Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: QHrWhVJaTHEYZR9dKGsLLJyuVXjG6pKBSfcr2W/Pcu4=
Subject key identifier: 82:1B:FC:82:FE:B6:0B:4C:63:FD:3B:83:43:2C:A9:BF:C1:E8:C8:3B
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 019D28F2F220642799E4BDA2C83690123F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 114A
Signing time: Thu 26 Mar 2026 07:01:43 +0000
Manifest this update: Thu 26 Mar 2026 07:01:43 +0000
Manifest next update: Fri 27 Mar 2026 07:01:43 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: oNzN39tK5xjq8t5CYaKrMvqwXbDfSZ3+fVK6zB9iY5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f2:20:64:27:99:e4:bd:a2:c8:36:90:12:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Mar 26 07:01:43 2026 GMT
Not After : Mar 27 07:01:43 2026 GMT
Subject: CN=821bfc82feb60b4c63fd3b83432ca9bfc1e8c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:8d:96:fa:2f:f6:59:74:e5:37:64:25:8e:
4c:00:40:9c:4d:fd:43:f5:66:d4:42:fe:33:c6:23:
e1:56:ba:ce:f5:63:d3:1c:b2:80:9e:1f:39:b8:e2:
71:98:05:53:b2:d7:d4:8e:23:43:26:84:52:d1:c3:
b1:87:8b:87:36:1a:57:16:17:c3:f5:f0:ea:2a:7b:
f6:1d:b3:3e:0e:2b:82:ca:30:95:14:86:7f:b6:e8:
10:9b:62:4f:50:3b:00:dc:bf:4e:ee:ab:df:df:2b:
3f:f2:7b:b4:38:a6:5f:8b:74:82:74:89:84:23:71:
6d:e0:87:32:cd:0b:79:67:1b:b2:d8:d3:b0:c9:1a:
4b:81:9e:5f:e8:96:19:d1:76:3d:6b:f5:01:21:9e:
97:91:33:46:14:70:d9:2a:8f:17:26:25:dc:db:9a:
14:2c:05:7b:64:23:6e:3f:c1:a3:4f:89:d7:37:3a:
9f:28:4c:4e:47:8f:71:93:b2:d9:89:92:f8:db:f7:
87:cb:3f:92:1c:10:ea:fd:15:c8:f6:41:71:b9:98:
3f:f2:7b:d5:f1:4a:23:b0:5b:06:d5:91:64:64:18:
f3:26:7d:a0:c8:1c:8f:db:54:2f:87:8f:d5:67:c1:
b1:8a:33:6b:e0:f2:c7:b5:33:45:c7:bb:ec:7b:ea:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:FC:82:FE:B6:0B:4C:63:FD:3B:83:43:2C:A9:BF:C1:E8:C8:3B
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5b:2d:a2:d0:0b:57:5d:23:93:15:a5:48:45:19:78:48:cd:
a5:f3:cb:ea:a9:a9:85:60:c9:82:13:41:99:80:ef:8c:4e:a4:
ce:72:da:37:7e:d7:43:57:89:d3:12:27:8c:4e:71:f6:d5:e1:
7a:f8:df:8a:60:62:07:7f:9b:e4:c9:6e:9f:67:15:8b:2d:ac:
02:c7:e3:a2:aa:2a:1a:6c:c7:d4:9a:8b:98:32:e3:a9:74:20:
f6:46:55:b1:1a:4d:4e:70:22:39:7d:eb:02:d8:16:ef:9e:3b:
97:07:9f:0a:05:37:e8:82:da:61:7e:da:8c:0d:6c:e8:c0:52:
0a:34:7e:84:d9:7a:15:ce:2a:84:d8:10:13:7b:33:c1:61:34:
8d:0f:ea:36:24:3a:e1:c9:ef:0e:e6:e4:c2:85:9b:fc:84:5e:
49:8b:ff:f6:aa:b8:60:c2:65:1a:e9:30:77:e5:06:d2:e4:4b:
5d:e1:7f:71:31:8a:9e:18:af:b0:79:f2:23:df:a4:8b:9f:97:
8b:8d:7d:08:12:90:bc:b4:c2:b7:4e:f6:1f:03:ea:eb:63:9a:
08:05:91:5c:39:82:d1:35:5f:5c:ab:2d:97:a5:87:5e:c5:3e:
fd:82:89:b5:f0:31:8e:d7:a7:48:e6:f2:8d:26:ba:4c:81:38:
db:23:7a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vIgZCeZ5L2iyDaQEj+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDU5MzdkOGU2MDJiNDhjYjJmZjUxNzE2ZDk5NWQyM2Ex
ZjNlMWEwHhcNMjYwMzI2MDcwMTQzWhcNMjYwMzI3MDcwMTQzWjAzMTEwLwYDVQQD
Eyg4MjFiZmM4MmZlYjYwYjRjNjNmZDNiODM0MzJjYTliZmMxZThjODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2iNlvov9ll05TdkJY5MAECcTf1D
9WbUQv4zxiPhVrrO9WPTHLKAnh85uOJxmAVTstfUjiNDJoRS0cOxh4uHNhpXFhfD
9fDqKnv2HbM+DiuCyjCVFIZ/tugQm2JPUDsA3L9O7qvf3ys/8nu0OKZfi3SCdImE
I3Ft4IcyzQt5Zxuy2NOwyRpLgZ5f6JYZ0XY9a/UBIZ6XkTNGFHDZKo8XJiXc25oU
LAV7ZCNuP8GjT4nXNzqfKExOR49xk7LZiZL42/eHyz+SHBDq/RXI9kFxuZg/8nvV
8UojsFsG1ZFkZBjzJn2gyByP21Qvh4/VZ8GxijNr4PLHtTNFx7vse+rAWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIb/IL+tgtMY/07g0Msqb/B6Mg7MB8GA1UdIwQY
MBaAFEnVk32OYCtIyy/1FxbZldI6Hz4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmIt
OWIyYWRjNzRiNTJkLzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmItOWIyYWRjNzRiNTJk
LzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVstotAL
V10jkxWlSEUZeEjNpfPL6qmphWDJghNBmYDvjE6kznLaN37XQ1eJ0xInjE5x9tXh
evjfimBiB3+b5Mlun2cViy2sAsfjoqoqGmzH1JqLmDLjqXQg9kZVsRpNTnAiOX3r
AtgW7547lwefCgU36ILaYX7ajA1s6MBSCjR+hNl6Fc4qhNgQE3szwWE0jQ/qNiQ6
4cnvDubkwoWb/IReSYv/9qq4YMJlGukwd+UG0uRLXeF/cTGKnhivsHnyI9+ki5+X
i419CBKQvLTCt072HwPq62OaCAWRXDmC0TVfXKstl6WHXsU+/YKJtfAxjtenSOby
jSa6TIE42yN6mA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:46:31 2026 by rpki-client