Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
File: j33ZCSspRN36oXbsIwf26Y9N44M.mft (raw, json)
Hash identifier: 8L5vE1KxfCKdy3eSjf/sJE7lVyvr7RFeZK+Dy6ZL0DE=
Subject key identifier: 11:EE:53:FD:D4:72:92:26:3A:AE:80:03:48:AA:4C:B5:2E:1B:08:FD
Authority key identifier: 8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83
Certificate issuer: /CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
Certificate serial: 019D39AF474B29B5317BA7BE19D00A1CE09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
Manifest number: 01FC
Signing time: Sun 29 Mar 2026 13:01:21 +0000
Manifest this update: Sun 29 Mar 2026 13:01:21 +0000
Manifest next update: Mon 30 Mar 2026 13:01:21 +0000
Files and hashes: 1: j33ZCSspRN36oXbsIwf26Y9N44M.crl (hash: 6hoW03J5/HN+ltPp8+AwfvZLP6TztTBJGanmH/srF0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:47:4b:29:b5:31:7b:a7:be:19:d0:0a:1c:e0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
Validity
Not Before: Mar 29 13:01:21 2026 GMT
Not After : Mar 30 13:01:21 2026 GMT
Subject: CN=11ee53fdd47292263aae800348aa4cb52e1b08fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:5e:e3:ac:c3:ae:f3:1f:82:ce:24:66:0b:
e3:cd:d2:58:98:8e:71:e8:0a:f7:49:3f:67:0c:7e:
9e:f5:4c:03:79:32:3a:3b:a1:8b:bd:9f:fc:f7:82:
2c:b8:1e:ef:b3:e6:85:0a:73:61:53:b4:04:59:47:
10:6d:4c:cd:fe:04:da:e9:b1:16:2a:d2:13:00:b0:
01:2e:69:36:6d:4e:13:65:18:8f:e3:14:21:89:7c:
ac:93:e5:0b:34:ba:3d:ba:3f:90:fb:b2:72:12:1d:
2a:b7:36:ce:1f:ff:0c:7d:ca:26:c9:e3:18:d7:0c:
46:52:33:4d:e4:2b:4a:dc:71:5c:cb:ba:8d:f8:e7:
61:c1:3e:a9:8f:4b:36:29:cb:1d:2a:8c:28:ae:85:
a5:48:a7:26:c7:00:73:78:f1:da:5d:93:c3:3d:38:
d6:56:e3:7e:d6:29:70:ee:d7:62:a5:0a:be:08:a6:
ca:8d:f2:26:b5:f3:e3:c3:43:97:46:b8:1e:22:26:
90:48:f5:e9:2d:2b:6c:a1:cc:eb:da:8e:6d:80:a3:
77:2e:4e:66:35:b1:ea:4f:43:9b:49:7f:21:8c:4e:
6c:45:d8:09:6a:d3:db:b8:27:ee:ec:6f:1c:b4:d2:
c8:d0:36:4e:e1:7a:38:57:f8:1b:2b:e8:18:77:b7:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:53:FD:D4:72:92:26:3A:AE:80:03:48:AA:4C:B5:2E:1B:08:FD
X509v3 Authority Key Identifier:
keyid:8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:85:92:36:2e:bc:18:a3:d3:73:f0:c3:aa:64:31:06:5f:ba:
36:f7:74:dd:bc:4d:15:fc:3e:89:ce:74:78:5f:b6:67:37:d2:
47:5e:ac:70:81:f3:fc:02:73:a9:f6:cc:c0:c3:2f:6a:00:10:
a9:98:f9:42:5b:51:f7:b9:d0:39:2f:8a:85:13:c7:9c:91:66:
3c:9a:ea:72:aa:58:17:33:94:77:88:f8:5f:a5:82:a0:e4:29:
ba:d9:2c:a3:f5:eb:e3:da:0b:6f:5d:1e:12:4a:e9:cf:f7:4b:
4b:67:08:d5:83:fd:c3:5c:78:86:11:7f:0e:19:6b:e7:20:4e:
a1:b4:3e:5d:06:89:0e:e3:eb:47:c7:8a:dd:37:f0:86:b6:ed:
2a:eb:90:7a:65:e8:ca:0d:33:d4:93:1c:9e:8a:93:9e:2f:db:
45:84:ac:3d:ff:f9:cc:6b:9a:c4:c3:9b:f0:5c:10:ca:d3:fd:
dd:7a:66:b9:27:30:f3:f7:21:b4:25:01:37:f4:b5:14:19:54:
04:d6:f6:37:2b:13:f8:2a:61:95:8f:51:6b:41:7b:1e:5a:16:
bf:69:7f:6b:6d:09:16:20:90:f6:bc:11:03:21:af:2a:3e:4d:
45:b2:88:40:d0:17:87:d3:9c:03:80:f8:e9:d7:e6:cd:89:b5:
5e:93:d9:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0dLKbUxe6e+GdAKHOCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2RkOTA5MmIyOTQ0ZGRmYWExNzZlYzIzMDdmNmU5OGY0
ZGUzODMwHhcNMjYwMzI5MTMwMTIxWhcNMjYwMzMwMTMwMTIxWjAzMTEwLwYDVQQD
EygxMWVlNTNmZGQ0NzI5MjI2M2FhZTgwMDM0OGFhNGNiNTJlMWIwOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlle46zDrvMfgs4kZgvjzdJYmI5x
6Ar3ST9nDH6e9UwDeTI6O6GLvZ/894IsuB7vs+aFCnNhU7QEWUcQbUzN/gTa6bEW
KtITALABLmk2bU4TZRiP4xQhiXysk+ULNLo9uj+Q+7JyEh0qtzbOH/8MfcomyeMY
1wxGUjNN5CtK3HFcy7qN+OdhwT6pj0s2KcsdKoworoWlSKcmxwBzePHaXZPDPTjW
VuN+1ilw7tdipQq+CKbKjfImtfPjw0OXRrgeIiaQSPXpLStsoczr2o5tgKN3Lk5m
NbHqT0ObSX8hjE5sRdgJatPbuCfu7G8ctNLI0DZO4Xo4V/gbK+gYd7dHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHuU/3UcpImOq6AA0iqTLUuGwj9MB8GA1UdIwQY
MBaAFI992QkrKUTd+qF27CMH9umPTeODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQt
ZDZlY2FkMmQ1MTMyLzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQtZDZlY2FkMmQ1MTMy
LzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYWSNi68
GKPTc/DDqmQxBl+6Nvd03bxNFfw+ic50eF+2ZzfSR16scIHz/AJzqfbMwMMvagAQ
qZj5QltR97nQOS+KhRPHnJFmPJrqcqpYFzOUd4j4X6WCoOQputkso/Xr49oLb10e
Ekrpz/dLS2cI1YP9w1x4hhF/Dhlr5yBOobQ+XQaJDuPrR8eK3TfwhrbtKuuQemXo
yg0z1JMcnoqTni/bRYSsPf/5zGuaxMOb8FwQytP93XpmuScw8/chtCUBN/S1FBlU
BNb2NysT+CphlY9Ra0F7HloWv2l/a20JFiCQ9rwRAyGvKj5NRbKIQNAXh9OcA4D4
6dfmzYm1XpPZEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:11 2026 by rpki-client