Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: aZMAfBI7BUOgL3RiI7kKwsztvvz6kpp/8SSal6nRy8A=
Subject key identifier: E8:1B:BE:52:19:EC:66:90:B7:0F:BC:EC:E1:35:36:A2:D7:91:C4:EE
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019D3866940EAFDAD70D60AA2565C09BB00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0BC1
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: ek9K8Uwsw5kQBDeeV2vFNPuihzHcAUBtPbvYmdNFsME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:94:0e:af:da:d7:0d:60:aa:25:65:c0:9b:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=e81bbe5219ec6690b70fbcece13536a2d791c4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:5e:31:5d:05:22:ff:74:9a:92:21:69:71:
59:d6:e6:24:19:6b:54:35:b2:f2:ae:24:8a:02:32:
9f:18:5c:3c:90:77:bb:54:08:c2:db:58:92:1f:65:
54:6e:22:3c:fe:ee:19:d5:75:6a:cb:e4:8f:25:fc:
aa:b4:7f:c1:02:83:43:03:eb:cd:b4:b6:8c:fd:93:
3b:ba:cf:04:69:54:d1:11:8f:e8:be:02:38:8d:ca:
52:d0:d6:aa:31:b3:00:65:51:67:fa:a2:2b:23:6b:
6e:48:6b:0e:a3:27:dc:ea:26:62:7b:a7:7d:15:71:
a9:1e:43:6c:11:7e:36:09:f3:13:18:0b:59:b3:b0:
aa:8f:a0:4d:9e:2f:9b:83:be:33:45:28:35:0f:67:
ee:63:6e:e0:e3:6a:af:0a:30:c8:dc:e6:9c:1a:0a:
6a:f8:7d:77:f0:2c:22:9d:b6:07:00:1b:27:16:a0:
5a:4b:04:bd:64:19:25:32:9d:30:38:19:28:ec:90:
63:f7:e8:97:5f:69:7c:ee:df:f8:18:ae:9f:91:6d:
da:0c:0f:8d:79:71:c7:6b:59:c9:a1:b9:e5:62:dd:
2b:23:db:79:90:92:fd:8d:a0:07:8b:00:c4:e0:66:
55:a6:10:fc:39:94:8a:cc:18:43:44:37:7a:75:6a:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:BE:52:19:EC:66:90:B7:0F:BC:EC:E1:35:36:A2:D7:91:C4:EE
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:cf:6e:ec:e5:dc:83:2f:ab:88:fb:78:4b:8e:b6:4e:80:
f6:41:42:9a:d7:cc:bf:93:d8:76:19:43:b5:77:f8:40:ca:8f:
4a:ad:7f:65:8d:06:7f:60:e7:18:f3:c8:46:55:2f:6b:d5:1e:
49:c9:e9:4d:00:4b:74:62:b9:29:d9:08:74:b5:c0:5f:b2:a4:
9b:70:6c:b9:f3:57:7d:05:6c:8e:d9:cf:7c:cc:6f:13:a1:4d:
17:01:1d:aa:30:8b:84:29:48:30:37:ca:e3:66:f1:e0:18:9a:
7c:70:58:04:ee:34:4a:93:06:ec:cc:ae:a1:d2:c9:ad:7d:7f:
cc:4d:51:a5:c8:a9:c7:b2:11:80:a1:b5:90:31:f6:e3:37:8f:
ed:fc:24:32:7a:e1:2d:0b:08:f2:59:6e:32:c2:b1:72:d9:40:
57:55:b6:77:bf:3b:b3:bb:3f:08:4d:a5:38:4b:3f:73:d8:0b:
02:f8:f8:a1:d7:76:96:82:2c:06:c5:7a:67:41:db:c3:d9:b1:
d6:43:c5:90:d9:81:7c:8b:74:d0:71:f1:c0:28:33:50:be:a0:
02:df:06:f5:94:51:47:4f:f3:85:87:53:e1:a2:bf:b3:7b:f4:
6f:90:88:95:21:19:e6:2c:28:01:7b:5c:84:45:40:d2:af:05:
d5:94:9c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZpQOr9rXDWCqJWXAm7AMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5
MGI1YWMwHhcNMjYwMzI5MDcwMjE5WhcNMjYwMzMwMDcwMjE5WjAzMTEwLwYDVQQD
EyhlODFiYmU1MjE5ZWM2NjkwYjcwZmJjZWNlMTM1MzZhMmQ3OTFjNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7JeMV0FIv90mpIhaXFZ1uYkGWtU
NbLyriSKAjKfGFw8kHe7VAjC21iSH2VUbiI8/u4Z1XVqy+SPJfyqtH/BAoNDA+vN
tLaM/ZM7us8EaVTREY/ovgI4jcpS0NaqMbMAZVFn+qIrI2tuSGsOoyfc6iZie6d9
FXGpHkNsEX42CfMTGAtZs7Cqj6BNni+bg74zRSg1D2fuY27g42qvCjDI3OacGgpq
+H138CwinbYHABsnFqBaSwS9ZBklMp0wOBko7JBj9+iXX2l87t/4GK6fkW3aDA+N
eXHHa1nJobnlYt0rI9t5kJL9jaAHiwDE4GZVphD8OZSKzBhDRDd6dWph/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgbvlIZ7GaQtw+87OE1NqLXkcTuMB8GA1UdIwQY
MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It
NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw
LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkTPbuzl
3IMvq4j7eEuOtk6A9kFCmtfMv5PYdhlDtXf4QMqPSq1/ZY0Gf2DnGPPIRlUva9Ue
ScnpTQBLdGK5KdkIdLXAX7Kkm3BsufNXfQVsjtnPfMxvE6FNFwEdqjCLhClIMDfK
42bx4BiafHBYBO40SpMG7MyuodLJrX1/zE1Rpcipx7IRgKG1kDH24zeP7fwkMnrh
LQsI8lluMsKxctlAV1W2d787s7s/CE2lOEs/c9gLAvj4odd2loIsBsV6Z0Hbw9mx
1kPFkNmBfIt00HHxwCgzUL6gAt8G9ZRRR0/zhYdT4aK/s3v0b5CIlSEZ5iwoAXtc
hEVA0q8F1ZScDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:45 2026 by rpki-client