Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json)
Hash identifier: ZOB5oVGXlVeu7CHRpiFfTDN2Bpz4AXuC6kDbr6+rO90=
Subject key identifier: 07:36:62:80:44:E2:A4:BE:12:89:85:C0:26:6A:14:AD:80:9F:8C:F7
Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Certificate serial: 019D2AE1183623BBC26ACE70242666057BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 16:01:27 +0000
Manifest this update: Thu 26 Mar 2026 16:01:27 +0000
Manifest next update: Fri 27 Mar 2026 16:01:27 +0000
Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: V4YIIRHYIXB1eK+h7E/b1OdYsB+8/ccnd76j6bwFhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:18:36:23:bb:c2:6a:ce:70:24:26:66:05:7b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Validity
Not Before: Mar 26 16:01:27 2026 GMT
Not After : Mar 27 16:01:27 2026 GMT
Subject: CN=0736628044e2a4be128985c0266a14ad809f8cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:0d:fe:dc:8a:ab:0f:e2:70:a9:90:03:83:
fb:12:6e:20:03:a8:12:0a:20:ef:fe:47:3a:a9:c7:
50:eb:aa:7e:e9:cc:ad:70:01:55:c0:12:a8:4c:0c:
bb:e9:5a:65:5c:4c:e4:12:9a:b1:f3:3a:85:41:d8:
6b:09:6c:ad:52:0e:d2:75:7a:c0:b8:80:3b:74:26:
a6:5b:29:af:1e:2b:0b:e4:8d:b8:5f:48:1c:da:b5:
1b:0d:26:c5:56:e6:17:b6:3a:c6:f4:41:c4:32:e2:
d3:a6:4e:a9:b4:49:97:73:9b:51:ea:c8:2a:f4:42:
1f:c2:51:4f:97:6c:09:05:d7:03:83:1c:c7:0f:a0:
30:5d:8b:8e:04:ab:8f:6e:c9:09:21:51:44:44:4f:
5b:35:cb:08:7f:c2:ec:5c:9f:82:44:8a:b6:c9:a5:
f6:97:ca:ce:23:24:ea:35:b4:a4:07:91:99:4e:21:
49:60:29:5e:5b:53:f7:05:f8:95:b2:b5:78:74:5e:
c3:ac:22:ec:80:ce:52:9d:6d:ab:e1:61:8c:29:1f:
c7:96:b3:ed:41:11:44:0b:eb:a4:a0:e4:78:8f:6c:
81:82:c1:47:ca:9d:eb:43:54:a3:4e:1d:f6:b2:49:
86:c2:b4:d1:1e:d9:a0:ae:8a:0c:cb:6a:98:d2:cb:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:62:80:44:E2:A4:BE:12:89:85:C0:26:6A:14:AD:80:9F:8C:F7
X509v3 Authority Key Identifier:
keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:20:54:d5:36:4b:11:b1:28:a9:51:ad:1a:af:34:3f:0e:76:
38:2c:86:21:db:99:22:8e:a9:6d:5a:f7:29:d7:78:01:26:6d:
af:65:6e:89:9f:f6:d2:58:21:23:bd:f9:30:fe:c2:3e:57:b0:
fc:1b:bf:e2:83:99:89:93:ee:24:7d:55:11:e7:0a:4a:13:a6:
f3:e6:d4:98:15:ab:e8:44:d8:88:0f:fb:31:f3:cb:97:62:eb:
53:ff:7a:fc:44:07:a7:70:6f:d2:7e:bf:77:10:09:c8:fe:ee:
3e:77:10:b4:7a:55:98:02:82:5b:09:5f:f1:e2:9b:88:84:9c:
5a:8a:02:07:99:b0:ab:0e:6c:90:dd:42:60:c6:73:ee:60:84:
39:cc:07:89:bf:7e:af:40:7b:db:d5:29:75:27:30:9c:b7:1a:
3d:00:bf:f8:44:61:c6:b3:1f:7c:1d:99:78:95:e3:b0:7d:36:
f9:b4:89:c6:1b:7b:ea:75:0b:c4:5d:b4:10:5a:44:de:9c:b0:
e5:a4:cb:7f:a3:01:0c:74:a1:9b:83:6e:89:09:7a:f0:0f:1d:
61:63:2f:d8:da:41:a4:d1:10:a5:be:c5:33:79:0a:7c:05:5e:
58:c4:ce:8e:4a:0e:60:a5:bf:63:1f:3a:03:73:bf:fb:45:61:
30:49:9b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Rg2I7vCas5wJCZmBXvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjhmN2RkYzg5NTk2NGUyM2M4NTYzZmUxYTkwMGFkOTcx
YmYwNDQwHhcNMjYwMzI2MTYwMTI3WhcNMjYwMzI3MTYwMTI3WjAzMTEwLwYDVQQD
EygwNzM2NjI4MDQ0ZTJhNGJlMTI4OTg1YzAyNjZhMTRhZDgwOWY4Y2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuYN/tyKqw/icKmQA4P7Em4gA6gS
CiDv/kc6qcdQ66p+6cytcAFVwBKoTAy76VplXEzkEpqx8zqFQdhrCWytUg7SdXrA
uIA7dCamWymvHisL5I24X0gc2rUbDSbFVuYXtjrG9EHEMuLTpk6ptEmXc5tR6sgq
9EIfwlFPl2wJBdcDgxzHD6AwXYuOBKuPbskJIVFERE9bNcsIf8LsXJ+CRIq2yaX2
l8rOIyTqNbSkB5GZTiFJYCleW1P3BfiVsrV4dF7DrCLsgM5SnW2r4WGMKR/HlrPt
QRFEC+ukoOR4j2yBgsFHyp3rQ1SjTh32skmGwrTRHtmgrooMy2qY0su0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc2YoBE4qS+EomFwCZqFK2An4z3MB8GA1UdIwQY
MBaAFBAo993IlZZOI8hWP+GpAK2XG/BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAt
ZmM1NDAzNjVlZmY3LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAtZmM1NDAzNjVlZmY3
LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViBU1TZL
EbEoqVGtGq80Pw52OCyGIduZIo6pbVr3Kdd4ASZtr2VuiZ/20lghI735MP7CPlew
/Bu/4oOZiZPuJH1VEecKShOm8+bUmBWr6ETYiA/7MfPLl2LrU/96/EQHp3Bv0n6/
dxAJyP7uPncQtHpVmAKCWwlf8eKbiIScWooCB5mwqw5skN1CYMZz7mCEOcwHib9+
r0B729UpdScwnLcaPQC/+ERhxrMffB2ZeJXjsH02+bSJxht76nULxF20EFpE3pyw
5aTLf6MBDHShm4NuiQl68A8dYWMv2NpBpNEQpb7FM3kKfAVeWMTOjkoOYKW/Yx86
A3O/+0VhMEmb2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:22 2026 by rpki-client