Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier: vnQKCob5V2R4VMRtWuitBekan/kCEf/bJrdiBewxlBA=
Subject key identifier: 38:AA:FE:91:32:E4:F3:42:62:82:8A:9D:B6:81:CA:EC:B5:92:96:4B
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial: 019D2AE05986B8D4A5AD33309983F078ACCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number: 048D
Signing time: Thu 26 Mar 2026 16:00:39 +0000
Manifest this update: Thu 26 Mar 2026 16:00:39 +0000
Manifest next update: Fri 27 Mar 2026 16:00:39 +0000
Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: P5EeQv2ucdmVK/gKpNwKdbFaCRbYMNRHqngKgZdOL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:59:86:b8:d4:a5:ad:33:30:99:83:f0:78:ac:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Validity
Not Before: Mar 26 16:00:39 2026 GMT
Not After : Mar 27 16:00:39 2026 GMT
Subject: CN=38aafe9132e4f34262828a9db681caecb592964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:cd:06:63:4a:88:f6:e9:43:33:a6:88:c8:
d7:5d:56:b0:c3:98:b1:0a:cb:04:5d:86:35:b2:2e:
a4:36:51:ca:c8:86:6b:23:01:d9:77:b7:8d:76:2c:
e1:54:d4:38:4d:83:f7:dc:69:b1:cf:21:3f:36:37:
e1:ce:00:95:a4:0a:84:59:1a:a4:e3:49:04:42:a0:
76:b0:da:7f:82:37:52:f3:2e:24:cc:a5:b8:19:48:
16:3d:d7:e9:f8:19:87:5f:28:e9:97:af:04:c0:67:
9d:e4:d8:68:b4:bd:bd:65:ea:1d:63:b0:8f:57:39:
0a:33:98:51:c1:f5:5e:bf:50:bd:95:78:e1:00:15:
f0:98:1f:69:cc:91:e4:34:29:e5:ca:a1:51:09:92:
fd:d0:ff:85:98:00:93:cc:22:ef:c0:4e:a3:2b:bc:
60:9b:73:0d:d9:a0:90:ee:80:df:95:a8:db:e3:9e:
af:d5:4f:39:22:82:82:78:ec:dd:67:60:60:42:e5:
20:82:41:ca:30:27:8a:18:6d:eb:40:51:21:e0:06:
4c:83:8c:12:43:cd:8b:0c:bf:27:44:46:83:a6:f4:
7f:08:cb:ce:59:af:d5:af:35:83:20:a2:d6:e8:2a:
d0:63:d7:32:23:3d:96:ad:9d:31:3f:b6:5c:17:77:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:FE:91:32:E4:F3:42:62:82:8A:9D:B6:81:CA:EC:B5:92:96:4B
X509v3 Authority Key Identifier:
keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:4a:3c:39:cf:5c:6f:44:22:2e:21:71:98:16:2d:1a:e5:
fb:d2:92:5e:11:1a:96:71:88:14:ce:03:bd:bb:ce:f1:cf:eb:
5d:7e:63:22:0b:9a:b0:a2:cc:d6:f8:20:55:1f:7b:38:f5:ea:
79:03:c8:9f:7e:ba:b4:0f:76:e2:b7:25:17:97:d6:ee:4e:1d:
8c:71:3a:af:4b:9a:d3:06:59:24:b3:14:24:4e:82:5d:5e:19:
bc:bf:d7:ba:5b:96:ee:c1:9f:1e:55:fd:ed:31:6f:93:c0:c5:
e1:8d:bb:07:66:34:ff:23:33:51:27:c5:e6:24:5d:fb:0c:46:
50:24:fe:6d:0b:9f:f8:99:1c:1a:5e:82:d8:9b:72:03:3f:7c:
12:62:a7:73:0f:7a:0e:51:7a:cf:ba:79:b6:41:67:2d:9b:50:
36:82:d7:b2:f1:c1:a5:18:1d:c7:a3:60:1b:88:73:7f:0f:13:
1e:4f:94:3b:56:aa:c7:57:61:2c:50:f2:d8:4a:65:a6:5d:1b:
a3:30:aa:1f:17:e1:25:0a:fd:bf:53:ec:a4:33:ab:e2:ac:0a:
14:8f:2c:51:c2:76:48:0c:be:a0:33:11:36:a2:29:f4:3d:82:
6a:50:ef:17:83:2a:37:bb:25:18:80:83:0a:77:81:a2:dc:d5:
c8:ef:e4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4FmGuNSlrTMwmYPweKzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmEzNWNjMzBlYzMxMTY0MjBjMGZmMDRjNTllNDc5M2U5
MTkzZmIwHhcNMjYwMzI2MTYwMDM5WhcNMjYwMzI3MTYwMDM5WjAzMTEwLwYDVQQD
EygzOGFhZmU5MTMyZTRmMzQyNjI4MjhhOWRiNjgxY2FlY2I1OTI5NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXTNBmNKiPbpQzOmiMjXXVaww5ix
CssEXYY1si6kNlHKyIZrIwHZd7eNdizhVNQ4TYP33GmxzyE/NjfhzgCVpAqEWRqk
40kEQqB2sNp/gjdS8y4kzKW4GUgWPdfp+BmHXyjpl68EwGed5NhotL29ZeodY7CP
VzkKM5hRwfVev1C9lXjhABXwmB9pzJHkNCnlyqFRCZL90P+FmACTzCLvwE6jK7xg
m3MN2aCQ7oDflajb456v1U85IoKCeOzdZ2BgQuUggkHKMCeKGG3rQFEh4AZMg4wS
Q82LDL8nREaDpvR/CMvOWa/VrzWDIKLW6CrQY9cyIz2WrZ0xP7ZcF3ci+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiq/pEy5PNCYoKKnbaByuy1kpZLMB8GA1UdIwQY
MBaAFGtqNcww7DEWQgwP8ExZ5Hk+kZP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OTIyNmQtMWZlZS00NTcxLTgxMDYt
NTFmYjgyZWZmM2Q2LzEvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84OTIyNmQtMWZlZS00NTcxLTgxMDYtNTFmYjgyZWZmM2Q2
LzEvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghdKPDnP
XG9EIi4hcZgWLRrl+9KSXhEalnGIFM4DvbvO8c/rXX5jIguasKLM1vggVR97OPXq
eQPIn366tA924rclF5fW7k4djHE6r0ua0wZZJLMUJE6CXV4ZvL/XuluW7sGfHlX9
7TFvk8DF4Y27B2Y0/yMzUSfF5iRd+wxGUCT+bQuf+JkcGl6C2JtyAz98EmKncw96
DlF6z7p5tkFnLZtQNoLXsvHBpRgdx6NgG4hzfw8THk+UO1aqx1dhLFDy2Eplpl0b
ozCqHxfhJQr9v1PspDOr4qwKFI8sUcJ2SAy+oDMRNqIp9D2CalDvF4MqN7slGICD
CneBotzVyO/kig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:59 2026 by rpki-client