Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: hS+jOD49OYOF3FIdPeAsOuieJs6g7P2I3UkhX3Lw6DQ=
Subject key identifier: B2:2E:04:2F:D2:F5:5C:68:A2:78:A5:F0:C8:F3:33:E4:22:57:8D:28
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 019F90FE775BE966FCA97CDF0D5122701330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 16FE
Signing time: Thu 23 Jul 2026 22:00:23 +0000
Manifest this update: Thu 23 Jul 2026 22:00:23 +0000
Manifest next update: Fri 24 Jul 2026 22:00:23 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: Dl3MVdhRsTdrTmOb1ajpdkywO0myNmG0oUHOmB+nRZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:77:5b:e9:66:fc:a9:7c:df:0d:51:22:70:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Jul 23 22:00:23 2026 GMT
Not After : Jul 24 22:00:23 2026 GMT
Subject: CN=b22e042fd2f55c68a278a5f0c8f333e422578d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:f3:6f:8c:b9:a0:b2:9e:dd:54:92:39:e6:
a6:28:fc:ce:10:94:ec:b7:a7:f9:27:10:03:0d:d5:
0b:3e:c1:e3:2a:e4:88:80:7c:66:78:2e:24:02:24:
05:e7:7b:eb:9d:58:0e:69:f9:37:9f:cf:29:98:19:
ed:44:a6:29:47:42:85:b7:28:f7:d1:a3:95:f0:21:
e2:f0:8e:ce:d7:f5:02:f6:8e:10:c7:c5:a2:f4:2e:
7d:80:43:7d:a9:c2:12:d5:4c:33:32:51:da:09:19:
f9:73:11:95:ec:36:4a:58:70:69:9e:4a:30:f1:b8:
98:97:af:c5:14:69:73:21:66:a7:6a:2f:15:a8:eb:
04:2f:af:b4:c3:f2:43:b9:79:bc:ce:cc:0f:c9:dc:
35:64:56:9b:c2:62:ee:90:c3:06:93:a1:a8:97:b6:
40:38:d5:d6:87:07:e4:29:48:d2:59:84:36:d7:f6:
3a:a4:d6:73:1b:ef:56:15:1e:1e:36:00:3b:71:88:
28:ed:37:c9:2d:6e:65:7c:6d:04:f5:f4:67:cd:f1:
41:e6:11:f4:8d:32:85:30:77:b4:2f:8c:f6:a2:47:
c3:13:6c:a2:49:72:06:8b:da:ab:53:33:a7:a4:0e:
eb:56:28:e9:a9:f5:bb:0b:42:f7:0b:c1:10:f7:a3:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:04:2F:D2:F5:5C:68:A2:78:A5:F0:C8:F3:33:E4:22:57:8D:28
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:64:b9:a6:bc:00:14:c6:6c:45:1c:ba:aa:70:27:9e:e0:2d:
f0:e3:0a:c1:61:3b:04:46:cb:78:68:01:8b:d8:d6:24:84:79:
9f:76:0b:8f:d0:5b:ca:7b:85:6e:a9:f1:ac:a4:82:19:20:4a:
3e:4a:6e:06:65:0c:57:ad:d3:3d:9e:6b:8a:e7:a7:0a:7c:13:
41:cc:d6:d6:47:8d:16:64:da:21:6a:e2:86:fd:c8:a9:b4:90:
d5:2d:55:3d:dc:bb:6b:d5:08:d6:79:4c:6c:e0:0d:a9:91:5d:
2f:3a:ed:20:f9:6a:fd:33:f6:a8:e2:10:10:d5:68:87:56:e6:
fc:c4:b7:09:c2:d9:ce:ae:90:1a:c7:06:46:9e:86:48:b9:03:
99:8f:ff:49:29:59:cf:11:8b:03:73:e5:38:54:6d:39:43:4c:
cb:7b:5b:df:05:1b:37:63:f1:c7:af:c2:a9:ef:f4:40:a1:d5:
43:73:98:8a:ce:a5:f0:ca:39:30:34:30:8b:aa:1b:b0:42:bf:
db:b7:64:92:49:58:66:a9:58:ea:19:af:7b:35:60:47:6f:a3:
85:71:eb:4d:a2:f9:db:38:58:23:c6:fb:29:91:ad:4a:00:36:
a5:1a:90:3a:3d:20:e4:c7:34:5f:b6:67:98:e3:85:29:44:70:
cb:41:ee:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/ndb6Wb8qXzfDVEicBMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWMwNTcwYjNiNzc3M2QxZTExODgyZTdkZDJjNjI1NTM3
ZWIwOWMwHhcNMjYwNzIzMjIwMDIzWhcNMjYwNzI0MjIwMDIzWjAzMTEwLwYDVQQD
EyhiMjJlMDQyZmQyZjU1YzY4YTI3OGE1ZjBjOGYzMzNlNDIyNTc4ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurjzb4y5oLKe3VSSOeamKPzOEJTs
t6f5JxADDdULPsHjKuSIgHxmeC4kAiQF53vrnVgOafk3n88pmBntRKYpR0KFtyj3
0aOV8CHi8I7O1/UC9o4Qx8Wi9C59gEN9qcIS1UwzMlHaCRn5cxGV7DZKWHBpnkow
8biYl6/FFGlzIWanai8VqOsEL6+0w/JDuXm8zswPydw1ZFabwmLukMMGk6Gol7ZA
ONXWhwfkKUjSWYQ21/Y6pNZzG+9WFR4eNgA7cYgo7TfJLW5lfG0E9fRnzfFB5hH0
jTKFMHe0L4z2okfDE2yiSXIGi9qrUzOnpA7rVijpqfW7C0L3C8EQ96OltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIuBC/S9Vxoonil8MjzM+QiV40oMB8GA1UdIwQY
MBaAFONcBXCzt3c9HhGILn3SxiVTfrCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDct
ZjY5MTI4YTkxOTgzLzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDctZjY5MTI4YTkxOTgz
LzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmS5prwA
FMZsRRy6qnAnnuAt8OMKwWE7BEbLeGgBi9jWJIR5n3YLj9BbynuFbqnxrKSCGSBK
PkpuBmUMV63TPZ5riuenCnwTQczW1keNFmTaIWrihv3IqbSQ1S1VPdy7a9UI1nlM
bOANqZFdLzrtIPlq/TP2qOIQENVoh1bm/MS3CcLZzq6QGscGRp6GSLkDmY//SSlZ
zxGLA3PlOFRtOUNMy3tb3wUbN2Pxx6/Cqe/0QKHVQ3OYis6l8Mo5MDQwi6obsEK/
27dkkklYZqlY6hmvezVgR2+jhXHrTaL52zhYI8b7KZGtSgA2pRqQOj0g5Mc0X7Zn
mOOFKURwy0HuoA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:10 2026 by rpki-client