Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: tuhxJVCKLbTe0SntbQpRrwRyapWk06f/ruzwPKXQGg0=
Subject key identifier: 58:73:90:88:F5:67:49:C5:25:48:8C:B8:4F:EB:86:FF:4E:CD:09:6D
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 019D25BAF0372A752DF323B2B63590E49BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 077D
Signing time: Wed 25 Mar 2026 16:01:41 +0000
Manifest this update: Wed 25 Mar 2026 16:01:41 +0000
Manifest next update: Thu 26 Mar 2026 16:01:41 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: fT7/Qtv+tuLnW3DyDs/goj0j4ooJRQjfYeHQ4+vRSjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:f0:37:2a:75:2d:f3:23:b2:b6:35:90:e4:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Mar 25 16:01:41 2026 GMT
Not After : Mar 26 16:01:41 2026 GMT
Subject: CN=58739088f56749c525488cb84feb86ff4ecd096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:ac:8b:f1:a3:30:97:e6:33:1a:de:3c:69:
fd:ec:56:c1:86:e4:f3:c0:4f:c8:6b:75:f2:ac:50:
5e:61:ff:22:9a:83:00:e0:ea:30:c3:72:c6:9e:a0:
03:2e:31:65:7f:0c:6c:82:d8:2a:8b:36:66:98:45:
9a:c8:e2:9f:87:c8:07:85:dc:fa:aa:a3:37:e1:13:
e9:f0:9b:68:63:55:ef:6f:18:86:47:3b:06:4d:25:
3a:b6:58:65:4a:21:85:70:42:21:8f:58:67:7d:b7:
f1:fa:b1:74:4e:fd:de:01:aa:e6:9e:ec:5e:55:9f:
52:79:ee:f4:5b:54:37:c6:38:b5:87:cb:3e:8d:07:
07:c5:0f:8b:26:bd:e3:7b:1d:fd:01:a6:f5:6f:d8:
9e:c1:25:cb:04:39:20:ce:d9:98:ec:a7:a8:f2:87:
18:74:c8:b0:37:b5:45:02:d5:34:62:15:3a:77:2c:
09:8f:ec:4b:0b:28:e7:ab:3f:38:55:cb:70:14:50:
70:31:a5:d0:59:4e:39:eb:51:df:91:49:a9:22:ea:
25:8b:51:91:39:88:e9:15:d0:03:da:d2:2f:60:ca:
15:cb:96:f8:52:ca:42:e8:8c:a4:ec:24:d8:26:69:
08:58:eb:ac:94:07:03:f8:bb:e2:4a:44:61:04:41:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:90:88:F5:67:49:C5:25:48:8C:B8:4F:EB:86:FF:4E:CD:09:6D
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6c:47:60:62:6a:42:1a:99:51:3d:61:ef:b2:3e:79:3f:ed:
1e:a9:8b:b4:87:ff:6c:0e:ec:d6:6b:01:fd:78:d9:76:6a:32:
08:24:aa:6b:fe:a0:ff:a8:03:98:e7:ad:88:c1:11:0e:54:7a:
84:1e:cc:c3:0c:cf:31:6a:17:7b:90:17:ce:f4:17:55:f7:a3:
3d:82:12:26:57:92:37:dd:96:2a:eb:c2:c5:f8:2f:02:79:68:
79:a1:ad:6c:6e:ec:ca:2f:a3:97:6c:9a:92:0c:fd:01:03:da:
54:ef:7f:46:8f:7a:67:d9:00:5d:76:bf:b3:60:f7:5d:a9:3e:
dc:c4:94:35:d6:c6:23:49:27:0e:24:fb:ec:6d:b2:32:55:e2:
da:0f:26:0b:50:61:cb:18:08:fc:5e:53:2b:ff:e5:5f:4d:aa:
4e:fa:05:50:60:38:b3:92:34:8c:03:0f:39:30:01:c8:af:61:
b0:15:e7:a3:02:9a:4c:9f:30:e0:93:4c:ed:52:48:50:c2:92:
09:e3:4a:87:46:ba:dc:47:cd:98:46:16:3f:4c:aa:7b:a8:ca:
a6:0d:6d:60:7f:86:a1:25:af:c3:02:9b:d1:1b:70:ae:95:f0:
a5:a5:fe:e4:bb:9c:65:56:6a:e9:82:49:0e:43:f0:db:0a:8b:
a7:4a:29:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luvA3KnUt8yOytjWQ5JvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjYwMzI1MTYwMTQxWhcNMjYwMzI2MTYwMTQxWjAzMTEwLwYDVQQD
Eyg1ODczOTA4OGY1Njc0OWM1MjU0ODhjYjg0ZmViODZmZjRlY2QwOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd6si/GjMJfmMxrePGn97FbBhuTz
wE/Ia3XyrFBeYf8imoMA4Ooww3LGnqADLjFlfwxsgtgqizZmmEWayOKfh8gHhdz6
qqM34RPp8JtoY1XvbxiGRzsGTSU6tlhlSiGFcEIhj1hnfbfx+rF0Tv3eAarmnuxe
VZ9See70W1Q3xji1h8s+jQcHxQ+LJr3jex39Aab1b9iewSXLBDkgztmY7Keo8ocY
dMiwN7VFAtU0YhU6dywJj+xLCyjnqz84VctwFFBwMaXQWU4561HfkUmpIuoli1GR
OYjpFdAD2tIvYMoVy5b4UspC6Iyk7CTYJmkIWOuslAcD+LviSkRhBEEzhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhzkIj1Z0nFJUiMuE/rhv9OzQltMB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWxHYGJq
QhqZUT1h77I+eT/tHqmLtIf/bA7s1msB/XjZdmoyCCSqa/6g/6gDmOetiMERDlR6
hB7MwwzPMWoXe5AXzvQXVfejPYISJleSN92WKuvCxfgvAnloeaGtbG7syi+jl2ya
kgz9AQPaVO9/Ro96Z9kAXXa/s2D3Xak+3MSUNdbGI0knDiT77G2yMlXi2g8mC1Bh
yxgI/F5TK//lX02qTvoFUGA4s5I0jAMPOTAByK9hsBXnowKaTJ8w4JNM7VJIUMKS
CeNKh0a63EfNmEYWP0yqe6jKpg1tYH+GoSWvwwKb0RtwrpXwpaX+5LucZVZq6YJJ
DkPw2wqLp0oplg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:18 2026 by rpki-client