Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File: aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier: mCLGj3hck4I9+YGgbSbft+VIY6ojLcQEtiXyFfdL1XU=
Subject key identifier: 95:3C:A4:1C:AD:03:16:4C:91:A4:9A:28:09:C8:AF:B8:07:9D:48:62
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer: /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial: 019D2B84FD6E084513CE4B51CA14CB62D5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number: 12C4
Signing time: Thu 26 Mar 2026 19:00:28 +0000
Manifest this update: Thu 26 Mar 2026 19:00:28 +0000
Manifest next update: Fri 27 Mar 2026 19:00:28 +0000
Files and hashes: 1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: N+L1Z85rFcmiC8R6tGkaHlpNWN13iYHeDcn7rREqHik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:fd:6e:08:45:13:ce:4b:51:ca:14:cb:62:d5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Validity
Not Before: Mar 26 19:00:28 2026 GMT
Not After : Mar 27 19:00:28 2026 GMT
Subject: CN=953ca41cad03164c91a49a2809c8afb8079d4862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:8d:a3:41:7e:0b:4e:43:a8:f1:66:56:06:
0e:17:1f:e7:83:ce:a8:a8:de:41:35:a9:76:38:b7:
34:75:f7:10:fe:11:e8:e9:82:b9:4d:5c:af:d0:0e:
cc:a0:68:a4:51:21:ad:42:0a:eb:b6:30:35:a8:e8:
f0:59:a7:06:c9:b7:39:c9:4c:a7:d7:73:d7:fc:21:
49:5e:f0:0a:7b:e8:77:97:92:89:d1:5a:2d:e3:7c:
03:dc:b8:23:38:e3:22:df:1c:2d:af:af:bb:2e:96:
cd:38:ef:7b:42:81:df:ec:5e:76:57:98:a9:d9:3e:
6d:d4:e2:57:fa:fe:be:cd:24:e7:c8:91:64:4d:33:
e2:00:3e:81:d8:88:43:c1:45:ef:0e:76:74:b1:b4:
58:68:44:2e:33:87:bf:c0:16:20:bb:a0:66:07:5d:
2e:62:45:08:50:a9:0d:03:a3:de:ad:10:2a:56:8d:
20:77:cf:b0:aa:57:ba:9b:93:8a:7c:37:96:37:e5:
ad:8b:53:d9:28:0a:7e:8f:c1:ff:5f:37:32:ef:06:
38:90:c9:e4:6d:77:98:5b:7a:ff:19:d2:d4:01:20:
79:d2:8f:c4:c9:7b:92:95:c0:7f:36:24:ad:27:03:
ab:ff:4d:89:f2:8e:1a:30:a2:f7:e7:e3:cf:b6:8b:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:A4:1C:AD:03:16:4C:91:A4:9A:28:09:C8:AF:B8:07:9D:48:62
X509v3 Authority Key Identifier:
keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4b:00:5a:05:a3:9a:42:34:ac:22:a2:7d:59:f9:5b:a7:5d:
e5:8d:82:8e:65:50:0f:9b:8d:d1:c9:36:39:c7:d9:16:53:a5:
7b:02:2c:49:0e:6f:d5:5c:db:6e:b7:02:69:0e:42:bd:7a:8c:
65:88:5c:25:62:3d:e5:c3:2a:bd:1e:e0:91:e6:fe:23:3e:f0:
6d:00:7c:3a:3a:d8:63:9e:b0:da:70:37:c7:69:d0:51:75:09:
b5:9a:a3:12:50:b4:3d:49:95:d0:1f:a5:e7:a9:e4:3e:4b:6a:
65:ce:c5:69:6e:08:8c:54:46:fe:53:aa:d3:04:4a:13:78:d1:
6f:b1:55:21:04:05:a3:a0:34:97:43:b7:c3:32:a2:6b:0b:a8:
d9:d2:11:c0:1b:c4:29:57:87:42:85:d7:fa:fd:ec:68:ae:d1:
aa:77:92:a4:9a:3a:7f:b9:09:65:c5:ad:d2:8a:2b:a3:5a:9c:
bd:45:f1:bc:55:1e:8f:e6:21:c6:4d:ee:f8:41:2d:b5:f0:1d:
b0:ef:55:c6:3f:26:06:62:fd:72:79:c1:74:2d:60:1d:e9:6d:
15:e1:b1:12:3d:53:b7:8a:98:d1:85:ec:39:01:26:54:10:83:
70:19:b1:42:73:7e:ef:be:c8:51:c7:e0:6b:cc:b2:d5:e8:9c:
79:73:03:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhP1uCEUTzktRyhTLYtWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzhlNWUwMTY2MDVmNmVkY2Q0Yzk2MWMxOWNhY2Y1ODE0
Yzc4YTMwHhcNMjYwMzI2MTkwMDI4WhcNMjYwMzI3MTkwMDI4WjAzMTEwLwYDVQQD
Eyg5NTNjYTQxY2FkMDMxNjRjOTFhNDlhMjgwOWM4YWZiODA3OWQ0ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/6No0F+C05DqPFmVgYOFx/ng86o
qN5BNal2OLc0dfcQ/hHo6YK5TVyv0A7MoGikUSGtQgrrtjA1qOjwWacGybc5yUyn
13PX/CFJXvAKe+h3l5KJ0Vot43wD3LgjOOMi3xwtr6+7LpbNOO97QoHf7F52V5ip
2T5t1OJX+v6+zSTnyJFkTTPiAD6B2IhDwUXvDnZ0sbRYaEQuM4e/wBYgu6BmB10u
YkUIUKkNA6PerRAqVo0gd8+wqle6m5OKfDeWN+Wti1PZKAp+j8H/Xzcy7wY4kMnk
bXeYW3r/GdLUASB50o/EyXuSlcB/NiStJwOr/02J8o4aMKL35+PPtov0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU8pBytAxZMkaSaKAnIr7gHnUhiMB8GA1UdIwQY
MBaAFGg45eAWYF9u3NTJYcGcrPWBTHijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83N2YxOTQtZmY1Zi00YTIzLWI4ODIt
ZjRjYzI1YTU0NTNmLzEvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83N2YxOTQtZmY1Zi00YTIzLWI4ODItZjRjYzI1YTU0NTNm
LzEvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUsAWgWj
mkI0rCKifVn5W6dd5Y2CjmVQD5uN0ck2OcfZFlOlewIsSQ5v1VzbbrcCaQ5CvXqM
ZYhcJWI95cMqvR7gkeb+Iz7wbQB8OjrYY56w2nA3x2nQUXUJtZqjElC0PUmV0B+l
56nkPktqZc7FaW4IjFRG/lOq0wRKE3jRb7FVIQQFo6A0l0O3wzKiawuo2dIRwBvE
KVeHQoXX+v3saK7RqneSpJo6f7kJZcWt0ooro1qcvUXxvFUej+Yhxk3u+EEttfAd
sO9Vxj8mBmL9cnnBdC1gHeltFeGxEj1Tt4qY0YXsOQEmVBCDcBmxQnN+777IUcfg
a8yy1eiceXMD9g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:33 2026 by rpki-client