Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: 904A302EwoDjQ1QlYVOWHlLCdaLUH/PTL3BvIof4jug=
Subject key identifier: 9F:CB:3E:90:84:58:6E:9E:8B:1E:F2:AA:7A:22:76:19:13:62:47:D9
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019D39AE98DEBA63098D0FB202498929FBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0C9F
Signing time: Sun 29 Mar 2026 13:00:36 +0000
Manifest this update: Sun 29 Mar 2026 13:00:36 +0000
Manifest next update: Mon 30 Mar 2026 13:00:36 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: v9naOSdxoO3cF5wcl4L3IZVr94Hf5ritYkdL2S6QE8Y=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:98:de:ba:63:09:8d:0f:b2:02:49:89:29:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Mar 29 13:00:36 2026 GMT
Not After : Mar 30 13:00:36 2026 GMT
Subject: CN=9fcb3e9084586e9e8b1ef2aa7a227619136247d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:f5:30:9e:27:e1:52:dc:8e:0f:a7:27:e5:
a4:5f:ec:48:e7:6d:af:b8:e9:62:15:92:31:7c:ec:
b5:07:a5:9b:48:a1:13:1c:8a:24:c8:1a:b7:ed:82:
3d:9d:b1:43:e1:77:de:d1:c6:67:2a:a7:ed:45:36:
c9:49:72:02:6d:1d:11:e3:3c:21:d9:49:5e:da:d7:
70:80:76:57:de:37:23:bc:63:62:ed:9b:42:ef:34:
65:1a:18:03:80:40:f3:a1:e3:db:e5:3e:e9:f6:be:
45:e5:ca:66:3b:02:f3:4e:a9:a9:68:c4:e1:12:c7:
b9:a5:1c:8f:3a:c2:89:a3:5b:dc:46:01:9d:68:18:
ca:dd:57:f2:5f:7f:5d:c4:00:b9:fc:e0:e5:b6:72:
64:60:f7:1e:ca:02:d9:c2:56:a9:f9:59:12:18:b1:
53:5b:8e:8b:3f:b0:89:57:d5:71:64:94:b5:36:1f:
a1:e3:90:e7:c4:4b:99:6c:f5:12:b2:1b:d7:a7:1a:
a5:81:d7:eb:07:1b:92:ac:61:5a:c9:8b:a9:1e:e3:
b0:20:eb:35:ec:df:78:db:5c:ff:64:66:70:82:6d:
05:ff:f0:b1:14:b3:fe:86:86:cc:d8:26:11:25:23:
bb:c9:02:9a:07:3a:5b:81:04:ce:a8:d4:f9:26:5e:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:3E:90:84:58:6E:9E:8B:1E:F2:AA:7A:22:76:19:13:62:47:D9
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:db:72:5f:40:ba:8b:56:45:cf:2b:03:7e:61:bc:1e:5d:
95:fe:6e:13:87:f8:8e:a1:7e:c8:0e:7e:3c:4e:b8:de:76:9e:
75:1d:59:bc:91:6d:62:91:65:5a:cd:46:5a:73:50:9b:0b:54:
83:a5:5d:93:a4:87:4b:ff:a0:2b:c7:91:db:d1:6f:11:36:f0:
a0:ce:f6:41:65:b2:a6:a1:6c:1a:1c:97:15:21:96:a1:f4:66:
5e:31:e7:f4:27:d5:0c:a1:56:f1:6d:c7:f5:26:40:56:52:9a:
2b:41:91:79:9b:73:4e:9d:5b:81:cd:5f:5e:d2:ce:73:a6:fa:
81:e4:9d:e9:a2:03:b1:5b:53:8e:4b:da:b8:92:fa:0c:b3:ef:
30:de:81:69:d0:85:3a:11:2c:b9:a0:c3:ae:71:d0:fc:0e:51:
05:af:2f:80:27:eb:c4:68:24:77:bc:9c:8a:6c:54:6e:29:b3:
4f:5a:cd:58:d3:4f:5c:3b:41:a6:b8:16:ac:10:c7:da:42:d9:
44:b5:81:97:69:6b:68:c9:f8:f6:5b:51:6d:50:e2:32:a0:95:
a8:a3:7e:96:5e:a9:83:09:a2:05:27:30:43:2b:cb:cc:2d:5c:
29:0b:df:2c:4b:da:c9:7e:5c:3e:87:28:38:09:54:b2:35:f6:
92:f8:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:26 2026 by rpki-client