Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: MnLyYQks96aEmWi4UGyp+o5in+MZ+XGVBwixd99fxlg=
Subject key identifier: 03:D4:B8:B6:38:CE:F5:72:B5:C8:4C:53:21:A9:4E:12:A8:7F:F6:B4
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019D2703E8DAA6A513F8609A49DFEEB04EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: NL8/o0H0MWWFS63APzTax+NcJgGkwBweDZh9FOexAH8=)
2: tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa (hash: Bf6c0BIpdRCo1yEs4r44JJ+ve3ioKxcHtL7Ll7CrmLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e8:da:a6:a5:13:f8:60:9a:49:df:ee:b0:4e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=03d4b8b638cef572b5c84c5321a94e12a87ff6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:11:96:9e:d1:ea:4f:11:fd:11:4c:3b:62:
ff:8e:e9:15:19:f4:6a:97:ed:17:b5:46:28:9b:db:
25:8a:07:2b:2a:60:da:69:0d:3a:1d:08:6a:0b:6a:
c0:8f:2f:1e:52:94:df:1a:75:9f:21:e2:f1:cb:c9:
85:19:6b:52:a2:78:0c:3d:1a:05:a5:b2:28:57:a4:
23:b2:90:df:44:24:46:e3:fd:bd:61:a1:d3:b9:3e:
c8:4b:8f:b8:cb:c4:7a:8b:35:20:52:6f:29:b7:0e:
bf:77:94:bd:cd:0c:1e:2d:d6:64:db:b0:b5:fe:cb:
9a:02:58:ac:d2:80:5f:c5:cc:fa:8f:5b:a5:ca:f5:
3d:27:3e:0c:21:21:a1:8d:9c:32:87:70:96:bb:83:
43:8d:be:9c:07:c8:82:f4:e5:b9:23:39:d5:28:ec:
4e:9b:27:2b:27:31:d1:45:cf:cb:36:a9:62:6a:c0:
1c:30:42:ca:c1:4c:df:4b:0e:3a:fb:12:a7:40:ea:
2d:ca:52:f3:23:42:3c:01:55:d3:05:36:79:84:85:
fd:91:4f:d4:a3:0a:7c:05:31:57:51:fb:19:9d:1d:
36:f5:00:7e:5c:81:da:fa:52:14:d8:d6:95:e2:4d:
01:f2:5e:ee:d3:fa:2c:99:df:90:35:07:47:77:27:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:B8:B6:38:CE:F5:72:B5:C8:4C:53:21:A9:4E:12:A8:7F:F6:B4
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dc:9e:3c:c7:5a:1d:c1:15:04:46:2b:04:0a:3a:a3:88:34:
0c:18:4f:38:77:db:33:e1:45:eb:be:38:58:9b:1b:ab:46:2c:
c4:ff:c8:29:5c:aa:77:65:3f:d9:5d:61:31:ad:0a:21:eb:12:
89:b5:86:41:5d:b6:5b:d4:08:c3:8c:04:8a:23:89:33:f2:ca:
53:2c:8e:dc:98:f4:b7:fa:4d:68:d6:9f:50:03:d7:59:03:d0:
c8:08:3d:ef:43:d0:c7:86:ad:e5:86:10:a9:48:6c:76:67:73:
88:50:f6:c3:07:5f:4a:4b:c5:99:1c:44:46:c3:e7:fb:21:a2:
60:2e:2b:4a:ce:60:f7:2b:d1:be:74:40:51:4b:88:d6:23:d2:
01:75:de:d3:1c:1f:9c:6d:50:31:7f:48:fc:2c:67:61:1b:a5:
0f:0f:1f:b9:88:b8:fc:44:bf:80:27:77:89:55:2d:86:ef:e0:
c9:83:df:ec:55:de:d2:3f:b2:03:01:c3:40:3a:5e:a6:28:1f:
5a:49:03:38:fe:02:f0:1d:b7:a4:9a:0a:02:d2:3a:39:e7:e1:
50:87:3d:79:29:35:d4:3e:93:34:51:24:7d:f9:0b:55:fe:d2:
5a:fa:72:bb:0b:7b:6a:f8:d0:2f:0d:6f:a8:1c:7a:dd:aa:c1:
6d:ca:27:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+japqUT+GCaSd/usE7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3
NWFkNzIwHhcNMjYwMzI1MjIwMTAwWhcNMjYwMzI2MjIwMTAwWjAzMTEwLwYDVQQD
EygwM2Q0YjhiNjM4Y2VmNTcyYjVjODRjNTMyMWE5NGUxMmE4N2ZmNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWERlp7R6k8R/RFMO2L/jukVGfRq
l+0XtUYom9sligcrKmDaaQ06HQhqC2rAjy8eUpTfGnWfIeLxy8mFGWtSongMPRoF
pbIoV6QjspDfRCRG4/29YaHTuT7IS4+4y8R6izUgUm8ptw6/d5S9zQweLdZk27C1
/suaAlis0oBfxcz6j1ulyvU9Jz4MISGhjZwyh3CWu4NDjb6cB8iC9OW5IznVKOxO
mycrJzHRRc/LNqliasAcMELKwUzfSw46+xKnQOotylLzI0I8AVXTBTZ5hIX9kU/U
owp8BTFXUfsZnR029QB+XIHa+lIU2NaV4k0B8l7u0/osmd+QNQdHdyfM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPUuLY4zvVytchMUyGpThKof/a0MB8GA1UdIwQY
MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt
NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh
LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtyePMda
HcEVBEYrBAo6o4g0DBhPOHfbM+FF6744WJsbq0YsxP/IKVyqd2U/2V1hMa0KIesS
ibWGQV22W9QIw4wEiiOJM/LKUyyO3Jj0t/pNaNafUAPXWQPQyAg970PQx4at5YYQ
qUhsdmdziFD2wwdfSkvFmRxERsPn+yGiYC4rSs5g9yvRvnRAUUuI1iPSAXXe0xwf
nG1QMX9I/CxnYRulDw8fuYi4/ES/gCd3iVUthu/gyYPf7FXe0j+yAwHDQDpepigf
WkkDOP4C8B23pJoKAtI6OefhUIc9eSk11D6TNFEkffkLVf7SWvpyuwt7avjQLw1v
qBx63arBbconCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:43 2026 by rpki-client