Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: TGAmdODDGsrcolcSBFnLv9R/GBJQA6PfdrXoOnwAZW0=
Subject key identifier: CF:C1:11:97:BA:C4:E0:05:6E:ED:B3:94:03:C3:93:A4:CC:C6:C6:04
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 019D386685D07946CF6F0892544ED88644D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 132C
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: aHydvQqv5L2kAf7Q+HlmwM4Wh2/InEWXxBw2iehLCzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:85:d0:79:46:cf:6f:08:92:54:4e:d8:86:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=cfc11197bac4e0056eedb39403c393a4ccc6c604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:87:b7:f7:48:0c:87:d0:27:27:5f:bd:ca:
2a:e6:11:87:e6:14:ce:db:15:65:e7:f3:36:4d:f8:
f0:1b:da:96:89:02:04:b6:e4:44:ca:09:f0:a7:31:
d7:f7:e3:53:19:cf:da:57:e7:3c:e5:01:84:3a:11:
98:b0:21:9f:51:3f:06:55:c5:d6:9c:92:32:4c:23:
b8:4e:bd:4a:d9:a5:42:8a:da:88:6d:14:43:a6:93:
3f:66:90:d4:95:d9:1c:f3:f8:a2:49:d1:b1:54:dd:
b4:99:5a:69:5b:c2:60:a8:52:41:a5:9c:13:09:55:
fe:4c:08:89:4b:46:8f:7e:7a:34:6e:fc:73:0c:6c:
a5:a4:0f:57:6b:bb:6f:aa:44:9a:9e:b4:0a:01:c7:
16:30:2f:12:a8:ac:34:00:0e:bb:2b:47:05:5a:06:
d1:86:aa:7a:c5:7c:2b:e3:10:78:e1:ed:2f:fc:b9:
99:f0:0c:c9:1d:cc:ec:de:6f:0c:fa:d9:51:e8:2c:
6c:68:09:50:a0:1c:01:37:7d:76:09:cc:6d:46:07:
dc:ed:1e:e0:30:78:46:d0:08:3a:31:b7:94:6f:b8:
12:8d:4d:08:b6:be:83:84:33:63:cb:55:d1:da:e3:
24:b8:6f:13:fd:dc:98:0f:25:71:0a:53:24:f2:2f:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:11:97:BA:C4:E0:05:6E:ED:B3:94:03:C3:93:A4:CC:C6:C6:04
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d5:9a:6a:d0:57:68:7d:04:96:e4:96:38:fd:f3:77:80:1f:
fa:60:b9:f1:22:20:2e:71:1c:3c:b9:4c:2d:04:0b:77:3b:70:
7a:b4:11:79:8c:96:86:a3:19:24:dc:67:ca:44:82:a7:79:3d:
60:7a:c4:ed:53:d4:65:aa:45:6b:03:d1:93:98:34:8a:67:e7:
7e:d3:33:e5:e7:2f:7c:8c:1a:5a:fb:e2:f1:46:96:7b:02:74:
02:8c:7f:b4:2b:55:53:bf:90:41:bb:d1:0f:22:10:4f:85:b7:
ab:83:50:da:cf:77:86:67:33:49:2f:00:1e:ab:05:7a:7d:1c:
2e:2e:90:ab:63:50:7e:96:26:18:6b:04:47:85:6a:5c:38:9a:
08:61:c7:60:00:11:9e:75:ec:d6:78:e2:73:2f:20:68:52:a7:
4b:b8:1d:22:22:46:b3:62:86:c5:70:e8:fb:f2:57:0c:d9:a1:
29:64:75:14:de:7e:f4:5e:c1:a6:62:d5:fa:10:b2:8c:34:30:
58:67:68:2f:0b:be:44:1a:0e:90:b7:49:e2:4d:16:f6:82:d3:
62:74:38:ae:dc:e3:43:43:cc:e1:9a:55:00:76:dc:e6:e8:3f:
bb:b5:7a:3c:c1:e5:ac:01:a7:65:ad:12:1f:cd:12:f5:1a:c3:
ac:a5:7a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZoXQeUbPbwiSVE7YhkTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NGQxODk0NGNhMjgwODUwNTM5MWRlOTdmYTlkNmIyYmM2
MTg5OWEwHhcNMjYwMzI5MDcwMjE2WhcNMjYwMzMwMDcwMjE2WjAzMTEwLwYDVQQD
EyhjZmMxMTE5N2JhYzRlMDA1NmVlZGIzOTQwM2MzOTNhNGNjYzZjNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKGHt/dIDIfQJydfvcoq5hGH5hTO
2xVl5/M2TfjwG9qWiQIEtuREygnwpzHX9+NTGc/aV+c85QGEOhGYsCGfUT8GVcXW
nJIyTCO4Tr1K2aVCitqIbRRDppM/ZpDUldkc8/iiSdGxVN20mVppW8JgqFJBpZwT
CVX+TAiJS0aPfno0bvxzDGylpA9Xa7tvqkSanrQKAccWMC8SqKw0AA67K0cFWgbR
hqp6xXwr4xB44e0v/LmZ8AzJHczs3m8M+tlR6CxsaAlQoBwBN312CcxtRgfc7R7g
MHhG0Ag6MbeUb7gSjU0Itr6DhDNjy1XR2uMkuG8T/dyYDyVxClMk8i/KyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/BEZe6xOAFbu2zlAPDk6TMxsYEMB8GA1UdIwQY
MBaAFLVNGJRMooCFBTkd6X+p1rK8YYmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xYzI5ODQtZmQ4My00MWJhLWIxZGMt
ZjY4M2I5NjgxZDYxLzEvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xYzI5ODQtZmQ4My00MWJhLWIxZGMtZjY4M2I5NjgxZDYx
LzEvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9WaatBX
aH0EluSWOP3zd4Af+mC58SIgLnEcPLlMLQQLdztwerQReYyWhqMZJNxnykSCp3k9
YHrE7VPUZapFawPRk5g0imfnftMz5ecvfIwaWvvi8UaWewJ0Aox/tCtVU7+QQbvR
DyIQT4W3q4NQ2s93hmczSS8AHqsFen0cLi6Qq2NQfpYmGGsER4VqXDiaCGHHYAAR
nnXs1njicy8gaFKnS7gdIiJGs2KGxXDo+/JXDNmhKWR1FN5+9F7BpmLV+hCyjDQw
WGdoLwu+RBoOkLdJ4k0W9oLTYnQ4rtzjQ0PM4ZpVAHbc5ug/u7V6PMHlrAGnZa0S
H80S9RrDrKV6Xw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client