Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: LrRCmPL6fcFmGx1LHLtP8/27Q7b618/7ZewzefVaKI0=
Subject key identifier: 51:5F:E4:41:8F:C7:5C:C7:F3:A3:26:6C:8B:27:C4:1A:4A:E7:EE:3B
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019D27A90604E96BC9092BBA0F5A6F5BC6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: rfg3kCaYfW/nLPPMQJMNHSjspworrQtmDc5DA6t0NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:06:04:e9:6b:c9:09:2b:ba:0f:5a:6f:5b:c6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=515fe4418fc75cc7f3a3266c8b27c41a4ae7ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:18:fe:72:0f:5a:83:39:0e:a8:bc:7e:07:
ec:8b:95:ca:bb:4f:61:4e:45:d1:3e:ed:55:62:6a:
46:ce:54:2e:50:3a:cf:ce:03:79:7e:30:20:ad:a1:
85:34:bf:55:be:2f:dd:bf:1a:cb:f3:e0:a5:36:bc:
5d:08:e4:51:c8:8e:90:1f:04:8b:0e:b3:38:54:f8:
e6:f4:d1:f3:c8:74:c6:df:21:c4:de:27:7b:a6:0d:
92:68:ba:de:9c:83:a8:93:51:29:49:7b:9f:42:e9:
f4:b6:3e:53:b2:cc:ab:c5:8b:c1:64:43:87:08:4a:
73:7a:ed:e3:11:39:24:ae:ce:a7:7c:84:82:1d:8d:
8e:1b:e4:1e:2a:1c:4e:cb:59:15:16:55:57:e1:bd:
aa:6e:1f:8f:97:2c:46:15:92:bb:d7:c4:e5:c8:d6:
8f:1f:fa:75:f7:08:3c:c3:dd:f8:d4:0d:0c:fb:38:
51:32:39:01:fa:ec:16:4c:58:1f:7f:a9:81:0b:87:
33:5a:f0:0a:7b:2a:e2:96:da:b8:6b:01:2e:49:1d:
60:d3:9d:ed:f1:5a:e1:67:21:83:15:55:3c:9b:25:
49:fd:50:f7:74:c3:a6:2f:75:59:74:30:1e:73:88:
2b:d5:46:83:6b:d3:85:f6:0d:ad:0a:46:8d:a5:22:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:E4:41:8F:C7:5C:C7:F3:A3:26:6C:8B:27:C4:1A:4A:E7:EE:3B
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:62:08:39:20:c2:9b:89:90:73:c0:2e:30:e7:82:7e:2f:00:
d2:ad:7c:20:2d:8b:bc:61:49:c6:7f:bd:14:fe:00:65:bf:64:
f3:1d:56:b5:f9:62:7c:fd:c3:c5:9e:36:9f:51:8f:e0:a0:b9:
fc:c8:ca:97:17:e4:7e:3a:09:cd:86:f3:d9:6f:cc:c6:19:67:
76:66:15:b1:6e:fb:a8:24:5e:f3:22:e9:21:80:77:14:90:c9:
78:be:96:5d:5b:12:b9:36:be:27:38:19:6e:e1:31:7b:ef:06:
5e:b3:6f:82:cf:e8:38:df:35:7c:93:78:4e:3a:d5:7d:df:16:
54:a7:26:d8:63:c0:0a:bd:62:ee:69:e1:a5:5d:2a:e7:d3:a9:
81:39:c5:9c:16:20:cc:38:87:a8:db:f1:f3:90:93:85:c4:d8:
38:85:0a:b8:c2:4d:c6:04:2c:2c:8d:ae:b5:ee:96:9c:98:7e:
b8:79:f7:a3:5f:da:3c:a9:73:2c:da:04:fd:d6:fa:5a:cd:3a:
18:45:7c:4d:62:6b:ef:2c:d4:6b:58:a2:48:cc:8c:9e:5c:f4:
92:0a:80:ec:60:ee:8b:c5:26:d8:48:8a:23:04:1e:b5:6e:26:
2b:b5:68:cc:76:3e:50:ee:f0:35:07:94:a4:c4:dd:d3:5f:1a:
2d:82:8c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqQYE6WvJCSu6D1pvW8b9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjYxYThkZjUzMjkyYzczMGUyYWUxZGZjZmM0ZmUzZmY3
NmIxZDAwHhcNMjYwMzI2MDEwMTIxWhcNMjYwMzI3MDEwMTIxWjAzMTEwLwYDVQQD
Eyg1MTVmZTQ0MThmYzc1Y2M3ZjNhMzI2NmM4YjI3YzQxYTRhZTdlZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1gY/nIPWoM5Dqi8fgfsi5XKu09h
TkXRPu1VYmpGzlQuUDrPzgN5fjAgraGFNL9Vvi/dvxrL8+ClNrxdCORRyI6QHwSL
DrM4VPjm9NHzyHTG3yHE3id7pg2SaLrenIOok1EpSXufQun0tj5TssyrxYvBZEOH
CEpzeu3jETkkrs6nfISCHY2OG+QeKhxOy1kVFlVX4b2qbh+PlyxGFZK718TlyNaP
H/p19wg8w9341A0M+zhRMjkB+uwWTFgff6mBC4czWvAKeyriltq4awEuSR1g053t
8VrhZyGDFVU8myVJ/VD3dMOmL3VZdDAec4gr1UaDa9OF9g2tCkaNpSLlkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFf5EGPx1zH86MmbIsnxBpK5+47MB8GA1UdIwQY
MBaAFK4mGo31MpLHMOKuHfz8T+P/drHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQt
NTY5NWQ4OWQ3YjM2LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQtNTY5NWQ4OWQ3YjM2
LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWIIOSDC
m4mQc8AuMOeCfi8A0q18IC2LvGFJxn+9FP4AZb9k8x1WtflifP3DxZ42n1GP4KC5
/MjKlxfkfjoJzYbz2W/MxhlndmYVsW77qCRe8yLpIYB3FJDJeL6WXVsSuTa+JzgZ
buExe+8GXrNvgs/oON81fJN4TjrVfd8WVKcm2GPACr1i7mnhpV0q59OpgTnFnBYg
zDiHqNvx85CThcTYOIUKuMJNxgQsLI2ute6WnJh+uHn3o1/aPKlzLNoE/db6Ws06
GEV8TWJr7yzUa1iiSMyMnlz0kgqA7GDui8Um2EiKIwQetW4mK7VozHY+UO7wNQeU
pMTd018aLYKMDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:35 2026 by rpki-client