Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: f24NFMXNh0GDM2CH0KxiBjIgQ27bkO2NnWaKsqSjKmM=
Subject key identifier: 8D:AD:5A:67:2C:E6:B2:E2:F1:CE:FB:D5:71:64:5C:19:DE:5E:53:50
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019D27047C12CBA11BEBA1BC8D2CE4EDF767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1404
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: FCSgBdOhPyZGxS8NTT4IBMB8nVAr8uvJMkCHEUWvuRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7c:12:cb:a1:1b:eb:a1:bc:8d:2c:e4:ed:f7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=8dad5a672ce6b2e2f1cefbd571645c19de5e5350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:e5:72:7d:e4:b4:4d:45:e5:60:1d:9f:48:
3e:f7:f5:8d:b5:cb:64:b2:e6:b4:11:3d:91:ec:37:
97:92:54:8e:71:20:ad:8b:bf:49:10:4c:08:c2:49:
ec:b2:a4:1b:b9:55:a2:dc:24:a2:d5:14:d4:7a:85:
ce:b7:bc:48:58:bd:d0:24:16:3b:7f:a7:8e:42:59:
f1:43:e9:88:49:50:cc:d1:b3:b3:9e:f8:4e:08:15:
bb:d7:d8:6e:64:b8:f9:90:b5:2d:d3:80:68:a4:e0:
28:43:d4:a5:a7:d7:ef:08:9d:e5:17:02:28:6c:91:
ec:19:21:4c:f5:6c:33:45:28:f2:3d:e1:51:51:bb:
51:7c:5e:1a:44:44:61:0c:43:1e:a7:55:d5:e2:c8:
d9:e5:c3:bb:85:3e:3e:62:8a:16:a6:e3:d4:83:aa:
e9:1d:6e:e3:61:89:e5:94:e8:e5:44:d8:35:6e:fc:
c6:a6:78:6b:cb:59:40:30:ce:6c:cd:9e:25:91:af:
e5:cf:f2:6b:97:88:32:73:1c:d3:31:29:a8:d4:8f:
af:39:82:be:14:6c:b0:2c:70:87:2c:f0:02:52:eb:
be:6b:b0:a5:2a:28:53:94:1d:32:3f:39:1b:02:67:
4d:99:80:0c:cc:61:c7:98:a6:0b:67:9e:c0:ca:90:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:5A:67:2C:E6:B2:E2:F1:CE:FB:D5:71:64:5C:19:DE:5E:53:50
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:4c:fd:c5:46:9e:db:2a:0a:67:81:51:1e:d9:bb:d2:ed:
15:6d:01:98:b0:65:86:a8:16:fa:b3:70:10:dd:ce:17:91:23:
bf:d8:3d:53:c3:68:af:38:fd:ca:03:f6:b5:1b:cc:7c:1d:d1:
f8:a8:16:ec:a9:8b:63:60:46:ba:54:7e:0f:30:3b:e1:13:96:
b0:e7:61:cb:b9:42:30:e8:83:82:8e:28:1a:46:f1:a7:2e:c9:
7d:ef:48:75:d1:73:8e:f8:1a:13:49:d6:2d:16:1b:d8:2c:5c:
b4:0b:da:9a:06:de:14:a6:77:98:ae:71:1c:1d:e6:5e:a6:36:
9c:6a:d5:77:74:57:d9:eb:c5:a1:6f:d6:d8:f3:3f:0c:3c:bf:
d5:62:d1:ba:43:d9:c2:ea:f5:4e:5b:35:5d:27:99:e7:a6:cf:
78:01:47:03:c7:50:79:c5:ad:21:cf:47:69:7b:c7:8e:2b:6a:
f6:3c:70:36:f9:13:5d:ad:23:1c:ea:43:21:1d:37:f5:76:15:
29:a2:e5:0e:f0:23:8d:62:e8:2f:32:8b:f0:0b:35:66:ad:7f:
c7:04:ae:2a:b8:88:3c:ed:7d:11:1b:6d:9f:ad:55:1c:1a:9a:
78:67:b4:dc:df:2a:a2:cd:fa:2d:71:fe:4c:e7:6c:73:29:e6:
88:70:f1:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nBHwSy6Eb66G8jSzk7fdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy
MWI1YjUwHhcNMjYwMzI1MjIwMTM4WhcNMjYwMzI2MjIwMTM4WjAzMTEwLwYDVQQD
Eyg4ZGFkNWE2NzJjZTZiMmUyZjFjZWZiZDU3MTY0NWMxOWRlNWU1MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr23lcn3ktE1F5WAdn0g+9/WNtctk
sua0ET2R7DeXklSOcSCti79JEEwIwknssqQbuVWi3CSi1RTUeoXOt7xIWL3QJBY7
f6eOQlnxQ+mISVDM0bOznvhOCBW719huZLj5kLUt04BopOAoQ9Slp9fvCJ3lFwIo
bJHsGSFM9WwzRSjyPeFRUbtRfF4aRERhDEMep1XV4sjZ5cO7hT4+YooWpuPUg6rp
HW7jYYnllOjlRNg1bvzGpnhry1lAMM5szZ4lka/lz/Jrl4gycxzTMSmo1I+vOYK+
FGywLHCHLPACUuu+a7ClKihTlB0yPzkbAmdNmYAMzGHHmKYLZ57AypASzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI2tWmcs5rLi8c771XFkXBneXlNQMB8GA1UdIwQY
MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3
LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm
N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFVM
/cVGntsqCmeBUR7Zu9LtFW0BmLBlhqgW+rNwEN3OF5Ejv9g9U8Norzj9ygP2tRvM
fB3R+KgW7KmLY2BGulR+DzA74ROWsOdhy7lCMOiDgo4oGkbxpy7Jfe9IddFzjvga
E0nWLRYb2CxctAvamgbeFKZ3mK5xHB3mXqY2nGrVd3RX2evFoW/W2PM/DDy/1WLR
ukPZwur1Tls1XSeZ56bPeAFHA8dQecWtIc9HaXvHjitq9jxwNvkTXa0jHOpDIR03
9XYVKaLlDvAjjWLoLzKL8As1Zq1/xwSuKriIPO19ERttn61VHBqaeGe03N8qos36
LXH+TOdscynmiHDxMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:46 2026 by rpki-client