Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: /hIEDNZZE/pBh7WxhIXbiCvmv1k23335PpjuioRtHdg=
Subject key identifier: 95:44:CC:75:F9:B1:5A:40:FF:89:5C:41:FF:E8:6B:CA:FB:34:D3:09
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019D38D2EF8EA5F68EDD480ECAAD54FAD02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: bKUkyDH42DE9HNAAx5OWIy6115AsaVEPlAqTzsYQMHc=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ef:8e:a5:f6:8e:dd:48:0e:ca:ad:54:fa:d0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=9544cc75f9b15a40ff895c41ffe86bcafb34d309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:1c:27:49:31:9c:89:5d:c8:88:37:54:e8:
24:f4:bd:f3:39:42:a2:0f:38:dd:13:f8:1f:c4:f8:
ef:83:0d:40:aa:f4:59:95:5e:51:e3:85:bf:1d:36:
31:e7:e7:30:e0:bd:1d:5c:9a:78:ce:a0:69:d1:45:
2b:f1:74:4f:5d:aa:1b:66:45:9e:13:70:45:cf:5b:
22:f7:e1:71:0b:23:f6:fb:92:64:35:b8:bb:59:28:
25:7d:93:1a:09:f5:76:e8:8d:3f:8b:60:f8:92:cc:
c5:92:3f:d4:c1:69:90:90:5e:d3:25:b4:04:ef:8b:
bc:05:61:6b:00:f7:99:a3:1b:b7:16:47:3f:d2:28:
42:c6:26:bd:26:86:28:f8:f8:26:14:62:7c:35:ce:
cb:53:b2:2a:40:d7:ad:aa:58:e9:78:2c:80:9a:19:
fd:89:e6:f5:1a:69:e8:a3:e5:f2:14:b9:81:d2:49:
88:78:63:2a:47:05:e1:c6:f4:87:40:8b:d3:7f:eb:
2b:e9:8a:58:99:30:c4:86:28:68:82:a9:69:8d:6a:
91:f5:1d:cb:67:82:74:e8:f0:a6:6c:9d:c0:be:94:
4c:a7:9c:81:8c:39:e1:23:c9:7c:eb:34:78:2d:2e:
46:c9:d1:08:a7:8d:8c:bc:b5:c9:f6:49:10:fc:dc:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:CC:75:F9:B1:5A:40:FF:89:5C:41:FF:E8:6B:CA:FB:34:D3:09
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:36:0b:9f:5a:01:a4:69:f8:db:df:8a:41:b8:41:8e:87:
c8:6b:c4:e8:8d:83:88:0a:45:cb:3e:8a:d2:c7:4a:ac:60:12:
2c:04:14:91:9a:0f:29:a1:1b:d5:e1:d4:a3:fc:88:9e:2b:bd:
f7:ff:11:33:76:45:44:c9:76:4a:53:ae:8e:6a:f7:0e:6e:eb:
2d:56:f6:99:51:a0:43:fb:51:3f:6d:91:f3:f3:62:c5:b1:b3:
07:82:e3:76:2a:6c:52:55:49:87:ff:0a:e9:bb:dd:36:c5:1f:
bf:3c:49:f1:7f:0f:49:a4:1a:ef:20:1c:81:af:5f:1c:be:86:
a7:98:9d:1c:a1:e9:f4:f6:10:91:03:16:16:5f:6d:c1:ba:51:
7c:0b:5b:09:91:07:40:50:f9:45:76:39:6b:8f:6f:98:de:98:
04:43:71:f9:59:77:89:44:3c:00:a2:1d:56:22:b1:34:87:c1:
da:6f:70:e4:a3:ad:cc:b2:f5:01:31:2f:15:e5:04:7b:32:d9:
e9:5d:fc:20:70:91:95:ab:16:4e:c3:57:b4:89:ec:f2:4f:f1:
d3:7d:da:c0:6f:1b:34:5d:d1:f0:36:56:d8:36:52:08:b2:93:
32:f4:60:b0:8a:88:c3:46:ed:ea:b8:8a:9e:fc:48:f8:c2:4a:
53:a8:1d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040u+OpfaO3UgOyq1U+tAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk
OTdjNTAwHhcNMjYwMzI5MDkwMDQwWhcNMjYwMzMwMDkwMDQwWjAzMTEwLwYDVQQD
Eyg5NTQ0Y2M3NWY5YjE1YTQwZmY4OTVjNDFmZmU4NmJjYWZiMzRkMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVEcJ0kxnIldyIg3VOgk9L3zOUKi
DzjdE/gfxPjvgw1AqvRZlV5R44W/HTYx5+cw4L0dXJp4zqBp0UUr8XRPXaobZkWe
E3BFz1si9+FxCyP2+5JkNbi7WSglfZMaCfV26I0/i2D4kszFkj/UwWmQkF7TJbQE
74u8BWFrAPeZoxu3Fkc/0ihCxia9JoYo+PgmFGJ8Nc7LU7IqQNetqljpeCyAmhn9
ieb1Gmnoo+XyFLmB0kmIeGMqRwXhxvSHQIvTf+sr6YpYmTDEhihogqlpjWqR9R3L
Z4J06PCmbJ3AvpRMp5yBjDnhI8l86zR4LS5GydEIp42MvLXJ9kkQ/NxC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVEzHX5sVpA/4lcQf/oa8r7NNMJMB8GA1UdIwQY
MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt
ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy
LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsg2C59a
AaRp+NvfikG4QY6HyGvE6I2DiApFyz6K0sdKrGASLAQUkZoPKaEb1eHUo/yIniu9
9/8RM3ZFRMl2SlOujmr3Dm7rLVb2mVGgQ/tRP22R8/NixbGzB4LjdipsUlVJh/8K
6bvdNsUfvzxJ8X8PSaQa7yAcga9fHL6Gp5idHKHp9PYQkQMWFl9twbpRfAtbCZEH
QFD5RXY5a49vmN6YBENx+Vl3iUQ8AKIdViKxNIfB2m9w5KOtzLL1ATEvFeUEezLZ
6V38IHCRlasWTsNXtIns8k/x033awG8bNF3R8DZW2DZSCLKTMvRgsIqIw0bt6riK
nvxI+MJKU6gdUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:43 2026 by rpki-client