Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: 5dH+IstEv8DoZJVSZZy94Mt8OknwJFyDvFCELwtC+Ls=
Subject key identifier: 43:B7:E6:65:0E:32:3A:9D:16:DC:AD:4C:65:25:70:B3:C0:5A:42:0C
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 019D27A88C99C1C3B24ABA8E9511BBF2DD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 1543
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: fM7chh3pBMkAWhGPjoGXkcIFHnFJfRH+2+0SXqyjJMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8c:99:c1:c3:b2:4a:ba:8e:95:11:bb:f2:dd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=43b7e6650e323a9d16dcad4c652570b3c05a420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:88:6d:3b:98:54:89:58:36:c6:9e:cd:44:
2e:a0:bf:4c:1d:a5:89:ca:a7:7d:ad:94:b1:9e:f1:
98:bf:8c:11:34:67:f4:b9:ab:1e:bd:ee:8d:30:d4:
a3:84:bc:27:20:2f:45:d4:1c:64:83:41:e7:06:5a:
b0:fc:55:ac:f8:9e:f8:46:5b:1a:85:2d:d6:68:4b:
7c:ef:6a:0c:18:b5:56:60:83:ac:86:f7:19:74:a7:
f1:f6:f3:20:27:10:f8:6e:23:36:d0:35:14:54:b5:
6d:ed:6c:a6:f4:3a:3b:01:80:bf:52:c6:68:43:d6:
fe:25:57:55:de:8d:99:0b:50:3c:81:e0:84:4c:c2:
a1:72:e6:ed:36:7e:ad:5a:54:9e:2b:8a:05:40:2b:
b2:9d:ab:98:aa:0a:c6:86:d6:24:ba:78:98:49:ec:
07:c8:06:a8:d1:71:e3:9c:38:7e:1c:06:85:32:d1:
ff:1c:96:d0:51:54:17:d0:ff:92:e8:3e:7f:ac:e4:
5d:85:26:a1:dd:39:f1:16:23:28:39:f4:2d:69:ce:
fa:6e:8c:da:f9:0f:cd:5f:cd:39:59:7a:d7:b6:b1:
22:37:51:c4:a4:ce:79:ce:83:23:0f:1f:9a:68:4f:
c7:4e:4b:2f:74:96:34:13:ee:21:86:64:a5:e6:f0:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:E6:65:0E:32:3A:9D:16:DC:AD:4C:65:25:70:B3:C0:5A:42:0C
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:02:40:46:ab:81:b8:d7:93:59:23:64:dd:5f:51:11:f2:6f:
74:24:05:87:72:2f:7a:46:16:88:3c:ae:a5:17:20:dc:95:41:
4f:5d:19:c7:39:83:80:88:07:fb:d9:64:3e:0a:3d:c3:e6:f8:
ae:13:20:f6:6c:8a:33:bf:eb:ba:e7:ba:6e:24:fe:79:46:78:
70:54:ad:7b:e8:34:21:5c:94:f8:fc:f6:98:cb:ab:5b:74:f1:
96:75:c1:94:0a:19:de:66:c3:c8:b2:db:c7:dd:0f:72:96:59:
34:2f:84:69:18:19:08:9a:29:2b:8c:9d:cc:db:cb:e2:1e:d7:
1a:85:de:7f:8c:d9:9c:1f:2d:3e:65:be:d1:3e:9b:26:3f:52:
79:82:78:37:c8:e5:2a:5a:ce:85:30:09:e2:79:95:4f:89:de:
7c:f6:5d:d1:6c:9b:b8:f4:03:37:38:5c:25:5f:05:ee:8f:b5:
f4:67:37:b0:32:a9:13:59:68:1e:0b:bd:99:52:ee:a9:b2:1e:
5b:ad:42:5a:3b:0e:78:9d:3f:99:b0:36:58:cf:a5:f7:8e:2d:
2d:44:a8:57:ed:ab:30:37:a3:40:3a:f8:17:0a:f4:4c:d7:d6:
27:a8:ff:06:88:16:63:c9:70:87:62:8f:69:0c:98:67:5d:b2:
09:e3:bb:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqIyZwcOySrqOlRG78t16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2EzODgxMTJlNjhmNGM3ZDRkODBjMzJkMzdjZmNkNmNk
MjNhNDUwHhcNMjYwMzI2MDEwMDUwWhcNMjYwMzI3MDEwMDUwWjAzMTEwLwYDVQQD
Eyg0M2I3ZTY2NTBlMzIzYTlkMTZkY2FkNGM2NTI1NzBiM2MwNWE0MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6eIbTuYVIlYNsaezUQuoL9MHaWJ
yqd9rZSxnvGYv4wRNGf0uaseve6NMNSjhLwnIC9F1Bxkg0HnBlqw/FWs+J74Rlsa
hS3WaEt872oMGLVWYIOshvcZdKfx9vMgJxD4biM20DUUVLVt7Wym9Do7AYC/UsZo
Q9b+JVdV3o2ZC1A8geCETMKhcubtNn6tWlSeK4oFQCuynauYqgrGhtYkuniYSewH
yAao0XHjnDh+HAaFMtH/HJbQUVQX0P+S6D5/rORdhSah3TnxFiMoOfQtac76boza
+Q/NX805WXrXtrEiN1HEpM55zoMjDx+aaE/HTksvdJY0E+4hhmSl5vDwLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO35mUOMjqdFtytTGUlcLPAWkIMMB8GA1UdIwQY
MBaAFEZ6OIES5o9MfU2Awy03z81s0jpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xZDc3MjctYTRkZS00YWU4LWI2YzUt
YzcxODQ1YTAxNzQ5LzEvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xZDc3MjctYTRkZS00YWU4LWI2YzUtYzcxODQ1YTAxNzQ5
LzEvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgJARquB
uNeTWSNk3V9REfJvdCQFh3IvekYWiDyupRcg3JVBT10ZxzmDgIgH+9lkPgo9w+b4
rhMg9myKM7/ruue6biT+eUZ4cFSte+g0IVyU+Pz2mMurW3TxlnXBlAoZ3mbDyLLb
x90PcpZZNC+EaRgZCJopK4ydzNvL4h7XGoXef4zZnB8tPmW+0T6bJj9SeYJ4N8jl
KlrOhTAJ4nmVT4nefPZd0WybuPQDNzhcJV8F7o+19Gc3sDKpE1loHgu9mVLuqbIe
W61CWjsOeJ0/mbA2WM+l944tLUSoV+2rMDejQDr4Fwr0TNfWJ6j/BogWY8lwh2KP
aQyYZ12yCeO7ZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:52 2026 by rpki-client