Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: ueeabzCbcO0U6O7kAZbFoKDefBw2qKfet1saebPlRcE=
Subject key identifier: C3:F1:6A:7A:D7:1B:58:A6:55:8C:25:D3:6F:46:AD:0C:66:DA:D9:A0
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019D3A547F947E1A3C1287EE86F21A547493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 11AF
Signing time: Sun 29 Mar 2026 16:01:49 +0000
Manifest this update: Sun 29 Mar 2026 16:01:49 +0000
Manifest next update: Mon 30 Mar 2026 16:01:49 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: KkqmVEqY3p7kvNgjkVqCBUo7tbkJtGrshgwPR6y5lTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:7f:94:7e:1a:3c:12:87:ee:86:f2:1a:54:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Mar 29 16:01:49 2026 GMT
Not After : Mar 30 16:01:49 2026 GMT
Subject: CN=c3f16a7ad71b58a6558c25d36f46ad0c66dad9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:cd:5e:d0:b1:5a:7a:a9:ae:3f:a8:8a:12:
67:ac:82:ec:22:b5:06:7a:bd:83:5c:1e:57:95:15:
f0:80:51:61:ed:73:8d:cb:fe:7f:50:6c:57:c7:95:
a5:ec:d8:a1:cf:d3:a0:06:ba:79:ac:2f:26:3b:8f:
2e:ee:8f:31:28:ce:d4:27:41:18:af:72:d2:a1:05:
fc:e4:37:49:5d:ca:0d:e1:fc:8a:fc:26:69:20:44:
ff:ad:58:b7:9f:d1:be:50:bb:84:f9:b6:2f:e5:de:
0f:69:e5:bd:b2:83:df:bf:ed:d6:06:56:11:ff:2f:
09:e2:6d:b8:bf:94:7c:9f:3d:d6:d7:a1:db:1a:48:
95:fe:05:62:15:a6:06:f0:f4:b0:5a:bf:be:e0:7a:
4b:76:1c:e5:cd:37:a3:43:9e:9f:88:52:68:bd:b1:
37:f7:8a:9d:18:f8:7e:ac:27:db:bb:a6:b6:af:d8:
0f:73:49:87:15:31:67:d3:3c:85:78:e2:c0:55:1d:
00:21:da:3f:5b:bd:b9:8e:05:01:44:bc:b5:4c:dd:
d6:3e:0e:6e:9b:1c:9d:1e:13:bf:52:f8:2c:da:31:
f5:97:80:fc:94:93:62:39:51:c4:2b:9d:0a:c7:3c:
67:5d:77:12:b9:cd:1d:9d:ff:a0:ab:17:ad:6e:36:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:6A:7A:D7:1B:58:A6:55:8C:25:D3:6F:46:AD:0C:66:DA:D9:A0
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5d:42:6b:0b:5b:d6:8b:ac:e4:cc:31:69:94:be:67:c2:47:
4b:0c:ae:fc:de:b2:19:12:f9:a5:72:5f:bf:72:b8:7c:ad:41:
a7:38:86:19:c2:a7:db:70:9b:15:d9:f9:83:47:a9:f9:98:6d:
e3:69:9d:01:24:65:73:32:31:2c:4e:43:11:cb:78:84:fb:1f:
d2:cd:2b:13:91:f2:fd:be:90:85:bf:8f:2e:48:79:3b:76:1a:
e3:53:54:15:59:2f:7a:b9:06:fb:12:27:67:ac:5d:14:8c:7a:
2a:f9:61:26:31:cd:be:bf:14:a0:2a:31:76:91:4f:63:a6:55:
e1:34:15:2d:bb:3a:9c:e2:e8:cf:3d:ff:a5:51:2f:df:a4:dd:
21:7c:b7:14:90:c8:56:0a:b9:ee:3e:d4:7f:9b:b6:69:dc:67:
3d:f5:1e:2d:a1:4e:7c:a2:d5:cf:8b:27:a5:c1:00:3a:8b:87:
9e:90:75:eb:a8:b7:3e:1c:61:a0:04:5d:c5:36:9b:e8:b0:94:
65:45:6d:cc:04:a2:d8:c7:14:98:6a:a4:2d:26:41:c6:4e:93:
a5:47:bc:12:c9:f0:82:b3:7a:ff:8a:fd:b0:ee:0c:57:6b:7e:
75:bd:c0:59:77:18:ce:ee:91:1a:41:24:d3:fe:3e:38:47:0a:
f4:1b:74:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VH+Ufho8EofuhvIaVHSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDJjZDVkZDhkNTEzZDRhZTg3ZWNmZGM1NTdlYmY1ZjYy
M2VjMzQwHhcNMjYwMzI5MTYwMTQ5WhcNMjYwMzMwMTYwMTQ5WjAzMTEwLwYDVQQD
EyhjM2YxNmE3YWQ3MWI1OGE2NTU4YzI1ZDM2ZjQ2YWQwYzY2ZGFkOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWfNXtCxWnqprj+oihJnrILsIrUG
er2DXB5XlRXwgFFh7XONy/5/UGxXx5Wl7Nihz9OgBrp5rC8mO48u7o8xKM7UJ0EY
r3LSoQX85DdJXcoN4fyK/CZpIET/rVi3n9G+ULuE+bYv5d4PaeW9soPfv+3WBlYR
/y8J4m24v5R8nz3W16HbGkiV/gViFaYG8PSwWr++4HpLdhzlzTejQ56fiFJovbE3
94qdGPh+rCfbu6a2r9gPc0mHFTFn0zyFeOLAVR0AIdo/W725jgUBRLy1TN3WPg5u
mxydHhO/Uvgs2jH1l4D8lJNiOVHEK50KxzxnXXcSuc0dnf+gqxetbjbajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPxanrXG1imVYwl029GrQxm2tmgMB8GA1UdIwQY
MBaAFInSzV3Y1RPUrofs/cVX6/X2I+w0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAt
NWFlMzVjMDMwNjg2LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAtNWFlMzVjMDMwNjg2
LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV1Cawtb
1ous5MwxaZS+Z8JHSwyu/N6yGRL5pXJfv3K4fK1BpziGGcKn23CbFdn5g0ep+Zht
42mdASRlczIxLE5DEct4hPsf0s0rE5Hy/b6Qhb+PLkh5O3Ya41NUFVkverkG+xIn
Z6xdFIx6KvlhJjHNvr8UoCoxdpFPY6ZV4TQVLbs6nOLozz3/pVEv36TdIXy3FJDI
Vgq57j7Uf5u2adxnPfUeLaFOfKLVz4snpcEAOouHnpB166i3PhxhoARdxTab6LCU
ZUVtzASi2McUmGqkLSZBxk6TpUe8EsnwgrN6/4r9sO4MV2t+db3AWXcYzu6RGkEk
0/4+OEcK9Bt0Mw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:50 2026 by rpki-client