Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json)
Hash identifier: BUbGqdY/3GSumC9tKj3VnUqMZ9xTlyTgSAiIYWf/LRQ=
Subject key identifier: 8E:5E:88:61:98:D0:BB:21:2E:6E:9D:AC:0C:21:60:2F:68:03:10:C7
Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Certificate serial: 019D386612C75348E0AF0D9B2CE32ADE8FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: zdr3vuFlqwqVC4/jABeUU9lAt7lZNywrPjJHIpUlQzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:12:c7:53:48:e0:af:0d:9b:2c:e3:2a:de:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=8e5e886198d0bb212e6e9dac0c21602f680310c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:cf:d1:c6:99:34:57:93:25:13:4d:cb:3a:
13:00:45:31:94:9e:d6:b6:d7:56:21:f3:ee:35:55:
80:9b:a7:fe:39:5d:50:3c:38:2b:6e:f0:e1:ff:ea:
48:e5:b3:eb:5e:f4:c0:e3:30:24:18:d1:c3:43:bf:
3a:1c:58:ed:f3:1b:cf:ce:8d:30:e7:7e:22:ae:82:
ed:ed:1e:29:83:b6:fd:8d:de:1b:ea:99:85:25:ef:
52:8a:2f:e9:fe:49:72:79:8b:2e:22:b3:f2:c3:a3:
c9:b5:f9:7e:bd:3b:05:69:b0:18:3e:91:0c:4f:17:
22:a1:1e:14:7e:a3:35:1b:f5:36:3e:29:e0:14:f8:
3c:f3:fd:94:79:8a:ac:76:d5:c2:6d:60:75:a1:95:
9a:d0:f0:f1:36:b7:96:ac:57:ce:b8:dd:89:1d:98:
39:43:b1:f6:82:cb:b7:db:b8:83:37:ad:85:bb:ed:
7a:2f:df:db:1f:ad:4c:c4:b6:f0:66:2a:fd:a8:63:
a6:16:56:d6:27:56:59:0c:bd:ec:d8:90:79:d6:6a:
db:1d:4c:10:2c:fe:8a:cb:4f:84:85:d5:01:36:e4:
5e:35:8d:50:c8:a1:2a:9d:57:37:18:be:3a:8a:68:
77:c3:23:4c:29:99:78:09:e3:85:4c:2d:d4:7c:a0:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:88:61:98:D0:BB:21:2E:6E:9D:AC:0C:21:60:2F:68:03:10:C7
X509v3 Authority Key Identifier:
keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:1b:27:ec:7b:15:e3:e3:4a:bd:68:22:6b:41:82:ec:b1:
5c:19:88:df:2f:e9:e0:ac:64:93:5b:4f:56:61:17:21:23:e4:
d7:35:6a:7f:84:d9:11:0b:ab:e6:58:2e:6c:30:04:40:7a:d2:
6b:f7:be:a5:f8:8a:de:fa:bc:e9:92:4a:91:55:c1:48:30:ed:
5d:78:e5:6f:f1:77:35:04:b9:8e:5b:7d:be:f9:fd:ef:6c:66:
c4:c0:75:c8:e0:24:68:f7:d6:b3:58:1e:af:fc:7d:8a:d6:ef:
36:69:69:e4:66:26:67:c1:da:eb:c8:94:fa:2c:1b:e8:db:fe:
bb:1d:25:7f:3c:59:6b:79:ae:fd:19:13:ee:91:08:c9:ef:ba:
f8:e8:71:2a:7e:2b:1a:5d:71:c7:8b:6a:d5:3a:94:fa:77:ad:
9e:03:ac:b1:8c:99:14:36:2d:fa:92:9c:73:f3:93:50:99:81:
30:1c:1b:03:d6:a6:d1:10:64:99:72:76:bf:1d:c8:ff:ec:6b:
0f:6b:67:88:e0:4d:4a:f1:42:49:9a:68:cf:9c:2b:5a:77:d1:
e4:28:f5:72:d8:ed:39:33:c5:f4:1c:40:d9:cb:0a:5d:bb:13:
29:99:07:01:40:35:01:c7:77:cb:0c:dc:22:ba:1c:bc:dc:c7:
fe:d9:bd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZhLHU0jgrw2bLOMq3o/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjk0OTQyNjZhMzg3MTkwNDRkODI5YTRhMGE4ZjE3YTQw
NzA0ZTgwHhcNMjYwMzI5MDcwMTQ2WhcNMjYwMzMwMDcwMTQ2WjAzMTEwLwYDVQQD
Eyg4ZTVlODg2MTk4ZDBiYjIxMmU2ZTlkYWMwYzIxNjAyZjY4MDMxMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfP0caZNFeTJRNNyzoTAEUxlJ7W
ttdWIfPuNVWAm6f+OV1QPDgrbvDh/+pI5bPrXvTA4zAkGNHDQ786HFjt8xvPzo0w
534iroLt7R4pg7b9jd4b6pmFJe9Sii/p/klyeYsuIrPyw6PJtfl+vTsFabAYPpEM
TxcioR4UfqM1G/U2PingFPg88/2UeYqsdtXCbWB1oZWa0PDxNreWrFfOuN2JHZg5
Q7H2gsu327iDN62Fu+16L9/bH61MxLbwZir9qGOmFlbWJ1ZZDL3s2JB51mrbHUwQ
LP6Ky0+EhdUBNuReNY1QyKEqnVc3GL46imh3wyNMKZl4CeOFTC3UfKCHFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5eiGGY0LshLm6drAwhYC9oAxDHMB8GA1UdIwQY
MBaAFK65SUJmo4cZBE2CmkoKjxekBwToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUt
MmE3YjU4YmRmOTQ1LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUtMmE3YjU4YmRmOTQ1
LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqUbJ+x7
FePjSr1oImtBguyxXBmI3y/p4Kxkk1tPVmEXISPk1zVqf4TZEQur5lgubDAEQHrS
a/e+pfiK3vq86ZJKkVXBSDDtXXjlb/F3NQS5jlt9vvn972xmxMB1yOAkaPfWs1ge
r/x9itbvNmlp5GYmZ8Ha68iU+iwb6Nv+ux0lfzxZa3mu/RkT7pEIye+6+OhxKn4r
Gl1xx4tq1TqU+netngOssYyZFDYt+pKcc/OTUJmBMBwbA9am0RBkmXJ2vx3I/+xr
D2tniOBNSvFCSZpoz5wrWnfR5Cj1ctjtOTPF9BxA2csKXbsTKZkHAUA1Acd3ywzc
IrocvNzH/tm9JA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:55 2026 by rpki-client