Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: X4wHPaChKw2h9KrL6XeA1RW1i1KlhI5w3maO6Z7+o5Y=
Subject key identifier: 74:5D:5D:48:E1:0D:22:67:3C:A1:86:A6:9A:EA:70:29:DA:B8:5F:19
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 019D39AE733E5C31CFCFFEC705E7F2C1ED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 1521
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: TYf2QEhzKwF4RxwIcR5BIdHugdmOkmGXLyZvNz+vjxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:73:3e:5c:31:cf:cf:fe:c7:05:e7:f2:c1:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=745d5d48e10d22673ca186a69aea7029dab85f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:fa:1a:28:31:99:bd:5a:22:e8:9e:4a:8b:
91:54:07:fc:7b:eb:ae:47:ec:e2:50:14:cc:da:26:
79:82:bb:da:1c:97:48:d0:af:71:90:e2:c4:6a:dd:
48:b5:3f:9f:48:27:f6:5f:3f:20:33:33:88:e5:59:
a7:19:a3:a2:72:71:b9:2a:5e:5a:4c:c7:c6:d4:e8:
a3:0f:4f:fb:cc:a9:32:60:fc:3d:4a:e8:ad:d7:52:
8d:12:bf:da:8e:ae:ee:6f:39:ff:f7:25:82:aa:41:
84:2e:ca:d6:24:f6:db:e4:61:3e:e4:a5:e2:7f:61:
e1:84:d5:df:c2:4a:87:b3:64:f8:e3:9c:89:00:bd:
b7:a2:2e:e4:61:44:79:f7:6a:e9:b0:1b:3a:78:a0:
dd:29:1f:cf:5e:e9:8c:c1:bb:06:6e:f6:68:ee:c1:
14:59:71:55:4c:55:1e:a2:16:38:03:4c:cc:b6:c7:
3d:d0:d2:b2:74:da:07:68:25:6b:4d:19:ca:61:46:
b6:6a:13:9d:1a:a6:d6:bf:05:13:0e:b8:c6:f8:ce:
b2:e9:da:57:ae:88:59:e3:49:de:61:8a:e3:b5:d5:
86:53:be:6f:ae:f6:9e:b3:34:07:e1:f2:43:2e:44:
66:27:67:e8:01:a0:35:04:33:36:8b:47:73:72:8b:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:5D:48:E1:0D:22:67:3C:A1:86:A6:9A:EA:70:29:DA:B8:5F:19
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:f0:42:a8:68:58:ec:a3:b4:8d:30:e5:78:54:7d:82:65:
b2:8d:01:75:f0:a2:a4:5e:40:11:67:0b:ac:4d:f3:8f:94:30:
b1:48:c9:fb:d7:b5:5f:bb:3f:11:65:c3:54:05:91:09:67:4c:
59:c4:f8:da:7b:b7:11:d5:42:43:4f:22:ad:8b:5d:37:bc:fe:
83:58:54:5a:e4:b2:d1:29:c7:e6:5d:46:4d:63:80:82:4c:2f:
1e:af:92:a1:91:52:84:8b:a5:6c:95:ee:2c:34:b9:cf:aa:e4:
f9:2b:96:55:13:58:03:39:8e:26:23:4f:e1:95:dc:86:85:9a:
a9:e4:7a:5f:76:48:12:44:14:20:5c:0f:ef:8f:5b:01:02:6d:
4e:76:b5:88:13:15:f9:e5:f6:86:fc:a1:50:9a:cb:61:07:a3:
c7:c0:91:4a:09:04:e8:5c:8c:92:69:7f:fe:7b:8b:78:6a:71:
15:07:c7:9d:50:5d:ca:a8:af:3f:ec:76:cc:97:5c:b7:61:ab:
9d:cd:74:c1:9f:b3:94:9e:e8:93:8a:7c:e8:7f:60:29:9b:77:
8c:84:cb:1e:9c:97:6e:e9:8d:25:db:0d:35:c6:46:72:d2:50:
a1:22:93:82:9a:7d:ee:62:13:1a:44:24:9c:72:3b:9a:ae:e1:
73:ec:93:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnM+XDHPz/7HBefywe2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmFjNzhhZWExYmNmNDM4YTYxZWY5MTUwMjQ0OGY2MDk2
NDFkMmQwHhcNMjYwMzI5MTMwMDI3WhcNMjYwMzMwMTMwMDI3WjAzMTEwLwYDVQQD
Eyg3NDVkNWQ0OGUxMGQyMjY3M2NhMTg2YTY5YWVhNzAyOWRhYjg1ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpH6Gigxmb1aIuieSouRVAf8e+uu
R+ziUBTM2iZ5grvaHJdI0K9xkOLEat1ItT+fSCf2Xz8gMzOI5VmnGaOicnG5Kl5a
TMfG1OijD0/7zKkyYPw9Suit11KNEr/ajq7ubzn/9yWCqkGELsrWJPbb5GE+5KXi
f2HhhNXfwkqHs2T445yJAL23oi7kYUR592rpsBs6eKDdKR/PXumMwbsGbvZo7sEU
WXFVTFUeohY4A0zMtsc90NKydNoHaCVrTRnKYUa2ahOdGqbWvwUTDrjG+M6y6dpX
rohZ40neYYrjtdWGU75vrvaeszQH4fJDLkRmJ2foAaA1BDM2i0dzcoufpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRdXUjhDSJnPKGGpprqcCnauF8ZMB8GA1UdIwQY
MBaAFG/6x4rqG89DimHvkVAkSPYJZB0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAt
MGMzNDM1MTNhZGUzLzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAtMGMzNDM1MTNhZGUz
LzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0XwQqho
WOyjtI0w5XhUfYJlso0BdfCipF5AEWcLrE3zj5QwsUjJ+9e1X7s/EWXDVAWRCWdM
WcT42nu3EdVCQ08irYtdN7z+g1hUWuSy0SnH5l1GTWOAgkwvHq+SoZFShIulbJXu
LDS5z6rk+SuWVRNYAzmOJiNP4ZXchoWaqeR6X3ZIEkQUIFwP749bAQJtTna1iBMV
+eX2hvyhUJrLYQejx8CRSgkE6FyMkml//nuLeGpxFQfHnVBdyqivP+x2zJdct2Gr
nc10wZ+zlJ7ok4p86H9gKZt3jITLHpyXbumNJdsNNcZGctJQoSKTgpp97mITGkQk
nHI7mq7hc+yTOQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:29 2026 by rpki-client