2:2d:db:f5:e4:f5:11:82:
94:da:23:36:b2:3e:d8:db:81:c3:de:9b:a9:4d:7f:
d8:1a:58:fb:e5:58:32:38:fd:10:73:59:9c:75:48:
79:06:e7:89:69:1a:0c:05:6e:d3:67:bd:22:bc:cb:
66:05:f3:61:9a:3b:3e:f3:ef:43:99:98:f7:6a:30:
89:71:77:85:8a:f1:89:b6:51:3f:88:65:38:e3:85:
4b:b0:28:03:62:95:b9:ca:6b:24:6e:da:83:ca:b2:
ed:49:7d:10:ff:68:8a:e2:28:ca:13:13:d3:8b:df:
0f:08:8f:2f:d4:7e:18:f3:c6:66:7c:3e:e9:10:68:
aa:0a:df:a9:82:6d:72:54:e8:d4:e8:36:02:28:2d:
64:14:9a:e3:16:22:2d:41:3e:31:91:60:51:5d:ea:
17:1d:60:5e:72:5e:89:86:b7:84:20:6f:c7:94:b0:
76:7d:30:46:d0:23:8d:67:09:03:e0:a1:56:fd:09:
8b:4e:a1:20:de:3a:22:2a:0c:59:0e:4b:fa:4c:58:
a8:0a:a8:28:fc:60:91:de:fa:89:4a:57:62:c0:06:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:1D:23:80:05:33:8D:B7:CA:0E:31:96:29:BC:17:47:A0:A7:E8
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:45:8a:ae:12:c7:a4:e5:5e:45:52:19:18:36:89:e4:11:
64:2a:a1:88:bd:93:e2:5f:f0:f7:63:42:49:08:4d:40:2e:3f:
d7:4e:7c:dd:55:86:de:25:46:d9:0a:ef:3a:68:5f:d8:f5:ac:
31:de:9e:ed:8b:a8:d4:9a:1b:ab:58:d1:5a:0a:65:67:04:5a:
ae:ed:80:2c:e1:3d:22:05:40:73:7c:6b:05:83:99:b3:61:c3:
1f:40:4f:3f:0b:ed:e2:8a:3a:07:7a:01:98:95:42:e5:0e:e5:
de:10:f1:10:c2:c2:4e:81:1c:cd:60:50:36:e0:2d:dc:8d:d4:
3c:4c:7e:6a:4f:75:bf:39:48:83:a5:53:77:5d:e4:61:fd:ac:
97:17:60:93:f3:73:61:4b:b8:f1:3b:d0:ca:9a:2d:e8:ae:55:
c6:34:de:03:6a:68:11:93:05:8a:4e:f0:f0:92:a4:57:a0:a3:
5c:b6:b8:b5:2b:a6:6f:c9:fd:71:1c:09:b3:ce:c8:f2:6c:86:
8f:32:21:cf:9b:84:ad:f5:19:92:4f:8c:f4:98:d6:2c:a6:f9:
8a:56:6e:65:41:ae:c8:3e:a1:de:b2:e9:49:2c:6b:76:26:cd:
1f:0f:38:0a:90:42:d5:67:e9:9d:f5:46:c8:6e:cc:1c:53:ba:
70:7c:92:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8qh/ev9qNgtxYwz1Z13+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDNmMDVjYTNmZGY5ZTdmOTljNjVjYzZhMGE2NzI0ZjU5
MzFhNzAwHhcNMjYwMzI2MDcwMTI0WhcNMjYwMzI3MDcwMTI0WjAzMTEwLwYDVQQD
EyhkMDJiMWQyMzgwMDUzMzhkYjdjYTBlMzE5NjI5YmMxNzQ3YTBhN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JIKf+6fjE5n4UbJyMr4JNUD95kB
zF6bjmqZdKYDtTFc6yA2oi3b9eT1EYKU2iM2sj7Y24HD3pupTX/YGlj75VgyOP0Q
c1mcdUh5BueJaRoMBW7TZ70ivMtmBfNhmjs+8+9DmZj3ajCJcXeFivGJtlE/iGU4
44VLsCgDYpW5ymskbtqDyrLtSX0Q/2iK4ijKExPTi98PCI8v1H4Y88ZmfD7pEGiq
Ct+pgm1yVOjU6DYCKC1kFJrjFiItQT4xkWBRXeoXHWBecl6JhreEIG/HlLB2fTBG
0CONZwkD4KFW/QmLTqEg3joiKgxZDkv6TFioCqgo/GCR3vqJSldiwAYWzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNArHSOABTONt8oOMZYpvBdHoKfoMB8GA1UdIwQY
MBaAFP7T8Fyj/fnn+ZxlzGoKZyT1kxpwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWIt
YWM1ZWU2MjViYWJjLzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWItYWM1ZWU2MjViYWJj
LzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1RFiq4S
x6TlXkVSGRg2ieQRZCqhiL2T4l/w92NCSQhNQC4/10583VWG3iVG2QrvOmhf2PWs
Md6e7Yuo1Jobq1jRWgplZwRaru2ALOE9IgVAc3xrBYOZs2HDH0BPPwvt4oo6B3oB
mJVC5Q7l3hDxEMLCToEczWBQNuAt3I3UPEx+ak91vzlIg6VTd13kYf2slxdgk/Nz
YUu48TvQypot6K5VxjTeA2poEZMFik7w8JKkV6CjXLa4tSumb8n9cRwJs87I8myG
jzIhz5uErfUZkk+M9JjWLKb5ilZuZUGuyD6h3rLpSSxrdibNHw84CpBC1WfpnfVG
yG7MHFO6cHyS7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:39 2026 by rpki-client