Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: ODxG5ZVIiq+g3QXth0lLrOuCdERtjJZ5fLIryMWgOeI=
Subject key identifier: 22:BC:87:FD:F1:F7:EE:7F:73:44:B9:49:B9:18:80:F2:DC:4C:6D:89
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 019D3789C2CFB7E7112F10DB133EA60DECD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 178A
Signing time: Sun 29 Mar 2026 03:01:08 +0000
Manifest this update: Sun 29 Mar 2026 03:01:08 +0000
Manifest next update: Mon 30 Mar 2026 03:01:08 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: h8DWonFTOSDxcoCAPt0NcWJZmScdZWfTN6uXOjlCTAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c2:cf:b7:e7:11:2f:10:db:13:3e:a6:0d:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Mar 29 03:01:08 2026 GMT
Not After : Mar 30 03:01:08 2026 GMT
Subject: CN=22bc87fdf1f7ee7f7344b949b91880f2dc4c6d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:3c:25:22:cb:67:dc:2b:5c:53:0d:99:ea:
12:8f:4c:19:ed:f6:31:11:e0:d9:eb:5d:07:fc:d6:
fd:e5:f1:f3:9c:9d:49:ca:3a:66:97:e4:26:ae:8d:
5c:32:0d:d9:52:3c:c5:c6:bc:a5:e7:2b:0e:32:58:
4f:5b:dc:a9:dc:24:24:34:26:fa:dd:30:02:36:cc:
72:1d:1d:2a:5d:56:9d:81:58:cb:86:f4:5d:2f:a1:
7b:f5:6a:3e:2a:e3:77:8e:19:ce:4b:e4:b3:d5:72:
f1:76:f0:9c:42:19:47:d9:f7:89:54:d8:97:57:a6:
40:25:90:78:ef:50:80:b2:33:49:a6:ae:42:e5:22:
f6:a5:a0:51:4a:6b:aa:07:a1:e4:a4:e1:96:be:da:
9e:88:5a:c1:54:38:d0:d4:7a:89:7e:6b:8f:3b:19:
0c:a7:71:df:19:70:a5:9d:f6:52:4d:66:4d:19:fc:
10:cc:93:be:02:d8:1c:c7:9c:c0:04:33:25:d6:90:
e9:13:24:9f:78:ae:7f:69:4a:83:ee:cd:4d:b5:1e:
57:8d:83:1d:0a:08:94:54:c9:ef:d6:5b:c0:a9:17:
08:de:fc:97:75:65:bc:d6:6b:b2:5c:ce:a0:96:ef:
10:1c:7c:76:2f:9b:0a:4d:cb:10:e9:73:05:7d:b9:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BC:87:FD:F1:F7:EE:7F:73:44:B9:49:B9:18:80:F2:DC:4C:6D:89
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:97:37:12:01:c1:e4:43:dd:d1:18:01:5a:f0:cd:53:a9:
0c:07:3c:08:81:49:ef:98:0d:37:2d:dd:df:bc:48:d3:c0:47:
89:8a:7a:b8:86:ab:ac:b6:c0:81:89:5b:49:0e:ec:d4:6e:6b:
2c:9c:4c:fd:ea:fe:70:11:1d:3a:36:e0:0b:1d:87:09:df:c3:
60:28:2b:92:1b:28:e4:dd:81:6a:86:b4:b2:70:ed:11:16:81:
e4:12:b0:4e:c0:53:a5:83:af:21:7c:40:95:e4:86:59:d8:1b:
a6:97:5a:dc:6c:43:a7:14:63:ed:0b:10:f9:0e:65:9a:73:40:
4f:b0:5c:fd:95:28:8e:32:64:f6:59:b1:89:a1:07:ee:be:4c:
42:ef:a5:5b:25:4d:06:e8:f1:9f:b7:aa:a5:a2:81:91:1f:34:
ed:a4:28:86:f4:5d:d8:be:ef:e2:a0:ff:5e:54:73:0f:50:5f:
19:49:23:fa:01:a3:f1:12:fa:b3:b7:ee:32:e8:dc:28:65:11:
72:4c:10:04:5f:91:54:65:e5:46:dc:8b:99:33:09:05:63:38:
f0:bc:5f:9f:68:0e:a5:3d:49:25:14:7a:bf:9e:a0:55:90:31:
f4:bc:49:47:42:21:4b:5b:ac:c1:bc:69:a1:0b:36:8e:9e:58:
9d:2e:b2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03icLPt+cRLxDbEz6mDezTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjYwMzI5MDMwMTA4WhcNMjYwMzMwMDMwMTA4WjAzMTEwLwYDVQQD
EygyMmJjODdmZGYxZjdlZTdmNzM0NGI5NDliOTE4ODBmMmRjNGM2ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnU8JSLLZ9wrXFMNmeoSj0wZ7fYx
EeDZ610H/Nb95fHznJ1Jyjpml+Qmro1cMg3ZUjzFxryl5ysOMlhPW9yp3CQkNCb6
3TACNsxyHR0qXVadgVjLhvRdL6F79Wo+KuN3jhnOS+Sz1XLxdvCcQhlH2feJVNiX
V6ZAJZB471CAsjNJpq5C5SL2paBRSmuqB6HkpOGWvtqeiFrBVDjQ1HqJfmuPOxkM
p3HfGXClnfZSTWZNGfwQzJO+Atgcx5zABDMl1pDpEySfeK5/aUqD7s1NtR5XjYMd
CgiUVMnv1lvAqRcI3vyXdWW81muyXM6glu8QHHx2L5sKTcsQ6XMFfbm73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK8h/3x9+5/c0S5SbkYgPLcTG2JMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNCXNxIB
weRD3dEYAVrwzVOpDAc8CIFJ75gNNy3d37xI08BHiYp6uIarrLbAgYlbSQ7s1G5r
LJxM/er+cBEdOjbgCx2HCd/DYCgrkhso5N2Baoa0snDtERaB5BKwTsBTpYOvIXxA
leSGWdgbppda3GxDpxRj7QsQ+Q5lmnNAT7Bc/ZUojjJk9lmxiaEH7r5MQu+lWyVN
Bujxn7eqpaKBkR807aQohvRd2L7v4qD/XlRzD1BfGUkj+gGj8RL6s7fuMujcKGUR
ckwQBF+RVGXlRtyLmTMJBWM48Lxfn2gOpT1JJRR6v56gVZAx9LxJR0IhS1uswbxp
oQs2jp5YnS6y5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:09 2026 by rpki-client