Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: F3pbk/A4kFLhyhxNq8krOiXxvUih+56GkzIfWNitaT0=
Subject key identifier: 72:DA:D0:78:15:E1:EC:16:74:63:1E:89:91:AE:F3:4A:31:59:FF:E8
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019D277223D01B0FD6C87B4E4522E4C311CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0C36
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: 6wGRU4VJJCp7VUp67ApradLeXH38044d0xVy/KNqoTM=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:23:d0:1b:0f:d6:c8:7b:4e:45:22:e4:c3:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=72dad07815e1ec1674631e8991aef34a3159ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:a5:d3:5c:c5:66:6d:57:b2:01:c2:69:bb:
4f:74:70:a1:af:5e:e3:94:31:f0:f9:92:65:84:25:
b0:38:52:de:97:47:ab:9b:3e:81:3c:7e:f5:dd:94:
4d:42:83:fe:98:e9:04:5b:91:22:87:87:4f:04:e3:
c4:ec:40:28:da:65:5c:71:e7:e6:3a:f0:9e:dd:8e:
5e:aa:03:88:17:94:cd:31:58:3e:96:59:6f:3f:7d:
78:e4:77:d2:2b:fb:f6:8a:00:a1:8c:8f:ae:2e:8c:
b1:e1:98:f0:d5:10:89:fe:0d:16:de:a8:07:02:8e:
5d:65:c8:35:95:dc:56:c7:b0:fc:80:d8:51:f2:39:
14:be:1f:e4:b2:7b:89:ff:e5:fd:7f:d0:1e:18:a3:
dd:a8:a9:25:0a:8d:c9:fb:92:67:52:49:ce:b0:20:
bb:c3:41:77:d5:30:23:cb:32:d2:66:af:52:8f:e9:
74:f6:f4:db:d2:ca:a0:2c:14:9f:e3:34:29:65:0d:
57:8a:4a:fd:cb:f6:46:b5:1c:5f:a5:33:23:e9:14:
9c:02:4c:64:98:77:da:4b:1d:89:f9:23:6c:02:89:
80:23:b5:2e:74:7a:78:19:32:89:bd:aa:03:f9:49:
f5:8b:50:52:f9:6d:af:ab:3f:08:1f:aa:1f:16:d5:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:D0:78:15:E1:EC:16:74:63:1E:89:91:AE:F3:4A:31:59:FF:E8
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:50:19:b2:cb:bb:55:0c:d9:d4:a3:41:06:c9:37:b4:1a:82:
d3:b7:e5:fe:c1:bc:a9:0d:6e:89:86:cb:31:c7:ce:18:4e:26:
32:03:7f:fd:c6:72:d0:c0:17:d0:92:66:82:9b:ed:62:74:cf:
2a:f8:09:e5:8b:46:5e:64:6d:ab:c3:df:92:0c:10:83:98:6b:
24:21:97:e6:78:c2:12:99:c0:f1:38:e0:e3:b2:21:60:4a:db:
18:ea:9c:c5:82:aa:78:a8:59:2a:90:88:51:a8:23:45:4f:73:
f4:16:41:1a:ed:a4:20:2e:67:a2:29:08:ac:b3:b9:68:ed:c7:
55:83:3d:c6:ed:85:35:4e:ba:54:27:9a:cf:e7:4d:c1:e2:38:
c1:fa:c8:53:ee:95:8a:9c:2b:23:b8:8b:8e:d4:96:41:77:43:
01:db:79:a1:96:3f:f7:1d:23:0a:d6:90:28:02:83:26:70:66:
17:6c:40:4b:b8:65:f4:ad:e8:c9:d5:e0:9c:b9:ea:60:a2:7b:
61:88:55:ba:60:90:2b:1f:c0:65:dd:ac:3e:75:de:25:6e:74:
91:0c:63:dc:ce:9a:d1:0c:19:00:ad:85:0b:ed:0a:32:93:9f:
d5:60:4b:b6:ef:b5:9a:8c:da:e5:cd:5f:aa:9d:0c:60:7b:82:
d2:37:3b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciPQGw/WyHtORSLkwxHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm
YjliMDUwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
Eyg3MmRhZDA3ODE1ZTFlYzE2NzQ2MzFlODk5MWFlZjM0YTMxNTlmZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA422l01zFZm1XsgHCabtPdHChr17j
lDHw+ZJlhCWwOFLel0ermz6BPH713ZRNQoP+mOkEW5Eih4dPBOPE7EAo2mVccefm
OvCe3Y5eqgOIF5TNMVg+lllvP3145HfSK/v2igChjI+uLoyx4Zjw1RCJ/g0W3qgH
Ao5dZcg1ldxWx7D8gNhR8jkUvh/ksnuJ/+X9f9AeGKPdqKklCo3J+5JnUknOsCC7
w0F31TAjyzLSZq9Sj+l09vTb0sqgLBSf4zQpZQ1Xikr9y/ZGtRxfpTMj6RScAkxk
mHfaSx2J+SNsAomAI7UudHp4GTKJvaoD+Un1i1BS+W2vqz8IH6ofFtU2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLa0HgV4ewWdGMeiZGu80oxWf/oMB8GA1UdIwQY
MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt
NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk
LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1AZssu7
VQzZ1KNBBsk3tBqC07fl/sG8qQ1uiYbLMcfOGE4mMgN//cZy0MAX0JJmgpvtYnTP
KvgJ5YtGXmRtq8PfkgwQg5hrJCGX5njCEpnA8Tjg47IhYErbGOqcxYKqeKhZKpCI
UagjRU9z9BZBGu2kIC5noikIrLO5aO3HVYM9xu2FNU66VCeaz+dNweI4wfrIU+6V
ipwrI7iLjtSWQXdDAdt5oZY/9x0jCtaQKAKDJnBmF2xAS7hl9K3oydXgnLnqYKJ7
YYhVumCQKx/AZd2sPnXeJW50kQxj3M6a0QwZAK2FC+0KMpOf1WBLtu+1moza5c1f
qp0MYHuC0jc7OQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:53 2026 by rpki-client