Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: djsQDlOqjUJr6CSzkLIbd123UaSF3akGsbAhyeoeyQ8=
Subject key identifier: 0C:9E:B9:D3:E0:F9:0C:7A:69:8C:0C:51:03:69:92:E5:F9:B2:7D:8F
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019D38D307417A8E749BC883DB58E2BCDBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0C3F
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: DVgHWITeLJmPOyOEjNb9Myj9TYNCql4rEOGmYalW6p0=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:07:41:7a:8e:74:9b:c8:83:db:58:e2:bc:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=0c9eb9d3e0f90c7a698c0c51036992e5f9b27d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:a4:ed:73:9d:10:bf:97:b5:20:22:17:b2:
56:05:cb:91:74:b0:1d:5c:57:2a:d6:df:d0:06:f7:
01:aa:cb:64:dd:7a:1e:45:06:ed:88:68:ff:ea:d3:
1c:39:e6:fb:f0:a6:59:17:72:43:92:f5:dd:97:c9:
d8:f2:ec:ce:77:95:f7:58:f4:f5:cd:3d:f9:67:e3:
ed:c2:00:79:4b:46:0e:70:e9:f4:11:bf:e4:45:bd:
3e:54:d6:8d:d3:63:24:d0:5f:c7:74:f4:49:1f:66:
e3:0b:ec:0f:34:f2:5b:1e:25:52:32:0e:94:55:10:
a2:03:be:c2:a2:b3:95:c7:d9:15:70:c2:a8:13:4e:
fd:f1:c7:62:e1:6e:61:16:1b:41:50:2b:a0:a1:c2:
ad:86:0b:24:39:84:a7:d5:67:d9:0d:68:4d:8e:69:
95:2b:f9:6a:c2:2f:27:82:73:3b:b4:50:dc:bd:3d:
d1:f2:6f:52:1a:cc:47:ff:7a:60:54:1d:73:e6:e9:
0e:e7:8e:f0:22:aa:8e:93:11:7d:67:a6:6f:31:25:
47:8b:1d:65:bc:6c:60:8f:a8:ca:10:1e:e2:14:86:
8b:54:2d:4c:e9:f6:81:97:4c:ca:70:49:5f:c9:38:
24:8e:dd:34:75:03:40:13:2e:67:7d:64:6e:0d:fe:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:B9:D3:E0:F9:0C:7A:69:8C:0C:51:03:69:92:E5:F9:B2:7D:8F
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:86:05:59:70:03:6c:ab:6a:94:13:22:f1:5b:e3:a4:cb:
76:15:38:2e:0e:7e:9c:e4:4e:6f:b1:ff:1e:86:dc:79:ef:ce:
51:cc:1d:a9:af:57:ef:16:e3:62:c1:d2:f9:08:9e:4a:43:dc:
07:b1:c7:6e:57:fb:89:c0:f8:b3:82:64:9e:9a:e2:c5:6c:ce:
80:04:1d:80:23:c7:a4:d7:2b:7d:76:83:95:9c:50:a2:70:99:
2a:b3:ad:c8:70:c1:e6:5f:99:ac:8c:75:61:f6:61:be:42:bc:
ab:a2:19:48:75:83:69:b2:34:cc:14:a9:34:71:fa:24:59:41:
b6:03:96:78:77:ca:73:24:33:50:19:04:82:90:31:aa:36:08:
37:e9:78:2a:38:48:85:f1:43:f4:2d:a5:c4:cf:5d:94:78:49:
ca:88:5f:62:c7:6c:2c:8d:48:69:89:8f:da:1a:da:c4:9a:60:
51:04:9d:fe:8f:88:71:40:d3:b4:15:b1:54:3f:e7:6b:cf:88:
c6:39:e6:e9:60:ba:b9:e2:df:24:59:9b:3f:74:18:fb:ed:d6:
1e:0f:08:a3:f7:f2:ba:cb:78:e9:17:9a:79:9d:29:7f:5b:8c:
53:b5:d4:89:c0:3f:d7:e6:da:40:b8:16:ad:18:6d:4f:cb:d2:
88:b5:db:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wdBeo50m8iD21jivNvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm
YjliMDUwHhcNMjYwMzI5MDkwMDQ3WhcNMjYwMzMwMDkwMDQ3WjAzMTEwLwYDVQQD
EygwYzllYjlkM2UwZjkwYzdhNjk4YzBjNTEwMzY5OTJlNWY5YjI3ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdyk7XOdEL+XtSAiF7JWBcuRdLAd
XFcq1t/QBvcBqstk3XoeRQbtiGj/6tMcOeb78KZZF3JDkvXdl8nY8uzOd5X3WPT1
zT35Z+PtwgB5S0YOcOn0Eb/kRb0+VNaN02Mk0F/HdPRJH2bjC+wPNPJbHiVSMg6U
VRCiA77CorOVx9kVcMKoE0798cdi4W5hFhtBUCugocKthgskOYSn1WfZDWhNjmmV
K/lqwi8ngnM7tFDcvT3R8m9SGsxH/3pgVB1z5ukO547wIqqOkxF9Z6ZvMSVHix1l
vGxgj6jKEB7iFIaLVC1M6faBl0zKcElfyTgkjt00dQNAEy5nfWRuDf54hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyeudPg+Qx6aYwMUQNpkuX5sn2PMB8GA1UdIwQY
MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt
NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk
LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkCGBVlw
A2yrapQTIvFb46TLdhU4Lg5+nOROb7H/Hobcee/OUcwdqa9X7xbjYsHS+QieSkPc
B7HHblf7icD4s4JknprixWzOgAQdgCPHpNcrfXaDlZxQonCZKrOtyHDB5l+ZrIx1
YfZhvkK8q6IZSHWDabI0zBSpNHH6JFlBtgOWeHfKcyQzUBkEgpAxqjYIN+l4KjhI
hfFD9C2lxM9dlHhJyohfYsdsLI1IaYmP2hraxJpgUQSd/o+IcUDTtBWxVD/na8+I
xjnm6WC6ueLfJFmbP3QY++3WHg8Io/fyust46ReaeZ0pf1uMU7XUicA/1+baQLgW
rRhtT8vSiLXbyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:52 2026 by rpki-client