Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: aOdHhJpWYsk/kuqR46h3GEIdy4/OTuiQaK9nyRWcnJI=
Subject key identifier: FC:16:C0:52:99:FA:45:2B:4C:CE:CA:38:4F:23:3C:A1:66:03:17:26
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 019D33AC92896C609CF1F884AD44E0AF8AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 1788
Signing time: Sat 28 Mar 2026 09:00:40 +0000
Manifest this update: Sat 28 Mar 2026 09:00:40 +0000
Manifest next update: Sun 29 Mar 2026 09:00:40 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: itVDhPHHpWYTmo8JnMoz3pGq6P7rQTQzBkm3/ryy3X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:92:89:6c:60:9c:f1:f8:84:ad:44:e0:af:8a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Mar 28 09:00:40 2026 GMT
Not After : Mar 29 09:00:40 2026 GMT
Subject: CN=fc16c05299fa452b4cceca384f233ca166031726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:df:43:a8:33:fc:b6:68:42:1d:02:30:e9:
c7:ae:33:dd:f7:5c:bc:88:f4:d4:cf:bb:d7:d6:22:
d6:18:68:ff:6c:f9:21:79:47:d6:4e:74:63:4a:cd:
4c:e1:43:c2:a4:1c:45:6c:1c:ca:ba:3f:ac:c5:74:
dd:4b:2d:ab:27:23:1f:fc:01:e7:e7:b0:24:4c:84:
ed:c4:5e:88:fd:68:f2:62:bc:67:23:5a:e0:3c:82:
c6:7f:f6:c9:b2:b3:f5:81:3b:3c:2a:48:20:f5:cb:
c4:95:5c:eb:31:43:0e:ff:bb:05:c2:57:90:90:cc:
7c:eb:5f:b3:3c:65:29:22:59:95:53:ee:37:9b:11:
33:66:43:5d:e4:ff:54:42:b5:04:09:79:9f:04:0f:
05:9b:6f:2b:37:3d:f1:94:81:25:72:2f:f1:b5:f1:
c0:bc:11:f3:28:44:f0:91:82:6b:09:dc:38:ed:e0:
0b:fb:6c:ce:0f:56:5e:31:56:65:b7:e8:68:e8:25:
ca:be:26:8a:5e:a5:94:e4:e7:5e:e8:55:63:26:79:
2f:fc:f9:6a:ee:8c:ff:a8:87:54:a7:3c:54:22:42:
f0:0f:2a:d1:63:94:04:67:2a:50:e4:d9:04:9f:7b:
51:3a:78:8d:60:3b:bb:35:a1:93:11:2e:e8:ea:a0:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:C0:52:99:FA:45:2B:4C:CE:CA:38:4F:23:3C:A1:66:03:17:26
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fa:61:5b:02:a3:0f:5a:d4:4d:f5:40:5b:96:80:4e:78:5f:
1f:3d:4d:32:0a:02:b5:8c:de:32:1b:12:7a:18:32:1d:34:14:
b2:7e:87:b8:73:f3:23:e5:83:3e:19:19:fd:a3:9b:ef:1d:01:
b8:d6:d2:54:da:96:31:08:fe:4f:e7:1f:ec:7b:ec:c6:56:dc:
30:f2:fc:24:19:a5:e4:bf:66:d9:1b:b4:dd:f2:cd:68:d0:89:
63:d3:b6:a4:e8:c6:3d:36:aa:90:d3:a6:14:aa:0d:2b:29:08:
6a:d7:10:c3:df:65:9b:e5:11:21:31:ad:ed:6f:a3:8a:3e:19:
b8:47:95:89:c1:f1:18:0e:75:24:e6:e3:de:5d:b2:7a:44:fa:
a1:c8:2f:0a:2d:2b:ab:43:2e:00:aa:5a:3f:b7:50:79:3f:d4:
c9:53:56:0e:f6:c0:35:e1:2c:af:c8:7d:8c:01:44:71:83:fb:
45:a1:03:8a:0f:34:ab:bb:31:11:97:57:51:f6:ba:59:bb:b6:
ec:15:bd:dc:8b:64:76:38:28:67:16:d7:e3:4e:33:3c:b2:ec:
7b:c3:e6:18:84:8e:25:81:86:a5:5a:8a:bd:f2:a4:fd:b5:4f:
31:db:50:eb:e1:70:09:a1:77:e9:75:71:04:a0:7a:bf:85:df:
8d:5b:2e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrJKJbGCc8fiErUTgr4rsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjYwMzI4MDkwMDQwWhcNMjYwMzI5MDkwMDQwWjAzMTEwLwYDVQQD
EyhmYzE2YzA1Mjk5ZmE0NTJiNGNjZWNhMzg0ZjIzM2NhMTY2MDMxNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KLfQ6gz/LZoQh0CMOnHrjPd91y8
iPTUz7vX1iLWGGj/bPkheUfWTnRjSs1M4UPCpBxFbBzKuj+sxXTdSy2rJyMf/AHn
57AkTITtxF6I/WjyYrxnI1rgPILGf/bJsrP1gTs8Kkgg9cvElVzrMUMO/7sFwleQ
kMx861+zPGUpIlmVU+43mxEzZkNd5P9UQrUECXmfBA8Fm28rNz3xlIElci/xtfHA
vBHzKETwkYJrCdw47eAL+2zOD1ZeMVZlt+ho6CXKviaKXqWU5Ode6FVjJnkv/Plq
7oz/qIdUpzxUIkLwDyrRY5QEZypQ5NkEn3tROniNYDu7NaGTES7o6qBEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwWwFKZ+kUrTM7KOE8jPKFmAxcmMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfphWwKj
D1rUTfVAW5aATnhfHz1NMgoCtYzeMhsSehgyHTQUsn6HuHPzI+WDPhkZ/aOb7x0B
uNbSVNqWMQj+T+cf7HvsxlbcMPL8JBml5L9m2Ru03fLNaNCJY9O2pOjGPTaqkNOm
FKoNKykIatcQw99lm+URITGt7W+jij4ZuEeVicHxGA51JObj3l2yekT6ocgvCi0r
q0MuAKpaP7dQeT/UyVNWDvbANeEsr8h9jAFEcYP7RaEDig80q7sxEZdXUfa6Wbu2
7BW93ItkdjgoZxbX404zPLLse8PmGISOJYGGpVqKvfKk/bVPMdtQ6+FwCaF36XVx
BKB6v4XfjVsujA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:32 2026 by rpki-client