Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: g70BOt50c+HFs3eTSA1y9jes62/QD3GJgfxuurDk7aM=
Subject key identifier: 6B:63:33:2F:94:41:71:87:1D:9D:76:09:12:FF:B3:E7:00:EF:D3:79
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019D39415BCE3B522487E607527F3CC848BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0EB6
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: Pf8n4VITvnju/4M3gTJ1cOHS18SkO8btKBB2HmCY5Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5b:ce:3b:52:24:87:e6:07:52:7f:3c:c8:48:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=6b63332f944171871d9d760912ffb3e700efd379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:ea:14:d5:7b:c7:cb:95:00:2e:c1:c8:83:
94:63:38:bf:3f:88:64:fb:e5:e1:cc:01:70:e7:32:
09:d3:09:f7:18:fc:f4:1d:ce:1e:c0:56:44:56:fc:
6f:f1:6a:c6:1b:60:e4:e6:f0:39:a5:72:d6:3e:54:
02:f0:94:09:f9:b2:4a:b4:ff:24:ed:28:d2:2c:7f:
14:b0:bd:4d:72:2e:30:48:5b:11:9f:eb:90:46:d3:
4e:6f:21:ac:eb:87:73:65:17:e5:14:aa:6f:9a:2f:
6b:d8:b0:78:dc:e3:97:38:97:47:a9:63:ab:14:26:
71:8f:7f:59:dd:11:0d:3c:d5:2f:5f:26:1e:3a:a2:
e6:b3:73:af:0c:62:a9:45:6c:f3:10:00:0c:4a:90:
42:e1:d1:61:0b:25:d0:28:a4:a0:69:a7:24:cb:1a:
5d:82:11:b0:91:1c:c7:98:22:b5:93:82:4f:c9:c8:
6f:c6:68:81:4b:55:ed:d1:89:32:e0:0c:8f:8c:7e:
94:9a:12:38:ef:44:f1:fe:6f:4e:3a:94:1a:36:36:
ab:05:bc:63:95:1b:bb:13:7e:71:be:a4:78:45:e8:
34:89:03:89:ab:dd:42:88:1d:48:f6:ab:25:b1:6d:
25:fe:a4:64:ab:79:cc:76:08:01:aa:ff:1f:99:31:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:33:2F:94:41:71:87:1D:9D:76:09:12:FF:B3:E7:00:EF:D3:79
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:51:1d:3e:9f:c9:a0:d5:ee:74:0a:a2:2b:f5:bc:6d:20:
36:12:18:fd:42:3d:84:7d:f9:d9:ed:fe:9c:d1:c5:f2:19:7a:
b2:12:59:b1:1e:dc:1a:35:cf:a2:c7:0a:02:2d:22:9d:47:3a:
26:59:34:b6:01:9b:38:92:a5:73:c6:57:28:56:34:55:48:e6:
9e:10:eb:8e:9e:bf:ed:25:48:9a:82:39:31:d5:69:ff:e2:85:
67:6c:95:70:5c:06:e5:06:7b:df:d6:28:51:da:e9:34:65:c0:
3a:c3:be:58:27:96:d3:ab:d8:87:b5:1c:bf:14:b6:c8:22:66:
7f:ad:64:bd:51:8c:0c:76:9c:4e:7f:57:20:f0:ee:c5:8c:82:
bc:63:73:1b:39:7c:4c:0c:7d:ed:76:0d:95:ea:0f:0f:6c:e9:
7b:ee:0e:d4:fc:8e:07:8e:be:d6:96:45:74:6c:06:11:5b:fb:
82:24:54:f1:db:77:52:9a:c1:65:cd:61:94:c2:6b:53:a5:e9:
12:f5:d6:84:94:4b:84:c5:58:47:b9:9b:bf:0b:66:fb:3e:0e:
a1:20:19:94:0f:1d:3e:e4:61:f1:26:35:dd:a2:85:5b:f8:b5:
60:c7:81:0b:76:fe:0d:bf:c4:44:cc:25:61:91:84:10:ec:7e:
e3:d8:2c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVvOO1Ikh+YHUn88yEi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx
OGIyMWMwHhcNMjYwMzI5MTEwMTE3WhcNMjYwMzMwMTEwMTE3WjAzMTEwLwYDVQQD
Eyg2YjYzMzMyZjk0NDE3MTg3MWQ5ZDc2MDkxMmZmYjNlNzAwZWZkMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuszqFNV7x8uVAC7ByIOUYzi/P4hk
++XhzAFw5zIJ0wn3GPz0Hc4ewFZEVvxv8WrGG2Dk5vA5pXLWPlQC8JQJ+bJKtP8k
7SjSLH8UsL1Nci4wSFsRn+uQRtNObyGs64dzZRflFKpvmi9r2LB43OOXOJdHqWOr
FCZxj39Z3RENPNUvXyYeOqLms3OvDGKpRWzzEAAMSpBC4dFhCyXQKKSgaackyxpd
ghGwkRzHmCK1k4JPychvxmiBS1Xt0Yky4AyPjH6UmhI470Tx/m9OOpQaNjarBbxj
lRu7E35xvqR4Reg0iQOJq91CiB1I9qslsW0l/qRkq3nMdggBqv8fmTHCawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtjMy+UQXGHHZ12CRL/s+cA79N5MB8GA1UdIwQY
MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt
NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl
LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkFRHT6f
yaDV7nQKoiv1vG0gNhIY/UI9hH352e3+nNHF8hl6shJZsR7cGjXPoscKAi0inUc6
Jlk0tgGbOJKlc8ZXKFY0VUjmnhDrjp6/7SVImoI5MdVp/+KFZ2yVcFwG5QZ739Yo
UdrpNGXAOsO+WCeW06vYh7UcvxS2yCJmf61kvVGMDHacTn9XIPDuxYyCvGNzGzl8
TAx97XYNleoPD2zpe+4O1PyOB46+1pZFdGwGEVv7giRU8dt3UprBZc1hlMJrU6Xp
EvXWhJRLhMVYR7mbvwtm+z4OoSAZlA8dPuRh8SY13aKFW/i1YMeBC3b+Db/ERMwl
YZGEEOx+49gsMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:48 2026 by rpki-client