Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: 3D2P+I2zRSHBJnmxvsKwKtG1NeboxUnspQ5rtzrM4pM=
Subject key identifier: 04:59:A9:7C:5C:AB:27:F0:D0:95:B9:1F:86:C2:F7:73:A9:B3:C2:1B
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 019D3789652971B337BF3D10BBD9ADC2C53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 02E9
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: +ipHRIfO7CbvAR2PYPLfnIBEq999vA4qmTETbvmue7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:65:29:71:b3:37:bf:3d:10:bb:d9:ad:c2:c5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=0459a97c5cab27f0d095b91f86c2f773a9b3c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:82:c6:20:87:0f:5a:24:3f:30:9d:7f:1a:
56:f1:f0:24:c5:c4:47:bf:21:e9:05:bc:50:2a:2b:
39:be:57:07:03:ac:39:5d:08:7d:d2:97:cb:eb:2a:
a8:bd:5e:d4:6d:1a:8e:b2:c4:5c:09:db:2c:2c:79:
d0:08:a3:1a:b1:37:af:3f:b7:1c:e5:77:4c:a0:bb:
11:a6:cf:a5:c2:db:ed:db:85:af:64:19:b3:a0:81:
c1:6a:59:69:ea:e3:d6:9f:bf:1c:6e:b5:5e:20:23:
29:c4:49:01:7c:35:82:f7:6b:8e:80:aa:bd:d9:3f:
f5:a5:7e:84:b9:d9:0f:45:6f:00:05:8b:d0:7c:88:
b9:38:03:68:89:03:2a:c4:86:74:d0:24:aa:55:bd:
b1:fc:1e:08:fd:71:22:65:c9:77:89:bc:ad:ad:09:
eb:64:70:e1:e3:b9:75:b4:aa:33:a5:8e:70:c8:47:
a0:64:30:bd:ad:28:e6:7d:27:c9:0b:69:6b:67:ca:
bc:4c:57:16:d4:bc:d9:17:6a:55:02:6f:3f:fc:43:
51:30:02:8f:8e:97:e8:57:28:e5:e0:81:a1:e4:95:
cb:6b:ce:a9:8d:31:41:3d:01:04:0f:5e:d5:8f:13:
01:18:6f:0c:5c:a5:dd:55:09:76:56:96:86:36:b9:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:A9:7C:5C:AB:27:F0:D0:95:B9:1F:86:C2:F7:73:A9:B3:C2:1B
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:5e:13:10:74:3b:d7:86:10:81:d6:1b:34:e6:fd:de:f2:
b7:26:a0:74:fb:17:51:ee:1e:60:66:b9:80:bb:b1:f2:51:67:
4a:55:12:29:de:c7:eb:d1:8e:21:36:40:bb:fe:ba:24:f5:56:
f8:4e:ec:d3:dd:5c:69:bc:c3:1f:2a:0c:6c:c0:d5:29:cb:3d:
a7:b4:17:bc:11:4e:7d:84:de:90:9f:e7:6a:57:bb:74:e6:59:
55:cf:4b:11:a5:90:1b:b6:7d:f3:7e:c2:f8:1d:7f:27:f5:bc:
e0:20:d7:58:4d:87:26:d8:f4:a1:1f:06:3c:01:f6:e4:93:22:
34:71:36:31:5d:ac:4c:6e:41:4e:39:0a:7c:fa:b2:29:cd:85:
fc:2c:95:63:ae:6e:ae:cd:52:81:6d:28:0b:a2:01:ae:97:00:
3c:ff:cb:ea:cc:6d:01:0e:ee:20:db:84:1d:bf:29:ea:33:3e:
3b:da:e2:17:7d:8f:c2:5d:64:f5:f1:a8:8f:4d:74:92:d4:70:
d9:69:8f:b2:be:92:71:8c:4e:63:03:d8:b9:24:f3:e3:e8:64:
78:bb:4b:2b:6c:97:4c:8c:75:55:35:5a:1e:11:7e:1d:f0:7c:
96:7d:14:da:c5:7f:28:27:23:b1:58:92:9f:69:2f:96:43:1c:
82:ec:2a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWUpcbM3vz0Qu9mtwsU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjU1MTBkYTE0YTkzMGFkNzFlMWRlM2E1MjljN2NjMWJm
NGM1YWMwHhcNMjYwMzI5MDMwMDQ0WhcNMjYwMzMwMDMwMDQ0WjAzMTEwLwYDVQQD
EygwNDU5YTk3YzVjYWIyN2YwZDA5NWI5MWY4NmMyZjc3M2E5YjNjMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKyCxiCHD1okPzCdfxpW8fAkxcRH
vyHpBbxQKis5vlcHA6w5XQh90pfL6yqovV7UbRqOssRcCdssLHnQCKMasTevP7cc
5XdMoLsRps+lwtvt24WvZBmzoIHBallp6uPWn78cbrVeICMpxEkBfDWC92uOgKq9
2T/1pX6EudkPRW8ABYvQfIi5OANoiQMqxIZ00CSqVb2x/B4I/XEiZcl3ibytrQnr
ZHDh47l1tKozpY5wyEegZDC9rSjmfSfJC2lrZ8q8TFcW1LzZF2pVAm8//ENRMAKP
jpfoVyjl4IGh5JXLa86pjTFBPQEED17VjxMBGG8MXKXdVQl2VpaGNrlBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARZqXxcqyfw0JW5H4bC93Ops8IbMB8GA1UdIwQY
MBaAFES1UQ2hSpMK1x4d46Upx8wb9MWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUt
ODZjM2IzMWEyZjhjLzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUtODZjM2IzMWEyZjhj
LzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIdeExB0
O9eGEIHWGzTm/d7ytyagdPsXUe4eYGa5gLux8lFnSlUSKd7H69GOITZAu/66JPVW
+E7s091cabzDHyoMbMDVKcs9p7QXvBFOfYTekJ/nale7dOZZVc9LEaWQG7Z9837C
+B1/J/W84CDXWE2HJtj0oR8GPAH25JMiNHE2MV2sTG5BTjkKfPqyKc2F/CyVY65u
rs1SgW0oC6IBrpcAPP/L6sxtAQ7uINuEHb8p6jM+O9riF32Pwl1k9fGoj010ktRw
2WmPsr6ScYxOYwPYuSTz4+hkeLtLK2yXTIx1VTVaHhF+HfB8ln0U2sV/KCcjsViS
n2kvlkMcguwqPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:31 2026 by rpki-client