Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: ln4PR8w7dBFc8VtXcOj8cDw+Zd+PvlXX68BjpeYXnWs=
Subject key identifier: 3B:12:40:6A:15:55:5E:BA:14:8A:5F:CD:19:03:34:57:41:4E:25:41
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 019D37893CF3573C893608D1368DFD07BF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 054A
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: EyVHaY68k8kjSTo6eAeaN9FJKwp6+5o6zmg82rezofo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3c:f3:57:3c:89:36:08:d1:36:8d:fd:07:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=3b12406a15555eba148a5fcd19033457414e2541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:28:e5:26:5c:8b:11:41:32:aa:dd:b1:1f:
45:7e:cb:5b:ab:45:48:2e:48:22:2d:4f:1e:9a:22:
bf:90:c8:3f:88:f8:aa:d0:a9:3b:89:88:16:2f:e9:
d8:02:a4:92:30:05:16:b9:c5:8b:38:8a:06:a8:8a:
c9:66:2d:7e:55:14:3f:b2:e1:e7:70:22:ad:6d:25:
b7:7c:81:0a:c4:b2:84:83:50:71:4d:08:13:2a:b2:
86:d1:ab:29:93:7d:47:b8:ed:81:50:e7:97:9f:b4:
6f:1b:1b:de:ad:eb:81:dc:79:e8:a6:7c:fb:05:9c:
35:88:b5:3d:00:74:51:94:90:77:88:a8:95:72:d1:
58:e2:89:e0:82:f3:1a:a0:c9:db:f6:0d:4a:85:b2:
8e:71:90:4d:53:28:0d:c2:1f:32:21:d7:1d:8a:d8:
dd:66:54:64:7a:19:19:55:21:e2:04:c1:94:4b:3a:
43:05:87:81:fc:e0:34:db:2f:4e:72:0a:04:74:13:
54:61:42:34:c2:78:e4:9b:c1:4e:4a:aa:79:d7:bc:
04:10:7e:86:57:bd:2d:26:2e:ce:78:b6:15:36:b7:
0b:3a:11:b4:b7:72:49:81:ef:73:a2:80:8a:d5:6f:
5a:2e:38:28:d5:69:bd:c1:a9:76:1b:5f:e2:a2:91:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:40:6A:15:55:5E:BA:14:8A:5F:CD:19:03:34:57:41:4E:25:41
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:b2:a3:dd:06:2b:ea:04:72:c8:db:f0:e8:0d:84:a6:7f:
89:7a:50:2e:ec:b9:d6:7d:05:c3:bf:12:50:f9:fe:ae:21:52:
f7:c7:92:c8:58:9d:a9:40:91:3d:f3:f2:26:b6:13:43:82:0f:
67:3e:26:7a:b2:c8:51:1a:44:59:6a:29:b6:af:2c:8f:e1:cc:
3f:a2:84:6e:fc:ec:01:31:70:61:1a:ce:26:10:a0:dc:1d:04:
a7:f2:75:81:75:6c:1c:91:ac:37:87:d6:29:58:04:b0:01:90:
fd:21:f9:6d:33:fb:fd:15:e0:5e:08:13:13:68:4f:4d:b1:05:
a9:d3:42:21:2b:59:6b:1f:09:b4:26:7e:28:81:78:68:f5:83:
78:10:6b:b6:88:9d:a1:bb:ad:b7:75:d3:5e:1d:a6:20:d8:a7:
44:8b:52:3e:65:88:10:74:30:78:bf:48:4b:d0:9f:74:fc:71:
8a:f0:5b:e0:57:df:d4:53:8b:db:5f:5c:39:f2:81:51:da:dc:
ce:24:fa:d2:35:d0:16:73:e0:71:bc:cb:13:b0:ec:a5:41:34:
2c:7d:f2:3f:59:b7:93:46:09:20:9d:f8:67:5c:74:46:fb:6d:
87:e7:ce:1e:54:ef:dd:d7:aa:29:58:85:c9:59:61:d3:38:b6:
4b:9e:92:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTzzVzyJNgjRNo39B78LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj
ZDQzMTEwHhcNMjYwMzI5MDMwMDM0WhcNMjYwMzMwMDMwMDM0WjAzMTEwLwYDVQQD
EygzYjEyNDA2YTE1NTU1ZWJhMTQ4YTVmY2QxOTAzMzQ1NzQxNGUyNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhso5SZcixFBMqrdsR9Ffstbq0VI
LkgiLU8emiK/kMg/iPiq0Kk7iYgWL+nYAqSSMAUWucWLOIoGqIrJZi1+VRQ/suHn
cCKtbSW3fIEKxLKEg1BxTQgTKrKG0aspk31HuO2BUOeXn7RvGxvereuB3Hnopnz7
BZw1iLU9AHRRlJB3iKiVctFY4onggvMaoMnb9g1KhbKOcZBNUygNwh8yIdcditjd
ZlRkehkZVSHiBMGUSzpDBYeB/OA02y9OcgoEdBNUYUI0wnjkm8FOSqp517wEEH6G
V70tJi7OeLYVNrcLOhG0t3JJge9zooCK1W9aLjgo1Wm9wal2G1/iopGCfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSQGoVVV66FIpfzRkDNFdBTiVBMB8GA1UdIwQY
MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt
N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0
LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkuyo90G
K+oEcsjb8OgNhKZ/iXpQLuy51n0Fw78SUPn+riFS98eSyFidqUCRPfPyJrYTQ4IP
Zz4merLIURpEWWoptq8sj+HMP6KEbvzsATFwYRrOJhCg3B0Ep/J1gXVsHJGsN4fW
KVgEsAGQ/SH5bTP7/RXgXggTE2hPTbEFqdNCIStZax8JtCZ+KIF4aPWDeBBrtoid
obutt3XTXh2mINinRItSPmWIEHQweL9IS9CfdPxxivBb4Fff1FOL219cOfKBUdrc
ziT60jXQFnPgcbzLE7DspUE0LH3yP1m3k0YJIJ34Z1x0Rvtth+fOHlTv3deqKViF
yVlh0zi2S56Sow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:39 2026 by rpki-client