Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: W3U465f3pELlocFGpA4LgBaeaEga2t98ZsgoU93Cv1k=
Subject key identifier: FB:0B:63:92:27:1D:97:4C:41:28:C2:91:26:B8:36:AA:DD:15:37:45
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019D38663B7561473B2E0037811015341FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: UBg/m05Zy3dyjUNvlOyBRW0UaAG4rg1258eGxF4H6GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3b:75:61:47:3b:2e:00:37:81:10:15:34:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=fb0b6392271d974c4128c29126b836aadd153745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:53:2c:9b:87:af:e8:4f:8c:66:ff:8e:5a:
18:54:7d:76:9a:87:d7:dd:bb:a9:30:c2:19:a9:0c:
d6:8b:ba:0a:2d:8b:d4:6c:e0:ba:0b:88:c7:ff:3d:
95:44:8a:9a:b6:dd:04:60:d5:b6:4c:73:36:8b:bd:
f2:c2:7b:f6:64:2a:38:ac:31:1b:c2:c7:c9:eb:11:
97:8a:fd:07:65:de:44:f0:a7:11:33:9f:53:3d:09:
47:41:80:0c:57:37:1b:7c:a6:2f:c6:01:17:9c:03:
78:4f:4b:80:c8:77:fe:08:0d:34:39:6a:a6:da:86:
8d:eb:1f:be:6a:83:61:17:07:b7:18:56:a3:7e:6c:
24:ef:1c:c5:f5:8b:9c:f6:2b:6c:80:67:07:66:4d:
10:ec:e8:6b:4d:5f:e4:97:f8:bc:06:e9:b3:b6:b3:
cc:f8:9e:a6:ac:d2:39:f0:ac:cf:68:41:8c:41:9b:
ca:66:ff:91:a5:7e:f3:a4:3d:1a:b6:4d:14:72:4c:
0d:8a:d0:4a:5d:e7:0b:dd:62:7c:44:02:86:32:0e:
09:2d:fb:28:b1:6d:0f:6f:bc:cc:20:09:0c:0c:6c:
cb:2b:78:cc:10:fb:20:60:33:4d:52:ec:62:ed:59:
d3:3c:4d:e5:8c:7c:85:79:59:4d:cb:a6:78:9c:3f:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:63:92:27:1D:97:4C:41:28:C2:91:26:B8:36:AA:DD:15:37:45
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:4e:04:a4:3c:11:16:41:3d:d6:6a:f0:69:bc:48:17:2c:
e4:1c:55:52:78:df:02:55:9b:7a:95:93:69:35:3f:f1:c1:64:
5e:96:49:73:fa:78:d1:97:cb:49:c2:c0:de:01:9c:b0:5b:db:
e6:76:69:60:b1:2a:57:d2:8d:86:df:34:04:ff:8c:85:ca:e8:
ea:f4:1c:c2:51:09:d3:e6:37:8c:79:32:fc:13:5b:b4:5f:d3:
72:bc:3f:24:8a:ea:8e:13:60:71:1e:9c:09:15:33:da:20:7a:
7e:d6:9c:50:6f:c1:fd:d0:4b:8c:ec:88:9e:a9:a8:bf:7b:3a:
5f:69:dc:e6:73:34:7f:6b:85:d6:07:d5:c4:31:28:17:cb:d6:
92:7a:0b:a4:71:b3:fd:f7:cd:42:31:f6:3e:1c:d6:39:51:09:
53:70:74:b2:e2:43:dc:04:27:1a:7c:91:46:e2:d6:47:c4:6f:
59:16:6f:b8:54:9f:5a:8c:f3:11:6b:c6:b5:d6:08:58:07:40:
a6:a5:0d:b6:38:d5:58:a9:8c:25:31:4b:4d:2a:b1:c7:78:a2:
6b:ef:a9:9a:c9:7a:89:c1:e6:5e:ee:8c:23:55:c1:28:a7:fe:
b9:46:46:8f:fa:e6:e5:2d:c8:b1:6a:de:74:45:d0:b5:1f:00:
2e:6b:03:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zjt1YUc7LgA3gRAVNB/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDNmN2RjZmM2MDg5MWZjMzg4ZmE1YzFkYmQ3NWYyN2I5
NTE5ZTIwHhcNMjYwMzI5MDcwMTU3WhcNMjYwMzMwMDcwMTU3WjAzMTEwLwYDVQQD
EyhmYjBiNjM5MjI3MWQ5NzRjNDEyOGMyOTEyNmI4MzZhYWRkMTUzNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5FTLJuHr+hPjGb/jloYVH12mofX
3bupMMIZqQzWi7oKLYvUbOC6C4jH/z2VRIqatt0EYNW2THM2i73ywnv2ZCo4rDEb
wsfJ6xGXiv0HZd5E8KcRM59TPQlHQYAMVzcbfKYvxgEXnAN4T0uAyHf+CA00OWqm
2oaN6x++aoNhFwe3GFajfmwk7xzF9Yuc9itsgGcHZk0Q7OhrTV/kl/i8BumztrPM
+J6mrNI58KzPaEGMQZvKZv+RpX7zpD0atk0UckwNitBKXecL3WJ8RAKGMg4JLfso
sW0Pb7zMIAkMDGzLK3jMEPsgYDNNUuxi7VnTPE3ljHyFeVlNy6Z4nD+GPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsLY5InHZdMQSjCkSa4NqrdFTdFMB8GA1UdIwQY
MBaAFL/T99z8YIkfw4j6XB29dfJ7lRniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTkt
NThmZWQyODIyY2EzLzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTktNThmZWQyODIyY2Ez
LzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdlOBKQ8
ERZBPdZq8Gm8SBcs5BxVUnjfAlWbepWTaTU/8cFkXpZJc/p40ZfLScLA3gGcsFvb
5nZpYLEqV9KNht80BP+Mhcro6vQcwlEJ0+Y3jHky/BNbtF/Tcrw/JIrqjhNgcR6c
CRUz2iB6ftacUG/B/dBLjOyInqmov3s6X2nc5nM0f2uF1gfVxDEoF8vWknoLpHGz
/ffNQjH2PhzWOVEJU3B0suJD3AQnGnyRRuLWR8RvWRZvuFSfWozzEWvGtdYIWAdA
pqUNtjjVWKmMJTFLTSqxx3iia++pmsl6icHmXu6MI1XBKKf+uUZGj/rm5S3IsWre
dEXQtR8ALmsDCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client