Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File: m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier: 85wS96vSGxGEvrfVnDXO9VNWmvl5ANFvF6OpBnK2HdM=
Subject key identifier: 1B:FD:14:4C:D5:39:E5:EA:0E:91:60:BF:22:82:60:12:54:48:2A:FB
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer: /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial: 019D3AC1247B6E1251B6137C1086B11998F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number: 1711
Signing time: Sun 29 Mar 2026 18:00:29 +0000
Manifest this update: Sun 29 Mar 2026 18:00:29 +0000
Manifest next update: Mon 30 Mar 2026 18:00:29 +0000
Files and hashes: 1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: jC4SzH28bPlniGCObo3wS74FvpFA53tJZOZUuUMsolk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:24:7b:6e:12:51:b6:13:7c:10:86:b1:19:98:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Validity
Not Before: Mar 29 18:00:29 2026 GMT
Not After : Mar 30 18:00:29 2026 GMT
Subject: CN=1bfd144cd539e5ea0e9160bf2282601254482afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:f7:1a:7f:99:41:c2:4a:1a:6c:fb:a9:e4:
d9:f7:09:50:14:45:f3:13:0a:cb:ca:31:b8:b3:e3:
74:ec:b7:26:ed:04:37:38:ff:83:74:3a:33:b7:55:
ba:d1:b4:16:f1:c2:1e:24:a7:20:5a:89:60:ee:60:
c5:5c:4b:c6:9c:55:7b:81:0a:c5:3c:92:b3:b9:2b:
3d:54:de:e8:ae:3d:f1:91:3e:46:47:6c:c5:92:9b:
39:84:53:3b:6c:d4:99:96:4a:34:9d:01:26:6a:59:
3c:83:0e:91:50:74:05:f7:b0:8a:20:17:c4:e4:2e:
9c:d3:c9:4d:62:ef:66:b8:3e:ff:54:f5:11:dc:c3:
33:7e:71:6f:d4:2b:30:fc:2b:04:40:94:42:7f:06:
cb:e9:df:92:c4:a0:24:6d:f6:c0:35:27:8f:bf:72:
9c:d8:36:fc:93:ef:cd:8a:64:a3:b3:b4:46:ad:4a:
18:69:fa:18:d6:f2:96:66:6c:ca:74:ed:bb:41:75:
41:c8:21:88:5a:c8:29:7f:c1:fa:2a:6f:49:9f:75:
22:25:04:d3:92:65:96:a4:37:3b:0c:71:33:90:36:
09:8d:3a:75:64:72:d0:8b:9f:d1:d9:5a:23:77:a9:
44:b7:52:d7:db:86:ed:f4:c2:46:c4:99:f1:1a:83:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:14:4C:D5:39:E5:EA:0E:91:60:BF:22:82:60:12:54:48:2A:FB
X509v3 Authority Key Identifier:
keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:36:f2:80:d0:d2:ff:43:0c:ea:c5:44:2f:33:fe:5f:6e:
f1:21:3a:65:a6:2b:a0:07:9d:fe:b3:d2:07:d6:fc:09:9f:1a:
c8:c7:2e:81:3b:99:18:5d:01:58:30:b7:7c:1a:2b:ab:5f:d0:
e0:c9:77:8b:18:0f:a7:14:0c:39:cf:00:20:fb:6f:1e:cc:9a:
f3:d6:ac:ec:7f:bb:7b:77:70:ef:ec:75:f8:1f:e6:fa:f2:d2:
92:b4:0e:6d:87:75:bb:1e:3d:60:6a:25:f1:38:ed:bd:81:40:
77:0f:f6:9d:a6:c5:7c:41:fa:99:1f:2c:a1:7d:06:a7:6f:ce:
ce:fc:2a:e0:a0:cc:9c:a7:9d:44:d1:f0:2e:ed:fd:ae:04:56:
8d:8c:c0:ea:7f:e6:46:27:83:6e:14:ca:61:ab:dd:b0:51:7f:
e7:cd:30:a4:e9:4c:35:43:20:c5:92:12:9b:20:82:53:0d:5c:
ac:00:5d:14:95:4b:d9:1d:24:4e:3b:14:5d:0a:fd:81:a9:f7:
aa:c8:3b:26:d7:cb:44:5b:e2:8c:a2:d4:68:3f:91:09:0a:3a:
a0:b4:92:2f:ad:06:b4:9a:16:99:6d:fb:f6:fe:f2:7d:07:80:
c8:39:cc:13:cc:d0:e5:c7:dc:d1:98:c3:e0:7f:36:c4:e2:0e:
c7:34:ef:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wSR7bhJRthN8EIaxGZj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTE2Zjk5YzRlMzVmM2FlZGQ4MWIzNzkzOWRlOGMzYzRl
OTFjMWMwHhcNMjYwMzI5MTgwMDI5WhcNMjYwMzMwMTgwMDI5WjAzMTEwLwYDVQQD
EygxYmZkMTQ0Y2Q1MzllNWVhMGU5MTYwYmYyMjgyNjAxMjU0NDgyYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXP3Gn+ZQcJKGmz7qeTZ9wlQFEXz
EwrLyjG4s+N07Lcm7QQ3OP+DdDozt1W60bQW8cIeJKcgWolg7mDFXEvGnFV7gQrF
PJKzuSs9VN7orj3xkT5GR2zFkps5hFM7bNSZlko0nQEmalk8gw6RUHQF97CKIBfE
5C6c08lNYu9muD7/VPUR3MMzfnFv1Csw/CsEQJRCfwbL6d+SxKAkbfbANSePv3Kc
2Db8k+/NimSjs7RGrUoYafoY1vKWZmzKdO27QXVByCGIWsgpf8H6Km9Jn3UiJQTT
kmWWpDc7DHEzkDYJjTp1ZHLQi5/R2Vojd6lEt1LX24bt9MJGxJnxGoOILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv9FEzVOeXqDpFgvyKCYBJUSCr7MB8GA1UdIwQY
MBaAFJvhb5nE41867dgbN5Od6MPE6RwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5Nzct
MWJhODMwYTdjYzVjLzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5NzctMWJhODMwYTdjYzVj
LzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeg28oDQ
0v9DDOrFRC8z/l9u8SE6ZaYroAed/rPSB9b8CZ8ayMcugTuZGF0BWDC3fBorq1/Q
4Ml3ixgPpxQMOc8AIPtvHsya89as7H+7e3dw7+x1+B/m+vLSkrQObYd1ux49YGol
8TjtvYFAdw/2nabFfEH6mR8soX0Gp2/Ozvwq4KDMnKedRNHwLu39rgRWjYzA6n/m
RieDbhTKYavdsFF/580wpOlMNUMgxZISmyCCUw1crABdFJVL2R0kTjsUXQr9gan3
qsg7JtfLRFvijKLUaD+RCQo6oLSSL60GtJoWmW379v7yfQeAyDnME8zQ5cfc0ZjD
4H82xOIOxzTvQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:17 2026 by rpki-client